Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2069f20c-8799-37a5-bcae-dc34bbc8a8ea.roa
File:                     2069f20c-8799-37a5-bcae-dc34bbc8a8ea.roa (raw, json)
Hash identifier:          ZQVakehOz0WxbFCHfBWr5TyctsERDTpMbwqe0JgOt4A=
Subject key identifier:   1C:31:6F:7E:0D:1A:59:DE:22:AE:FF:AA:D1:F2:41:43:C6:7A:FD:8D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B83DC275A95429F7BA380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2069f20c-8799-37a5-bcae-dc34bbc8a8ea.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.196.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:83:dc:27:5a:95:42:9f:7b:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=8c51df9e-2eb7-4fb2-9889-13984867861c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:da:8a:9b:13:52:fd:eb:25:25:e2:01:5f:32:
                    0f:2d:3a:79:18:2f:d6:de:76:fd:8d:09:fa:b9:d8:
                    da:4f:09:47:f3:a0:cb:48:ed:86:fc:f9:60:85:70:
                    90:83:bc:5e:b1:27:25:cd:3d:f4:ca:58:53:d9:50:
                    cf:45:6b:94:f7:92:85:8f:c0:bd:d2:22:cc:d6:1a:
                    ea:3d:8f:b6:b5:87:11:7b:2d:26:b1:95:eb:fc:93:
                    fe:e8:8a:69:f7:f1:c4:c6:72:d5:31:4c:e5:87:18:
                    d9:72:9e:80:cd:19:ad:d5:a3:67:27:45:c6:5a:7a:
                    3f:8c:ec:cd:b2:43:94:c3:11:94:00:35:2f:b8:fb:
                    b2:ed:ee:26:2a:f7:99:3e:5a:62:cc:75:b2:e5:9f:
                    3c:55:b7:a4:43:83:55:2d:80:1c:4f:e3:ae:a9:ca:
                    10:28:d9:70:c1:65:a8:ad:65:f5:c8:83:95:ea:db:
                    9e:78:7a:95:de:3c:ca:92:fa:81:3b:71:45:7c:de:
                    9c:ff:e2:cd:77:ab:8c:cc:e3:af:91:7b:d7:52:6b:
                    fa:6c:ec:78:dc:91:c8:87:29:24:78:bd:46:e4:5d:
                    af:89:46:d2:28:14:6c:f6:5b:27:c8:f9:da:5f:d9:
                    f1:03:53:d2:61:b2:32:c2:d8:7a:61:ab:d4:29:ba:
                    8c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:31:6F:7E:0D:1A:59:DE:22:AE:FF:AA:D1:F2:41:43:C6:7A:FD:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2069f20c-8799-37a5-bcae-dc34bbc8a8ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3c:1b:b2:46:b6:47:1e:b7:42:26:e0:67:06:7e:ae:43:41:
         33:89:71:23:50:d9:fb:6d:87:fd:c4:a0:5b:44:ac:b5:50:f9:
         7a:85:c6:cd:db:72:ef:84:e9:92:2d:92:be:52:96:ff:1c:da:
         ea:ef:4e:da:c6:86:7d:7d:24:84:65:e5:66:e1:67:aa:98:9f:
         09:65:2a:e8:b8:27:8d:13:14:4f:22:c2:db:6c:7e:e9:6b:a0:
         b4:28:3a:4f:9c:83:9e:70:77:a5:d2:f2:13:2b:7b:13:82:b0:
         08:e5:c2:ee:fa:b0:1f:35:e6:cf:d7:68:c9:19:8a:7b:63:3d:
         62:6b:5b:fa:08:48:e9:52:c3:07:b6:a7:51:47:d6:89:43:cc:
         4b:01:ab:a3:31:56:bc:05:5e:f9:66:4a:d7:8d:a1:c8:ae:d4:
         7a:54:61:ea:b8:c5:27:51:dd:38:9e:7e:13:fe:56:c5:1c:b6:
         72:12:d0:cf:4f:ca:87:d7:1e:a9:0c:0e:ec:01:04:f0:08:77:
         ad:d1:cb:5f:22:a3:53:61:aa:71:54:ed:db:7a:a9:39:76:5a:
         45:80:58:ea:37:37:84:d0:96:e1:b0:14:18:58:66:31:5d:66:
         ef:4c:10:90:ff:0f:cb:3d:52:f1:a8:10:b6:a9:c9:a5:7a:04:
         97:08:65:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm4PcJ1qVQp97o4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
OGM1MWRmOWUtMmViNy00ZmIyLTk4ODktMTM5ODQ4Njc4NjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNqKmxNS/eslJeIBXzIPLTp5GC/W3nb9jQn6
udjaTwlH86DLSO2G/PlghXCQg7xesSclzT30ylhT2VDPRWuU95KFj8C90iLM1hrq
PY+2tYcRey0msZXr/JP+6Ipp9/HExnLVMUzlhxjZcp6AzRmt1aNnJ0XGWno/jOzN
skOUwxGUADUvuPuy7e4mKveZPlpizHWy5Z88VbekQ4NVLYAcT+OuqcoQKNlwwWWo
rWX1yIOV6tueeHqV3jzKkvqBO3FFfN6c/+LNd6uMzOOvkXvXUmv6bOx43JHIhykk
eL1G5F2viUbSKBRs9lsnyPnaX9nxA1PSYbIywth6YavUKbqMewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBwxb34NGlneIq7/qtHyQUPGev2NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjA2OWYyMGMtODc5OS0z
N2E1LWJjYWUtZGMzNGJiYzhhOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFQ8G7JGtkcet0Im4GcGfq5DQTOJcSNQ2ftth/3EoFtErLVQ+XqFxs3b
cu+E6ZItkr5Slv8c2urvTtrGhn19JIRl5WbhZ6qYnwllKui4J40TFE8iwttsfulr
oLQoOk+cg55wd6XS8hMrexOCsAjlwu76sB815s/XaMkZintjPWJrW/oISOlSwwe2
p1FH1olDzEsBq6MxVrwFXvlmSteNociu1HpUYeq4xSdR3TiefhP+VsUctnIS0M9P
yofXHqkMDuwBBPAId63Ry18io1NhqnFU7dt6qTl2WkWAWOo3N4TQluGwFBhYZjFd
Zu9MEJD/D8s9UvGoELapyaV6BJcIZdA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:55 2026 by rpki-client