Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bee7246-fffd-3a4d-ab95-fb23a8017b5d.roa
File:                     2bee7246-fffd-3a4d-ab95-fb23a8017b5d.roa (raw, json)
Hash identifier:          CuSFqjk/wC3hF/GWTuLF+rUh0HTgqryiIOg3gWG9FMw=
Subject key identifier:   FC:FC:6B:F1:42:1C:2E:23:CE:88:6A:DF:D2:F3:7D:D0:C9:82:C4:2E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C032320B68A3D291B9558
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bee7246-fffd-3a4d-ab95-fb23a8017b5d.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.196.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:03:23:20:b6:8a:3d:29:1b:95:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=61d15218-9284-4f0c-ba99-dfb78ee3f25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:82:ba:67:8d:91:f5:5e:d0:2a:f9:9a:b5:
                    8a:96:52:7e:bf:09:0a:1a:5d:64:73:70:f9:fc:a6:
                    71:e0:74:eb:3f:c4:6a:a8:83:b7:41:f2:7b:92:a3:
                    d0:a6:2f:da:02:ee:7b:3a:52:a0:3b:c3:86:5d:16:
                    60:8a:f8:66:29:8b:65:04:11:75:61:54:d5:cc:10:
                    aa:c0:ee:db:ba:41:fc:78:83:b4:21:a7:84:b3:ad:
                    25:0b:44:af:74:c2:31:b1:d1:6a:68:2c:90:da:9c:
                    47:f7:97:9b:1e:55:36:47:82:5e:59:cb:5b:30:52:
                    75:57:dc:cc:12:26:0e:a4:81:c2:a4:54:d8:c8:bf:
                    9f:3e:3b:d4:d1:86:ec:1b:cd:8f:19:41:83:1a:0e:
                    f8:66:a5:2a:aa:2d:8d:24:16:b9:9d:2b:39:bd:72:
                    01:90:ec:89:44:e2:d0:a4:97:6b:99:dc:38:b1:96:
                    c3:98:3b:73:08:4c:c1:2b:b5:3a:e9:1b:1e:d8:18:
                    80:1e:98:58:a2:cf:93:88:79:5c:46:e4:f6:09:61:
                    d6:43:8b:00:03:04:1a:d1:99:d5:97:96:c8:f4:58:
                    3a:a0:84:56:56:87:02:f7:de:2c:d5:9e:88:cb:bd:
                    ff:a7:0e:5c:55:3f:12:d6:f7:58:41:43:24:09:d6:
                    3b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FC:6B:F1:42:1C:2E:23:CE:88:6A:DF:D2:F3:7D:D0:C9:82:C4:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bee7246-fffd-3a4d-ab95-fb23a8017b5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:46:4f:54:a5:b1:99:e5:23:b8:88:f0:ac:de:c0:da:4a:d2:
         73:8a:81:5c:f6:7e:cd:44:b6:ed:dc:d6:d7:7d:86:3c:5e:67:
         a5:73:c6:9a:0f:d4:76:cf:9c:6e:1f:74:db:72:d6:de:55:51:
         3e:ab:fa:e8:54:d9:07:c0:bd:14:4d:ea:96:0a:37:fd:35:45:
         2b:b6:c0:f4:b8:be:c8:6f:fd:10:02:3f:e5:f5:ad:6f:18:55:
         ff:a6:86:a6:72:cd:0f:30:e6:03:44:8f:32:f7:11:70:09:86:
         7b:6e:1d:e3:2a:f8:de:42:63:31:06:c3:b9:3e:20:69:2a:ec:
         1a:66:6b:fc:ce:c1:92:db:70:5f:8a:11:77:a7:27:75:03:df:
         da:5d:fc:2b:b7:a3:dc:0a:bd:5a:01:4e:1f:82:0a:49:04:13:
         08:f3:33:23:33:67:4d:86:cc:77:60:d6:03:f1:89:2e:30:db:
         a1:e7:74:01:b9:29:d1:a5:9c:2c:a0:de:9b:85:dc:9f:7e:fc:
         5a:7f:82:ff:10:8e:f8:4d:96:37:a5:6a:bc:83:c9:a3:55:11:
         8d:5d:4f:65:22:da:00:e8:d0:9e:88:53:fe:77:4a:5c:d4:12:
         37:a2:93:70:09:fc:96:bc:89:69:64:dd:80:e4:54:3a:db:01:
         80:b0:11:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:04:18 2026 by rpki-client