Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f313b0c2-243e-3966-a283-4b46b3d19948.roa
File:                     f313b0c2-243e-3966-a283-4b46b3d19948.roa (raw, json)
Hash identifier:          HFHepgbzuNVBTpNmfkzH6v72TdsIB1IuFSEroKvREnc=
Subject key identifier:   47:4D:82:44:FE:4C:7A:2C:52:85:72:A5:A0:4F:62:0B:48:6F:90:59
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD06DFA9800E463E5B9E40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f313b0c2-243e-3966-a283-4b46b3d19948.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        99.197.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:06:df:a9:80:0e:46:3e:5b:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=38ed98d8-c8fe-46af-8ad5-fd909b7940b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ed:92:c1:27:7f:56:71:be:d3:7c:05:46:ed:
                    03:12:99:44:7b:92:15:f9:00:d9:58:28:07:b8:9c:
                    e5:45:cd:c6:95:b8:a6:a6:ec:3e:90:d4:ae:36:3c:
                    a1:57:44:85:85:75:c2:16:6a:a4:be:12:cb:a6:b2:
                    99:10:72:1f:47:a9:34:fb:8a:dd:d6:d8:6c:20:7f:
                    6d:16:4e:c4:02:0d:0a:36:25:18:11:54:ef:fd:d8:
                    15:aa:3d:24:8d:db:25:de:9f:fe:78:c9:a4:3e:43:
                    0f:08:a0:12:78:7e:ae:09:e3:30:f3:58:9c:92:86:
                    38:74:2a:a7:7c:1e:8c:e8:97:30:92:02:9d:bc:0f:
                    34:c2:da:57:be:6a:ea:47:0c:d7:af:e8:8a:78:c6:
                    28:a8:23:e3:6f:b0:d3:90:01:93:65:ef:37:52:80:
                    9c:8d:fe:d8:72:4d:4f:db:6f:34:70:c5:e7:28:61:
                    f7:29:fd:a7:e7:ce:9a:85:ef:c0:6c:3d:06:da:bf:
                    1c:b2:fa:5c:0a:0c:9d:60:00:73:f8:87:b8:c7:76:
                    29:b0:41:99:f0:57:2f:31:1e:53:94:cf:a5:26:1f:
                    61:99:ba:84:e4:b0:d8:20:4a:7f:2e:38:cb:88:2c:
                    2b:35:0c:68:9f:91:cd:53:1c:91:99:2f:04:97:13:
                    4c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4D:82:44:FE:4C:7A:2C:52:85:72:A5:A0:4F:62:0B:48:6F:90:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f313b0c2-243e-3966-a283-4b46b3d19948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:0a:13:5c:b8:1c:1f:20:92:ea:7c:c2:33:1c:ba:f3:92:be:
         9d:63:f8:17:bf:11:0a:bb:d0:c7:80:62:64:22:6b:24:c0:9d:
         d5:87:bf:94:8e:a5:c2:03:f0:89:32:1c:5a:00:23:df:35:1f:
         21:2d:60:90:34:12:40:d0:43:ea:cb:46:e9:15:77:0f:18:0e:
         82:44:6e:c0:73:bc:17:50:f9:fa:13:13:94:dd:90:77:ad:1b:
         71:4f:fa:b6:d2:e2:2a:6e:e8:68:6c:17:1c:60:2f:85:29:de:
         a1:08:b7:50:d4:70:6e:56:e4:74:03:49:19:51:83:55:40:9c:
         a7:4f:02:18:e8:98:cf:a5:76:40:f9:f2:50:bf:79:2f:a9:5a:
         af:64:9c:a0:75:a9:a7:a0:a6:70:06:0e:61:9f:7d:7e:ac:e7:
         54:b2:58:d7:5f:45:81:d9:f5:2b:6c:a2:7f:58:c3:ed:13:84:
         01:2f:da:d8:d5:67:51:b9:e0:e0:19:dd:f5:13:9b:68:82:13:
         7d:ed:72:a3:e4:69:b5:be:8f:4c:59:dc:3a:24:6f:0d:d0:d0:
         f1:16:82:99:33:c7:c6:03:bc:fd:08:9f:83:6e:f1:86:63:ab:
         7e:b8:dc:9b:b3:56:39:46:18:d7:fe:f1:bc:51:10:a0:63:17:
         04:cf:d7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:57 2025 by rpki-client