Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a695b0e-ee55-3f69-bc77-33aa00f2ee09.roa
File:                     2a695b0e-ee55-3f69-bc77-33aa00f2ee09.roa (raw, json)
Hash identifier:          HLdkGpxTpk8hgPdOnibPWc/19OhQdaD04avHppPhYZw=
Subject key identifier:   5D:6B:01:AE:BA:5A:21:2A:79:D7:0F:95:01:9D:D3:FB:35:D4:60:57
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983B12084C506C39631EE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a695b0e-ee55-3f69-bc77-33aa00f2ee09.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        99.198.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:b1:20:84:c5:06:c3:96:31:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=49dac6f2-8d8d-48c7-997f-95d8ab5139bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:10:c3:e5:d5:68:d4:19:03:e2:be:37:31:
                    5c:73:36:ef:9f:59:9a:bc:60:db:af:9e:6e:9a:44:
                    f3:29:fc:06:3c:a0:33:97:66:c6:ea:75:ca:36:41:
                    3c:d5:64:6b:5f:db:2c:45:72:b2:96:6e:60:15:52:
                    33:01:ea:b5:1f:3c:90:4f:1b:2c:56:3c:ec:fd:b7:
                    c7:d5:ec:6a:bf:9d:41:0d:15:8c:fe:1d:4a:92:5f:
                    2e:40:9e:5a:4e:0f:81:c0:22:54:6e:6f:16:1c:8a:
                    e9:a7:c5:53:ba:cf:60:dc:81:8d:44:48:de:70:ff:
                    74:bc:83:61:8a:ff:d8:bd:ca:1f:a7:65:4a:a4:28:
                    92:c3:2a:22:a8:6e:68:31:e2:c6:31:54:c6:83:72:
                    bf:6a:54:e5:55:1f:89:34:74:7a:34:35:3b:f9:cb:
                    aa:ae:04:d7:ea:f3:4a:fd:24:aa:5b:5e:f9:fc:89:
                    a9:b0:31:51:88:32:1d:7b:77:df:92:44:d6:4b:63:
                    a0:81:26:7a:52:d2:d3:48:41:39:a6:5c:07:e8:78:
                    55:49:22:c7:fc:12:0d:43:74:7a:e9:9d:56:4c:82:
                    44:3e:c5:82:78:96:75:e2:b5:33:02:a5:fc:20:d2:
                    f8:27:2a:97:f9:29:76:5b:9e:76:97:24:79:00:70:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6B:01:AE:BA:5A:21:2A:79:D7:0F:95:01:9D:D3:FB:35:D4:60:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a695b0e-ee55-3f69-bc77-33aa00f2ee09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:9f:ff:09:b6:76:8b:f1:bf:09:07:c0:50:e0:a2:c2:5e:70:
         f4:95:76:7b:f1:d5:3f:cd:49:34:79:33:e6:74:9f:49:95:ec:
         2a:39:d8:40:f0:76:ea:2d:99:b2:fb:7a:1e:2e:d3:39:25:3a:
         f2:4c:f0:08:c6:03:39:2e:26:35:af:e2:3e:b2:3e:e9:76:6a:
         35:a6:74:c5:1a:ca:37:7a:ad:e9:2a:eb:ba:46:90:de:c0:30:
         fe:4d:b5:3c:eb:d9:a8:56:55:98:1e:8b:e6:e0:d2:0d:aa:5c:
         a0:a8:86:54:cf:5f:63:a6:be:f0:2d:d5:22:fc:67:4c:51:4f:
         84:ec:70:1c:51:72:2b:54:55:20:bc:bd:44:15:1f:e1:28:79:
         fa:e3:ad:42:22:51:7c:17:ce:70:54:3b:39:a0:69:1f:d9:ef:
         83:c5:bd:31:61:26:f9:f6:a8:40:23:6a:61:0a:df:ff:5e:a9:
         df:cf:8f:90:a3:f8:48:64:c0:56:81:99:ea:2c:c9:78:da:63:
         fd:e0:96:fe:e0:d6:a8:75:44:23:d1:ab:e8:9e:dc:02:23:dd:
         af:b0:d1:b4:e3:71:85:04:ff:68:e8:51:ff:93:3b:6c:f6:5c:
         55:8f:b0:0a:93:56:16:a8:26:68:fb:77:c6:43:ee:23:ae:b3:
         d9:17:b1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:10:15 2026 by rpki-client