Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875222fc-efa2-370f-9332-03452d565844.roa
File:                     875222fc-efa2-370f-9332-03452d565844.roa (raw, json)
Hash identifier:          gjVAz3eapmCT9K/fIltTRiURaFR4nmNMyNyHqjWxpvg=
Subject key identifier:   1B:F4:87:79:F0:D0:3A:A9:61:2C:AC:51:59:98:F9:F1:53:14:B1:5F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E250328A60F956A71CC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875222fc-efa2-370f-9332-03452d565844.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e2:50:32:8a:60:f9:56:a7:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c191dcfc-6be8-4f0d-b36f-efa579789192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:b8:98:fc:e2:31:c9:f8:eb:23:97:7d:a6:
                    f0:1a:6e:0a:f0:63:d7:c6:ec:ea:bb:5c:b9:16:76:
                    79:3a:6b:c1:9d:03:a7:22:33:20:9c:ba:24:45:da:
                    33:b0:a7:89:8b:24:c6:6d:ed:67:bc:96:6f:62:2e:
                    fb:15:5c:a1:81:e2:ef:11:71:af:7d:a1:e0:0e:f4:
                    49:4e:08:5d:9f:b4:10:78:df:b3:69:cc:10:c8:b5:
                    23:23:05:7b:80:39:b1:aa:bd:3a:e5:94:93:d9:4a:
                    94:51:3f:39:da:ba:d7:b3:56:c7:24:3e:09:3a:a2:
                    13:5d:fd:1c:3d:c9:eb:b5:7a:2b:b1:6e:3f:bd:0e:
                    6a:05:34:28:c8:6b:ad:4c:86:54:49:27:03:e6:28:
                    07:d6:30:ef:79:ab:c5:59:88:ee:a5:ef:72:93:e9:
                    37:a2:02:e3:75:88:2e:33:e9:a8:4d:26:3d:8c:1d:
                    2b:78:76:53:fb:45:d5:a2:76:15:1f:0e:9f:13:c6:
                    6a:33:d0:33:f6:4f:dc:d7:6b:f0:ab:ca:4d:f6:ff:
                    f4:f0:bc:fd:8e:42:b9:eb:6c:ab:f1:0c:3b:17:17:
                    49:3c:14:f7:1c:4d:95:49:eb:12:67:58:e1:be:e6:
                    14:f1:65:b2:41:b4:75:42:b8:60:45:cb:41:f5:45:
                    e6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F4:87:79:F0:D0:3A:A9:61:2C:AC:51:59:98:F9:F1:53:14:B1:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/875222fc-efa2-370f-9332-03452d565844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:30:ca:91:be:41:59:95:35:fa:f4:89:c5:18:3c:87:60:bf:
         a6:6c:ec:f3:91:69:ff:8d:d2:f2:43:79:b2:c0:90:0a:9f:68:
         cd:7a:66:84:ed:44:17:0b:52:bb:ec:df:6f:61:d6:b8:15:db:
         57:50:34:1a:fb:ab:32:d3:ee:5f:b9:84:c0:67:59:77:41:7b:
         41:10:9b:a4:1e:f0:c6:2d:21:3e:60:61:ad:41:c4:e4:f6:65:
         96:dc:85:6c:3e:35:30:d7:f2:78:08:0e:97:13:cc:90:29:2f:
         4b:73:61:8d:e3:25:45:70:26:27:c8:22:79:b7:2f:66:c3:16:
         eb:2f:3a:46:24:fe:0b:51:cc:c6:2d:c3:0f:a7:c8:f3:e7:57:
         1e:ed:14:85:fb:ae:a8:7d:f6:6a:2e:23:07:b6:7b:fe:2c:45:
         ed:bd:07:52:14:87:07:97:01:2e:a2:0d:32:3d:6b:0f:32:31:
         f5:69:6f:7b:21:a7:04:37:93:34:de:40:86:d3:c7:76:f8:92:
         a2:bb:c3:fc:c1:50:c6:28:11:fc:f5:70:e2:f7:15:82:84:ba:
         f9:5b:af:77:50:04:8c:54:7d:d6:37:bd:72:dc:34:b7:b4:93:
         4c:6a:1b:ee:a9:7f:bc:08:bd:91:e3:aa:d2:04:fe:cb:54:f8:
         7f:7e:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:38:57 2025 by rpki-client