Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5615314f-f577-37d7-b60a-cca01c63d604.roa
File:                     5615314f-f577-37d7-b60a-cca01c63d604.roa (raw, json)
Hash identifier:          zB7u8s8j5cVx9efdHQWVR1Cp0Vmi86UD23n37o4aQVc=
Subject key identifier:   4A:49:CC:13:F8:56:D1:20:79:C4:0F:7A:F8:CB:C0:FA:7F:65:DE:97
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411EEA89EB08B29C76E80AA
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5615314f-f577-37d7-b60a-cca01c63d604.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.197.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:ee:a8:9e:b0:8b:29:c7:6e:80:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=50ce84fe-423b-4d17-9f8d-b5276ca5d8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:78:81:1d:8e:eb:2f:d5:01:db:3b:16:25:
                    e5:cb:a9:ad:d6:8e:de:8a:3f:75:83:6e:50:99:11:
                    b7:1c:6c:ae:1b:51:61:47:80:04:ce:e4:22:0a:2a:
                    ba:2e:bf:20:9f:7d:ce:2f:43:0c:7e:67:04:5a:2e:
                    12:c4:e8:5e:c3:ca:b8:57:94:a3:ad:4a:22:71:9a:
                    a3:f4:6f:c5:c3:0c:0a:49:a8:fa:4d:5c:0b:cf:3f:
                    53:56:d0:f6:49:4c:68:ec:b3:23:e5:bc:f1:b3:40:
                    0d:6e:ea:86:de:bd:44:db:bb:2f:03:be:53:4b:69:
                    61:9b:e8:96:c8:c3:85:3e:a6:c8:3b:cc:9f:f5:82:
                    e4:5d:96:67:41:b8:4b:85:46:8a:99:ab:2b:e4:19:
                    34:d1:bc:46:20:65:94:d3:23:6e:cc:ae:a7:fb:ef:
                    d3:27:97:c7:42:89:66:aa:97:05:9e:f3:50:22:00:
                    85:b7:03:84:05:43:6e:1f:d5:c1:b2:3d:c6:a1:42:
                    c3:b0:78:83:54:9d:98:6b:c8:58:a2:a3:c8:a8:34:
                    10:5e:75:ab:a6:02:c5:ca:21:03:e8:9c:46:ee:29:
                    f2:7b:05:55:50:80:20:bf:0b:22:0c:3c:4b:ae:ec:
                    32:9f:92:5c:ed:5f:19:23:1b:8b:19:34:86:62:a7:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:49:CC:13:F8:56:D1:20:79:C4:0F:7A:F8:CB:C0:FA:7F:65:DE:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5615314f-f577-37d7-b60a-cca01c63d604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:49:1e:67:98:e1:ce:4c:0a:91:fe:cb:c7:52:8e:6c:a4:2d:
         06:73:c4:de:fb:a9:d9:61:cd:ad:1e:c8:a8:b9:24:a4:ba:b4:
         92:88:ac:78:f3:66:53:31:93:a1:45:6c:6d:e5:22:e7:a1:76:
         39:cd:5b:ed:fa:31:66:db:87:79:dc:8e:66:43:03:2d:ed:e8:
         b6:15:23:2a:9b:96:a1:16:4f:50:ba:09:a1:73:0b:5c:f9:eb:
         6d:90:32:23:6b:5a:d3:f7:cb:8a:cc:e9:5d:42:a7:22:5c:ea:
         71:30:31:0b:cd:ce:a1:20:88:89:26:bb:f3:ed:ca:d9:e2:95:
         f1:ff:f9:00:c8:36:46:7d:79:24:8a:df:9e:1a:e0:36:fe:65:
         8c:51:91:38:d3:a3:19:3c:73:36:39:ba:45:03:54:29:7f:bd:
         08:c3:33:bc:0a:41:a2:13:45:24:dd:c3:de:e9:8d:fd:4c:48:
         1a:47:12:bb:d8:37:74:e0:e3:4a:7d:e5:8f:91:c7:4b:3d:78:
         4d:20:7d:d6:5b:02:8c:0b:8c:6e:2e:8d:aa:9f:10:e6:fd:83:
         d7:6d:e3:c5:f3:7e:9d:f6:57:48:ef:3b:66:7d:1d:96:4f:76:
         b8:f5:fa:a9:e9:f1:4c:65:24:0b:20:41:7b:ea:83:2e:01:be:
         c5:1f:fd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:11:36 2025 by rpki-client