Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf51676e-908e-3239-8c39-d639532ade54.roa
File:                     cf51676e-908e-3239-8c39-d639532ade54.roa (raw, json)
Hash identifier:          2H0lgIby+5W6vevEPJ751RZCXnGw6rxcY8lKwNdrAx8=
Subject key identifier:   07:7D:42:74:A7:A4:C7:78:69:52:90:6F:9D:24:C9:97:13:CB:18:79
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411F1014809AD7BF57C7620
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf51676e-908e-3239-8c39-d639532ade54.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.198.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:f1:01:48:09:ad:7b:f5:7c:76:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=719d6e25-2e25-4ea5-b28d-9f129854bb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:ad:0b:1b:f3:af:c6:4c:71:f0:08:e0:da:
                    a0:fc:bb:ad:be:b5:1a:a4:ea:00:4d:4f:13:32:f5:
                    e3:e3:e7:aa:98:f3:b6:00:d8:d7:3e:24:89:95:f9:
                    5d:42:2b:8f:f4:b4:5f:de:52:1d:89:f7:3c:df:70:
                    ce:6b:70:50:64:7f:cc:fb:f0:d2:52:da:bb:7b:7f:
                    68:20:6b:f9:ec:50:c6:0b:62:79:db:25:76:03:5f:
                    2e:d5:d1:cb:fd:b8:c1:12:af:25:fb:13:8a:f6:17:
                    6b:86:44:39:fe:de:f1:3e:e9:ef:e4:60:9b:14:12:
                    0a:7e:24:fe:14:78:ef:6a:d0:d4:be:15:74:76:d6:
                    75:5e:1e:c9:5f:48:c1:b4:3f:6d:e3:8d:94:f0:db:
                    42:59:ad:14:e7:49:aa:57:45:70:9b:67:b3:34:cf:
                    dd:44:fd:65:71:ee:e3:4a:c9:ff:93:ee:3b:44:3a:
                    42:db:c7:c3:b1:91:a2:dc:c3:fd:8b:34:f4:f1:67:
                    13:12:c7:c9:10:ee:96:9f:4b:fb:5a:61:7b:94:34:
                    b1:2c:fd:72:a2:53:61:66:2d:f7:fe:2f:20:25:29:
                    3d:a9:b6:4b:c6:bb:6f:f7:c6:81:3d:45:f2:fa:56:
                    2b:46:f1:a9:fb:d4:42:c5:da:16:6a:82:75:05:ff:
                    8b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7D:42:74:A7:A4:C7:78:69:52:90:6F:9D:24:C9:97:13:CB:18:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf51676e-908e-3239-8c39-d639532ade54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8b:d4:d4:c7:52:9a:72:e6:c4:fd:08:2f:7a:94:a1:94:1f:
         f2:15:d7:ea:0b:e4:ba:2f:e0:c7:1d:fb:95:e0:4f:c0:3b:6a:
         40:17:b4:aa:6a:bc:e9:c5:93:cb:b9:c2:45:0a:91:29:f5:e9:
         22:11:de:a6:dd:d5:f3:7c:00:cf:d2:f7:20:aa:61:6a:a9:09:
         37:15:38:b6:65:50:5b:56:f4:fd:83:99:f6:df:c5:a6:e6:d5:
         6a:85:fd:a7:89:07:8e:96:74:cd:6f:cd:10:7e:d4:2e:f9:fa:
         a6:af:3d:ca:12:3f:35:60:cc:0f:30:a8:65:47:fd:dc:92:a5:
         6d:6b:a7:43:9d:f0:21:21:dd:8c:e7:66:33:6d:6c:8f:1c:30:
         30:7b:78:68:f8:a7:8b:b0:22:d5:43:76:c8:69:96:19:c8:79:
         29:22:aa:d2:33:5e:26:34:2c:6c:1b:a1:31:92:2c:20:7f:6d:
         ac:3c:ee:7b:b4:a2:48:e8:10:e0:8f:26:58:85:93:7d:5a:d1:
         b0:1d:97:a7:b7:6b:7e:b1:1e:ee:b3:6f:78:ed:dd:dc:6e:11:
         ef:e9:e0:71:91:ca:34:cc:f0:da:dd:0e:d6:5e:58:83:37:bb:
         59:f5:ec:f5:bf:20:af:2a:d8:f5:b7:20:4a:45:77:a0:3f:42:
         ec:6a:4a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:59 2025 by rpki-client