Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b44aa439-20f8-3a7f-9449-159fe7ce4e05.roa
File:                     b44aa439-20f8-3a7f-9449-159fe7ce4e05.roa (raw, json)
Hash identifier:          3F97I9bT0M1d+5Juf4xHnJPscd14TRv0Pci2a39YDMI=
Subject key identifier:   4B:4F:28:B0:4A:D7:09:1B:DD:1E:29:00:14:45:74:CF:6C:32:80:E9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84113572DA2BC25BAA8A2A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b44aa439-20f8-3a7f-9449-159fe7ce4e05.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:35:72:da:2b:c2:5b:aa:8a:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d34338df-3399-4d69-ba1e-7443cb285bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:f5:bc:b0:35:70:3b:f0:ec:b3:35:94:b9:
                    40:c4:5e:b4:ca:c4:16:88:53:fd:f5:da:08:65:3c:
                    2f:2c:3f:47:a9:fd:7e:e3:f7:3d:06:03:5e:e4:ba:
                    2e:01:03:6b:d0:f4:88:1b:44:19:64:01:14:51:4d:
                    4f:bb:11:9a:25:8f:ed:9a:5d:25:a3:e8:f3:25:71:
                    69:18:61:56:fc:d2:65:b7:84:a8:7b:61:72:a2:27:
                    dd:d1:78:f4:8b:23:61:4d:cf:af:4a:b6:e6:b2:0d:
                    46:9e:59:df:38:16:e7:db:5e:ee:6d:a8:dd:0e:6d:
                    c9:c3:1e:e7:e8:34:b3:d8:6b:7f:46:1b:ea:a3:17:
                    c7:ef:c8:5b:c4:71:40:b6:64:fd:c5:fa:34:7d:cc:
                    36:f4:50:6d:1a:67:30:b2:68:a2:3e:f8:1d:64:a8:
                    e0:19:9f:c4:4b:1a:a6:55:af:d4:94:5c:3f:05:5a:
                    a6:a3:cb:1f:2b:78:14:e9:9e:04:17:70:f2:de:3f:
                    49:fd:1b:2e:22:95:1a:ab:62:4e:97:04:d4:34:b4:
                    48:83:b8:0b:e1:fd:67:17:df:60:66:d3:13:6c:9c:
                    ce:98:54:86:95:02:4f:9e:cd:6b:d0:77:ce:55:52:
                    11:28:ab:66:ee:0a:38:11:95:f5:f4:8e:4b:6d:22:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4F:28:B0:4A:D7:09:1B:DD:1E:29:00:14:45:74:CF:6C:32:80:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b44aa439-20f8-3a7f-9449-159fe7ce4e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:58:09:aa:ce:5a:62:48:de:a0:9d:f9:b9:1e:e5:0b:3b:b6:
         7d:08:6a:23:ec:06:72:38:f7:c1:fe:62:58:f4:4f:1f:58:18:
         8b:43:a7:6f:2f:d9:d7:90:01:66:d9:e5:d9:ef:92:91:6e:3d:
         14:84:4a:9e:9c:e0:b1:ce:f4:6c:a3:b3:69:bb:f3:b5:dc:23:
         6e:f5:39:89:b2:14:7d:cb:78:c4:9e:7d:67:95:ba:3c:38:b1:
         e1:56:c2:13:b0:80:85:ff:20:4d:b7:d0:0b:da:a9:b5:58:2f:
         93:46:ec:53:72:a1:1b:e3:8f:7b:60:dc:89:2d:d0:21:0d:83:
         20:cb:b1:28:b6:59:8d:b2:cd:21:64:6b:14:c9:da:6d:7a:09:
         f1:e7:27:1b:41:86:68:19:78:aa:fe:e3:23:d3:bc:f1:c8:09:
         07:1d:5a:dd:d0:ac:96:2f:78:95:a8:b7:f1:4e:14:37:98:b8:
         38:dd:16:50:e6:f3:19:21:99:5e:ae:8a:cf:7b:c2:f0:cf:ec:
         14:56:de:78:8f:60:2b:57:61:11:b1:1e:4e:e0:c2:e8:1d:45:
         ab:b8:d1:ad:10:5f:37:2d:d7:ab:43:9b:a2:50:1d:5e:8c:4c:
         d2:62:94:3e:f4:3d:35:24:3e:ea:45:25:63:6e:ba:20:6e:a0:
         c9:05:4f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:14:18 2025 by rpki-client