Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9dae092-16cc-3a20-a306-0d2f91aec0b6.roa
File:                     d9dae092-16cc-3a20-a306-0d2f91aec0b6.roa (raw, json)
Hash identifier:          emFv/3ffJSlGUhiZMFePRoIrgu1sDNrFLrk1d1heQEQ=
Subject key identifier:   41:1D:1C:49:38:ED:EF:43:10:B8:31:AB:5D:7A:76:77:77:A6:43:8C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411E79C000F9E5244D33280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9dae092-16cc-3a20-a306-0d2f91aec0b6.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:e7:9c:00:0f:9e:52:44:d3:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c2d6d10f-0b8e-411b-8cc8-38c60d9658df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:3e:26:69:81:15:70:2f:05:62:2b:3a:23:
                    6d:10:58:80:11:61:65:45:4d:f6:ee:b6:c4:b4:52:
                    e6:90:21:85:e3:15:3d:4a:6c:de:f7:c4:6c:0c:a2:
                    50:0f:ab:a6:63:bf:08:dd:b0:4d:18:21:49:cb:81:
                    9b:ca:52:0d:09:51:94:ee:27:3c:8d:c8:94:79:66:
                    ef:e6:a5:c1:a4:34:31:87:b3:1b:a7:94:d5:50:df:
                    6d:b0:fa:62:49:74:8a:c3:d2:40:32:e1:63:51:7f:
                    b0:db:3f:8e:f5:df:bc:82:b8:e8:fd:8e:e3:85:e5:
                    6f:22:f0:fe:a4:e7:db:29:db:a4:16:39:7c:61:2b:
                    c2:aa:38:c8:25:d0:55:43:a8:65:57:94:d4:9f:f1:
                    a7:5a:26:dc:d5:cb:8b:64:7e:28:c1:39:2c:fe:f4:
                    96:4f:12:1c:65:fb:b9:37:82:9f:df:e9:64:45:2c:
                    46:1c:fd:98:31:09:db:c2:ea:fb:4d:6f:2e:d0:ee:
                    57:37:84:a5:ee:8f:a2:c6:23:41:ab:c0:b5:fa:57:
                    ea:0c:4a:3c:eb:17:d5:2f:74:c6:be:f5:ab:c5:ab:
                    82:93:12:12:30:c2:08:d6:46:ac:0b:ba:4e:78:95:
                    52:d1:ee:4d:3f:17:88:bf:5d:5f:1c:e4:8c:bd:03:
                    7f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1D:1C:49:38:ED:EF:43:10:B8:31:AB:5D:7A:76:77:77:A6:43:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9dae092-16cc-3a20-a306-0d2f91aec0b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:67:47:88:de:91:80:ff:a2:44:53:d7:9a:db:1e:96:ed:22:
         c3:dc:0c:9d:8d:05:48:d3:66:60:ef:c7:19:6c:a0:cf:4c:4f:
         9d:5b:05:24:9f:fe:ad:72:29:da:28:af:5c:f1:3e:df:13:02:
         9e:8b:67:c1:e5:4d:49:68:88:6e:66:26:24:6f:ba:08:a8:e8:
         1a:bd:5d:57:83:cb:ac:5c:34:02:db:12:91:d7:ba:86:50:3e:
         db:37:9c:c3:5f:6f:e6:d9:06:f8:29:36:4f:27:9c:b0:0f:8c:
         bb:04:33:5d:8d:51:25:8c:6e:e2:ce:d7:fb:be:19:a1:33:81:
         c3:1a:be:ac:d3:73:93:1f:10:2d:bc:87:32:18:86:20:75:2e:
         05:ae:47:82:52:48:d9:3e:61:ac:42:b0:7b:42:ea:4d:11:a7:
         82:37:a8:85:38:5b:d7:2c:89:ab:4c:ac:82:f5:32:6f:a9:32:
         ee:41:5e:0d:ad:c6:98:bc:bb:84:b1:b4:48:90:6d:cb:ed:36:
         e1:0b:66:1b:db:ae:9b:ff:6e:06:98:a8:83:1f:53:73:6a:7a:
         66:cc:0e:b1:40:44:97:a1:2e:84:12:1b:87:7c:04:13:89:a1:
         61:52:1b:50:d7:f5:4f:48:dd:8f:bd:fa:60:8f:ac:d3:01:77:
         b0:ac:7f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:12:02 2025 by rpki-client