Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4b8c5b0-bb95-3fa5-8aaa-9922d9b05cd9.roa
File:                     e4b8c5b0-bb95-3fa5-8aaa-9922d9b05cd9.roa (raw, json)
Hash identifier:          fT1R2tXBv0B1i7/njPTj1YXNIab9YTg2gL4C2QpwObw=
Subject key identifier:   74:D0:08:86:A0:8F:A9:37:0B:62:26:FE:96:BC:C8:69:B2:A1:C7:D4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD06EB9949C4C082E18700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4b8c5b0-bb95-3fa5-8aaa-9922d9b05cd9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:06:eb:99:49:c4:c0:82:e1:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=d4b7e383-4b72-44d5-8847-44d992d098b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cc:3e:84:d0:c9:cb:f9:b0:29:fb:93:19:ba:
                    e0:9b:48:89:df:90:fd:b0:f0:bd:a5:a9:fa:7d:63:
                    48:e0:42:5a:a4:ea:e1:58:a9:62:76:30:02:87:f0:
                    8d:ad:a5:82:b2:fe:5b:3e:42:30:ea:b4:c1:9c:36:
                    15:6f:3f:6a:f8:b3:1a:18:c9:80:64:3c:83:bd:47:
                    88:f1:c4:02:5f:99:82:be:b5:71:f2:20:83:96:b1:
                    97:91:b3:68:92:a8:af:48:fa:9f:1e:95:eb:b4:b9:
                    8e:49:f8:18:ff:db:90:90:4e:6e:50:2c:26:d7:05:
                    9c:cc:49:2a:17:fb:f0:10:04:c4:c1:46:ec:0d:a8:
                    8c:5c:70:6c:d3:8e:32:1b:ca:9f:a9:67:f9:74:59:
                    64:cb:31:f7:1f:8b:ae:52:74:fd:68:dd:02:6c:32:
                    e1:dc:62:f5:29:41:90:5d:3d:11:fd:48:9e:e0:33:
                    2d:4c:09:9f:45:d5:3c:c5:40:f8:ac:1c:d5:2e:82:
                    55:19:91:8e:2a:c8:b4:0d:43:8f:df:65:7e:a1:9e:
                    96:f0:7b:d5:a1:9c:35:3d:d0:a2:5f:cc:d1:5d:1c:
                    94:10:91:e1:1f:4b:8e:de:71:80:ea:8c:8c:4e:b7:
                    94:f4:73:af:e4:7e:d6:14:1f:f7:f2:19:c3:1c:c6:
                    c1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D0:08:86:A0:8F:A9:37:0B:62:26:FE:96:BC:C8:69:B2:A1:C7:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4b8c5b0-bb95-3fa5-8aaa-9922d9b05cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:91:0f:6e:a3:eb:ae:78:3f:6c:ab:3f:ac:c0:fb:a7:42:18:
         af:c1:65:11:57:4f:4b:74:b9:f1:bb:f2:9e:3d:19:5a:49:17:
         45:ae:a9:71:60:b9:5c:25:3e:2d:89:8f:80:96:4b:33:a5:99:
         b3:9d:fe:75:14:68:be:ff:16:32:fd:cc:e5:c1:65:d5:59:d9:
         ec:9b:fc:68:92:72:c4:4b:5b:cb:25:d6:df:96:c6:a8:37:fb:
         a9:b2:16:a0:d4:c9:4a:0d:69:44:80:18:ea:f3:5d:02:c4:91:
         25:67:9e:fe:24:65:67:f8:45:b3:68:72:e1:38:66:c3:d2:7d:
         45:fd:63:6a:e2:28:ac:b3:2c:30:db:cb:87:c6:a2:de:e8:5b:
         62:dc:57:13:2e:06:7f:a9:67:79:3d:a4:d6:ba:33:37:16:b4:
         af:0e:f3:30:3f:fd:ee:4d:61:29:4a:c1:f1:7f:c7:3d:05:45:
         3d:ce:86:fa:ea:70:5c:2b:5d:ad:df:be:b1:e8:d2:cf:32:e9:
         31:11:09:f6:d2:d0:bb:32:28:0f:85:53:37:a4:1f:19:29:94:
         2e:6c:37:13:ef:bb:eb:69:fc:f5:64:9b:17:81:a4:45:f7:ad:
         0f:d9:0b:65:cf:51:15:85:8e:69:cc:67:8f:53:e1:c4:0a:b1:
         76:9e:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:51 2025 by rpki-client