Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1ae04aab-989a-3c12-9661-4c14e08584b9.roa
File:                     1ae04aab-989a-3c12-9661-4c14e08584b9.roa (raw, json)
Hash identifier:          k1lHkHC90jvSMU7PIgK7XWX0/CueHnwwNJ+cei82yF0=
Subject key identifier:   F1:73:E6:8D:1D:DC:03:2D:BC:5A:38:61:51:5E:0E:89:FC:00:2F:5F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E80A06080FD46CE096C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1ae04aab-989a-3c12-9661-4c14e08584b9.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e8:0a:06:08:0f:d4:6c:e0:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=eb099fd7-03c1-4315-9525-b659b0d78685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:39:46:e2:ee:51:ef:f2:58:0c:83:72:cf:ce:
                    b0:6f:8e:ee:8a:29:5a:8e:14:b3:1b:9d:75:55:9c:
                    be:22:6f:6d:9b:d5:75:4e:7d:fa:f8:41:ed:4d:a8:
                    33:63:0e:84:56:43:8d:bd:35:3c:5f:15:05:05:df:
                    c9:29:ed:d3:72:ef:f7:fc:cf:a8:f4:aa:7e:c9:14:
                    04:bc:bb:f4:8a:fb:e0:14:71:72:b1:52:a3:5d:4b:
                    e4:c8:d8:89:99:fd:74:87:3b:e8:5f:f0:f1:bb:e4:
                    56:2e:73:9a:7d:f4:96:d0:e1:33:5f:cd:82:f0:0a:
                    ff:79:5e:97:a2:29:c0:71:13:a1:96:fe:9f:52:e0:
                    03:13:a6:36:4f:0b:8e:49:c5:3a:a6:f5:ca:ae:94:
                    6d:6f:a7:c5:1c:a1:ef:92:63:d2:43:f4:36:11:70:
                    bc:e5:ae:27:50:8d:79:ba:e6:bc:d3:d2:c2:23:82:
                    8d:71:36:7c:a2:6f:96:de:a7:aa:ba:99:b4:f5:91:
                    78:aa:7b:ae:cb:c1:8d:dc:c3:9d:36:59:91:fd:36:
                    8d:db:57:15:ef:33:7f:f9:a2:a9:f0:30:6b:98:a7:
                    c5:e7:05:af:2f:72:98:28:f4:61:96:dd:19:92:66:
                    d0:4c:e6:95:0e:b0:3f:e2:2b:bb:e5:98:ca:0f:19:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:73:E6:8D:1D:DC:03:2D:BC:5A:38:61:51:5E:0E:89:FC:00:2F:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1ae04aab-989a-3c12-9661-4c14e08584b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:4b:38:44:e5:c0:67:7c:fe:20:b8:ba:6a:7d:8a:5a:e0:a0:
         f0:d7:e3:3a:ad:c5:e7:fa:4f:df:18:c4:c5:4e:c0:dc:af:10:
         97:cb:ef:bf:08:73:03:53:4b:0c:e6:15:6a:5e:71:99:5e:24:
         7c:74:d1:8a:4e:9e:18:e9:aa:dd:ea:d2:90:b9:b7:3e:5a:0a:
         a4:bc:82:74:23:c8:88:a1:65:ea:12:65:9a:03:ff:ff:3b:4d:
         ae:e9:3f:b3:be:71:31:fe:3f:7b:c4:6b:5f:f7:e3:81:22:2a:
         b3:07:da:d1:ba:94:3b:8c:28:1d:c5:4b:5c:0f:f5:70:be:ea:
         79:0b:04:a1:be:c1:7d:91:63:07:04:82:a5:fe:5e:63:e8:70:
         95:d7:43:c5:2c:09:89:62:50:56:4c:be:d0:95:7c:a8:d3:17:
         9d:0e:b7:fa:e1:e6:3a:53:86:40:84:71:26:2f:27:cf:78:39:
         37:25:5e:9a:66:5d:c0:e5:d0:1b:7d:ee:6d:3e:e9:8f:07:ea:
         69:6a:60:9c:29:83:0c:9f:3e:6e:56:3b:6f:df:f1:b2:d9:92:
         ff:69:ae:34:68:e6:9d:8b:f3:26:1a:4c:3c:a0:1b:e7:06:51:
         0f:5e:62:68:b4:ab:d2:e6:85:cc:cc:f1:a2:de:b9:56:7c:07:
         2b:0a:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:15:45 2025 by rpki-client