Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66946b99-e241-386a-9d82-f437ab155ef0.roa
File:                     66946b99-e241-386a-9d82-f437ab155ef0.roa (raw, json)
Hash identifier:          lvtpAPhHoCeqAb+uMjL0YTcmyOPKeONQKdc4fFOsmfM=
Subject key identifier:   7F:CF:12:21:BE:36:13:D3:01:60:37:41:34:CF:58:67:2C:FB:4A:C8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F9126ACD78C37737E33B0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66946b99-e241-386a-9d82-f437ab155ef0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        99.197.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:91:26:ac:d7:8c:37:73:7e:33:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d55f591b-23c5-48ff-8ac5-c8214e0a4866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:18:bf:bf:80:9a:67:6a:2a:66:be:d5:23:fa:
                    8e:76:61:45:fe:34:38:f2:dd:33:8f:01:4a:d0:c4:
                    17:30:80:29:6a:87:20:7b:bf:3f:c9:d9:83:26:fc:
                    4d:99:0e:95:86:9e:92:9d:27:bd:50:cc:2d:48:5c:
                    b5:a7:66:5b:f4:4e:13:f5:58:e1:35:7c:92:f5:2e:
                    1f:48:eb:ff:41:b4:3c:7f:06:bd:dd:02:bf:aa:ab:
                    72:c4:06:8d:4a:88:d5:6b:0a:bd:4e:b0:69:e1:0f:
                    22:27:18:56:bf:26:c4:6d:be:e7:c1:06:7a:49:b3:
                    83:dc:15:24:28:2b:11:71:e7:b9:b9:f1:a0:0b:d9:
                    e3:85:8a:55:fa:0f:73:1e:1e:41:16:4b:ec:07:6d:
                    36:36:72:a8:fd:31:de:64:f7:a7:7f:59:05:b0:78:
                    0d:32:94:77:08:4d:4a:c5:29:3c:ff:8f:1c:07:d0:
                    ea:9a:12:65:3f:93:df:e0:15:dc:f4:ec:35:57:98:
                    54:00:91:df:db:99:9b:e0:f6:f9:27:bf:d1:4b:a9:
                    df:43:fb:e3:a7:71:70:37:b2:3c:2d:b1:89:ab:85:
                    06:9b:c3:b3:8f:71:fc:e6:ed:1b:c3:b0:63:a9:c4:
                    f6:ec:2b:74:a8:9e:72:c5:5c:4a:e8:b5:be:43:3d:
                    04:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CF:12:21:BE:36:13:D3:01:60:37:41:34:CF:58:67:2C:FB:4A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/66946b99-e241-386a-9d82-f437ab155ef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:7a:e6:e3:94:13:12:fb:66:20:80:82:5f:9c:f1:4e:c2:63:
         51:d4:8b:e5:6d:59:24:f4:69:54:60:29:ba:ed:2b:1b:33:da:
         a2:72:85:1c:92:f2:7c:00:e4:b9:5a:6b:4f:15:9b:58:86:63:
         22:92:4b:70:3a:15:2f:44:f8:6f:6c:d2:20:3c:32:db:d4:2f:
         16:2c:63:0a:22:ca:fa:28:aa:f9:29:23:44:8f:4a:b8:01:74:
         72:d1:a4:f1:24:61:fb:c9:7d:56:93:cb:eb:fe:fd:e6:94:fe:
         e0:99:16:30:3c:2b:84:09:de:7c:72:a6:0c:ba:9d:7a:66:67:
         fe:dd:62:f9:56:71:57:ad:91:fd:06:2d:f5:d6:75:96:75:0a:
         b1:b4:da:22:48:38:55:4f:f3:39:56:58:d1:58:4b:0c:d4:ea:
         2d:44:3e:08:ee:ef:ef:2e:b7:a1:62:23:d4:41:55:d7:0a:b3:
         93:e6:29:32:fd:db:b1:5f:11:b2:fa:a2:63:1b:81:2a:c2:7b:
         21:78:ed:f9:c0:35:b0:0d:e4:c0:74:13:c6:e6:60:c3:ce:4c:
         f6:5c:6b:d0:92:38:80:99:2b:f1:21:51:3f:32:65:da:97:7f:
         4d:f4:3a:4f:4a:8a:00:c5:a9:aa:a8:d3:79:fa:a6:34:6c:03:
         2f:2c:db:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:07:37 2026 by rpki-client