Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fe55928-9366-3ef0-8a24-60d06e008e74.roa
File:                     2fe55928-9366-3ef0-8a24-60d06e008e74.roa (raw, json)
Hash identifier:          XvkHGT9bY9z3wlOflKgmg4G/MvxAEWmBfIxFQHDq7vg=
Subject key identifier:   5E:1B:1C:FB:22:AB:25:1F:91:DA:5D:1D:78:1B:0A:94:7A:78:3D:F4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFEF11E2D9CD429FC8A380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fe55928-9366-3ef0-8a24-60d06e008e74.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.198.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:ef:11:e2:d9:cd:42:9f:c8:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=0fc60c4d-2f12-4e88-a743-dee81df72d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7c:18:fe:48:96:12:4d:7a:97:65:ff:25:56:
                    e9:82:86:d7:de:af:97:65:2e:68:9c:c1:15:71:14:
                    d0:ff:31:15:ae:1d:8a:18:16:b3:2d:8b:e9:50:4e:
                    26:6c:7a:3a:c0:d6:5a:68:f5:50:a3:8e:82:6d:7f:
                    69:56:ba:d5:c2:a9:ae:7f:31:b6:90:25:96:c9:bf:
                    25:a1:6e:b9:f5:b0:5e:3e:d8:b8:8c:63:2e:98:c3:
                    da:45:79:de:fd:98:ea:c4:7e:c8:ac:03:01:ec:84:
                    8e:b1:53:c3:88:6d:aa:4a:d1:09:a1:8a:74:d3:f8:
                    cc:73:cd:1e:47:2a:10:8b:13:8a:a8:fe:72:6c:d2:
                    aa:04:79:69:c2:0d:6f:67:c7:13:e6:a0:3b:de:c9:
                    49:d7:3b:7e:a5:fb:6e:02:fa:c4:c9:20:9b:a1:59:
                    42:9c:d5:21:f0:26:d3:31:e4:2b:b5:cb:5d:be:b7:
                    35:34:ed:f4:dd:d3:51:ea:2e:9f:6f:23:ae:46:94:
                    c6:e6:51:37:5a:46:2d:41:04:c4:f3:b6:b0:34:b7:
                    48:a4:c0:0c:c6:55:2e:55:71:b8:72:17:ae:77:29:
                    33:3f:da:69:73:3e:77:a5:a3:68:ec:62:e8:91:e4:
                    23:eb:f5:05:93:24:29:4c:5c:5b:25:74:a8:1d:e5:
                    12:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1B:1C:FB:22:AB:25:1F:91:DA:5D:1D:78:1B:0A:94:7A:78:3D:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2fe55928-9366-3ef0-8a24-60d06e008e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:76:b1:4a:ed:f9:0a:f7:44:07:96:fd:53:00:31:47:cf:a3:
         c4:e2:bf:f2:ee:ca:67:22:00:b2:67:05:c6:a1:8d:a1:65:ca:
         d9:c0:be:78:60:fa:c4:f4:de:1b:66:e7:b8:ff:65:5b:0e:06:
         48:66:59:85:c7:c8:41:3d:e4:59:e5:c2:c3:da:b3:6e:c1:e7:
         b0:82:85:28:ae:dd:5c:9f:f2:d1:1f:f4:ab:30:55:a4:3d:f8:
         b4:eb:85:12:62:65:62:3f:75:68:fc:06:13:51:1e:8f:57:f4:
         3b:ad:b9:15:e3:82:6d:02:66:ed:49:64:0b:a8:72:70:02:70:
         23:91:b1:9b:e8:67:39:0c:09:2d:cb:78:18:cd:24:7a:37:95:
         80:b7:29:df:b6:83:0d:7b:8a:46:65:a3:ba:76:58:0f:72:14:
         e2:3f:c4:0a:2f:a7:56:e2:ba:81:84:b9:0a:12:ca:57:19:9a:
         db:b0:95:3c:6e:2c:e6:52:bb:12:e2:de:cb:6b:75:03:76:9d:
         bb:82:13:24:80:a8:6c:0c:40:d2:bb:8e:f9:54:b0:80:e0:a6:
         fc:96:f7:f5:42:e0:26:5f:7e:ef:c5:9c:8b:9e:88:c8:89:90:
         b5:cd:03:10:8d:c7:e0:06:56:68:dc:a8:63:49:f1:31:c8:71:
         3a:c8:51:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:36 2026 by rpki-client