Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/924d5c82-5fd2-3781-949e-453b857408b2.roa
File:                     924d5c82-5fd2-3781-949e-453b857408b2.roa (raw, json)
Hash identifier:          BGrSojFXKUOaoezOqF3mBBD9XxaMQjTdjEXRF26V1Xs=
Subject key identifier:   F6:81:96:0C:C7:7B:5C:6E:B4:39:0D:EE:7B:67:C1:11:86:A2:08:81
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79F8D520B9E6CDFE2F9AB00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/924d5c82-5fd2-3781-949e-453b857408b2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        99.197.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:8d:52:0b:9e:6c:df:e2:f9:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=48e6fb18-0227-428f-8e10-8a2528e1d61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:14:a3:14:b5:62:f8:bb:b0:8b:ca:c9:e8:8c:
                    4b:19:de:e2:59:fa:63:25:38:8b:9b:87:69:30:b5:
                    85:e1:13:38:c4:49:05:48:06:93:6c:26:7d:55:ef:
                    28:2c:d6:df:87:5c:40:0e:a9:f1:bd:dd:72:ae:bb:
                    44:6b:80:04:eb:be:62:54:25:74:3b:26:2d:78:91:
                    f0:25:a5:e9:30:bb:a5:4f:bc:a6:c6:ea:a0:6e:37:
                    f5:27:ae:c9:dc:f0:3d:5a:68:68:26:10:19:30:4f:
                    5f:9b:08:ba:ee:49:67:0d:8a:54:cb:18:dc:62:c4:
                    c1:99:5a:22:d2:6b:9a:c1:14:47:ff:c5:89:17:de:
                    88:a0:54:79:ca:f6:85:98:a0:ba:fa:8a:cc:9c:9a:
                    73:9e:df:d6:4f:f5:2a:97:1a:cb:ea:34:95:c0:fa:
                    93:cd:08:35:3a:62:a8:92:93:9c:42:b3:72:59:0c:
                    24:87:4b:f8:b6:88:96:87:67:46:06:9b:46:41:f8:
                    78:77:29:62:a2:c4:0b:e2:00:9f:fa:26:5f:19:5b:
                    db:ab:09:5a:db:62:0e:35:21:0c:79:a9:fc:93:57:
                    05:de:54:87:30:81:63:35:ab:97:73:55:6e:bf:ad:
                    5f:c5:cb:09:d7:90:1b:ac:20:8f:a1:d2:0a:97:4e:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:81:96:0C:C7:7B:5C:6E:B4:39:0D:EE:7B:67:C1:11:86:A2:08:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/924d5c82-5fd2-3781-949e-453b857408b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:4e:74:75:9e:d9:a5:2b:9e:b4:7a:1c:2d:dc:0e:e6:1d:b0:
         0c:ee:54:6c:a4:35:e5:48:f8:09:46:1b:98:42:44:dd:aa:89:
         df:ed:d7:d7:6b:72:af:3d:a6:82:82:42:55:a3:27:4a:89:c4:
         67:ab:91:ed:34:3c:8f:5f:2e:82:1b:b9:a5:67:56:33:23:cd:
         58:34:39:57:5a:28:56:67:80:98:c6:2b:0c:ef:91:15:2d:7a:
         66:08:a8:aa:3a:09:45:bb:a1:0e:0b:62:8a:65:4a:d0:ac:66:
         7d:6b:12:0c:71:e3:31:b1:cb:9a:3e:32:3b:0e:74:fb:fd:c2:
         ba:3d:5f:21:65:58:7e:2c:f6:2c:8e:8a:ba:f0:57:10:47:ea:
         e7:9a:f9:00:43:33:f5:12:e4:31:9b:25:a6:df:8f:5f:c0:4a:
         52:75:a6:4f:ac:2d:e3:aa:34:08:53:ff:21:04:ce:ac:83:3f:
         e4:e6:b9:60:0f:df:1d:87:a0:d8:36:22:c6:c2:4e:7a:af:2f:
         4a:0e:31:e0:12:a8:aa:3e:ae:fc:da:37:30:04:7d:95:a6:07:
         c4:00:d7:1d:32:27:11:6b:b5:2f:cd:98:30:3c:9b:c2:ce:d3:
         eb:28:55:15:f4:26:c4:3e:86:3c:86:67:8d:a1:27:fa:c3:80:
         db:80:90:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:34:46 2026 by rpki-client