Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2227f0ac-b4a6-3cd8-b9b4-abc8f5872029.roa
File:                     2227f0ac-b4a6-3cd8-b9b4-abc8f5872029.roa (raw, json)
Hash identifier:          oEPeRbPG/E8rz1baBlY2zQBe8Egz6glnuybgV4Lp65k=
Subject key identifier:   5A:FB:91:EA:06:E1:F4:B3:D9:1E:43:3B:8B:3D:67:5C:85:B3:BC:2A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F9313FE10EE86A4810340
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2227f0ac-b4a6-3cd8-b9b4-abc8f5872029.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        99.197.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:93:13:fe:10:ee:86:a4:81:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ec2b3d46-4f83-4482-95f4-6df2a9c6c047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:9d:5a:0f:9c:9d:65:bf:38:aa:56:2c:df:
                    8b:b3:9f:ef:cb:49:84:ab:30:4f:e7:ba:1f:df:6f:
                    80:41:9a:3a:10:1c:04:38:f0:3f:50:d8:96:95:4f:
                    cb:e5:7b:b0:19:44:29:31:25:7a:d7:34:2f:9d:be:
                    4f:fe:df:93:6f:05:c1:3d:36:82:d6:ef:ed:5c:e6:
                    a6:6e:d6:56:95:53:c5:35:0b:09:d5:0d:8a:7c:39:
                    ab:9f:5b:ef:7a:2b:da:84:2e:0b:ab:22:3a:5d:9f:
                    35:d8:ed:01:54:7b:87:f7:7b:cb:a0:44:34:02:b8:
                    6a:b3:00:aa:62:38:6e:e4:d5:dc:5f:6f:8a:5e:c0:
                    b4:70:4b:41:f6:68:51:d4:72:e6:13:e9:83:31:1a:
                    49:2a:14:eb:f7:31:ab:ed:99:b1:1f:8e:6f:ce:82:
                    9f:dc:da:26:23:47:4c:97:a7:4d:48:ea:6c:3b:d7:
                    cd:39:0c:08:69:b1:82:3b:4b:d0:2b:da:a2:e8:1b:
                    53:f1:7a:83:68:41:e5:0b:85:1a:a2:1c:7d:5b:02:
                    2f:a8:cc:a9:b7:ca:f1:d6:28:14:44:b5:1c:ad:78:
                    83:a2:6e:a3:56:3a:5c:e4:e3:4c:fc:20:e8:b6:11:
                    3f:31:e6:07:c0:6b:53:07:43:d2:9b:96:b3:bd:d8:
                    cb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FB:91:EA:06:E1:F4:B3:D9:1E:43:3B:8B:3D:67:5C:85:B3:BC:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2227f0ac-b4a6-3cd8-b9b4-abc8f5872029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:67:12:7a:41:c1:7d:3f:84:7d:87:38:fe:ce:0f:7f:05:22:
         41:92:81:ef:8c:6b:1c:68:48:3e:f1:ec:db:11:c1:ae:c3:54:
         54:4e:d1:dd:7f:6c:d0:74:fd:22:5c:b4:08:31:b4:fa:56:dc:
         99:a9:09:11:47:87:0c:ee:cf:fc:f0:35:a0:fd:77:d7:b8:e1:
         5a:bb:08:e1:32:c4:1c:a2:52:90:25:0a:9d:16:cc:ac:52:d8:
         cb:dc:4b:be:a3:3b:b2:7e:a5:38:98:ff:c1:8d:91:48:5e:db:
         78:98:ad:6b:97:b4:c1:f6:ac:ee:e4:97:b4:71:eb:20:77:44:
         0d:8b:ad:17:c7:32:de:3b:66:85:86:a8:21:87:77:f9:0a:12:
         b0:3c:28:73:8f:f9:d7:74:f2:fc:62:5c:cc:f2:56:6e:fc:92:
         3b:89:f9:a1:a1:29:21:20:6f:2f:db:f2:d9:7e:d7:f3:cd:2b:
         7d:1f:b5:7c:e4:1e:9a:07:aa:a5:4a:a7:35:f4:f4:11:73:1d:
         a0:6b:5f:00:56:83:f2:ae:af:8a:bd:1e:97:96:e7:e6:ec:11:
         74:bf:0b:42:82:e2:39:48:f5:35:a0:1f:91:c7:fb:4a:9b:cc:
         a7:94:a0:6f:27:ee:2b:2b:70:7e:70:ad:ad:67:af:95:bb:0b:
         e7:14:99:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:38:34 2026 by rpki-client