Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de516bb2-ac5c-3c8d-823d-7bb7704a5e9e.roa
File:                     de516bb2-ac5c-3c8d-823d-7bb7704a5e9e.roa (raw, json)
Hash identifier:          pv+aKVTs6+n7uD7jnYEYFbWKuEevxKSK5pWCLhOUjYw=
Subject key identifier:   E0:59:C1:38:E2:5A:C4:0D:CC:0D:9D:BD:7C:63:D2:E2:9F:DB:AC:7B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84113260D5B0C7E722CF7180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de516bb2-ac5c-3c8d-823d-7bb7704a5e9e.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        99.196.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:32:60:d5:b0:c7:e7:22:cf:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a7e6d06a-9c7e-4616-bf59-f4174641115a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:2e:8e:79:ee:13:79:d3:bc:38:22:b6:ba:
                    4a:3b:5d:c5:d6:f3:c0:86:a0:ac:47:4f:49:bc:f0:
                    52:a9:e1:91:95:68:93:ba:aa:07:31:bb:ca:3c:c8:
                    e6:87:7e:7c:ec:2b:27:af:b3:6a:f2:06:5f:c6:1a:
                    81:ac:96:d2:15:6c:f0:42:a0:1d:6b:3a:e1:9c:97:
                    ff:f0:75:09:34:55:71:67:4c:c2:7e:5c:f3:ee:22:
                    f4:29:8e:8e:7f:43:b5:67:aa:0d:1c:30:e4:d2:8d:
                    46:dd:a7:37:9a:f5:0e:bd:fc:7b:7e:8a:14:b6:59:
                    07:5a:28:a5:e9:65:76:91:a2:fb:79:21:e6:ed:c5:
                    38:de:7d:89:98:d5:2c:79:79:1c:15:87:32:40:dc:
                    d4:11:ef:23:90:57:52:ec:a1:86:03:8d:02:e1:25:
                    6e:f0:82:47:59:86:0a:c9:bf:31:99:68:bc:b5:87:
                    4f:0e:12:57:8a:0d:e6:41:8a:ac:9b:54:49:45:6e:
                    a0:16:b9:95:e2:46:d5:6d:5f:21:04:54:37:27:63:
                    e1:45:22:55:c0:cf:80:88:3e:4a:23:ef:69:12:49:
                    ce:c1:b2:3f:cc:81:52:9e:07:ab:9c:60:83:36:70:
                    ed:6c:c2:d0:ca:68:55:a3:c6:d9:9c:51:c1:4c:74:
                    c0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:59:C1:38:E2:5A:C4:0D:CC:0D:9D:BD:7C:63:D2:E2:9F:DB:AC:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de516bb2-ac5c-3c8d-823d-7bb7704a5e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:15:50:53:8d:e8:d1:03:2f:8d:33:8a:31:e6:43:6d:2f:ab:
         65:1c:35:ac:e2:8e:30:3c:b8:f8:ca:ed:6c:6e:2b:d0:7a:46:
         5e:ff:89:51:66:30:52:ea:21:1c:82:b8:0d:76:63:5b:19:09:
         d4:54:62:78:0a:b5:a4:f7:a8:6c:15:83:0b:11:74:46:95:29:
         6f:38:ed:bc:bb:cf:51:5f:60:e7:9f:cf:69:63:e3:a9:22:9b:
         be:85:42:5a:1c:1d:b3:41:21:9a:c1:c6:7a:ce:fd:8b:7c:bb:
         13:14:19:d7:7d:53:a8:cf:a4:d6:d2:83:8f:ca:6c:cd:a4:31:
         3e:c3:d8:eb:91:24:44:aa:b9:07:26:71:59:44:02:1f:f1:c7:
         7a:49:2e:61:2c:6a:ba:75:bb:f5:b5:ac:8b:cd:79:9e:a4:d4:
         e6:9f:f8:db:b0:5b:24:f9:83:b0:46:f0:72:52:45:53:b9:8d:
         d2:7f:f9:24:0b:e4:8e:30:0d:42:95:6d:a3:19:2b:3c:a9:4f:
         cb:e2:9b:f0:5a:17:3c:67:42:bd:8a:51:0b:49:b0:2e:71:91:
         fe:45:2d:52:00:fa:d2:aa:20:d7:40:5a:78:7f:a4:f0:20:a7:
         52:36:ca:5d:46:46:92:1f:d4:eb:bb:22:ba:24:08:f4:d1:ed:
         5e:1f:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:07:33 2025 by rpki-client