Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69c706d4-d909-366c-b5c8-0885997fdd24.roa
File:                     69c706d4-d909-366c-b5c8-0885997fdd24.roa (raw, json)
Hash identifier:          iZNzehroLhbYYw8FDFICt0z2/OsuiIVStmg6WrXXKoA=
Subject key identifier:   74:48:DD:7D:B0:DE:13:DA:37:A5:CD:F1:DB:4A:6A:BE:25:BC:5A:48
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497B787980449B35C790FEC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69c706d4-d909-366c-b5c8-0885997fdd24.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        99.198.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:78:79:80:44:9b:35:c7:90:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=319c5c6d-65b0-4718-bfe7-40b7415f8d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:33:74:e9:44:21:91:8e:91:0c:2b:27:7e:ec:
                    dd:18:d6:dd:26:9e:1c:37:91:b2:e0:71:94:b7:50:
                    d3:d0:ac:b9:2a:4d:c0:8a:71:ad:bb:e6:70:5c:f4:
                    36:de:f0:55:45:67:36:38:5f:7d:74:9c:eb:36:12:
                    04:d0:e2:db:8e:b6:5c:48:06:69:30:c3:76:df:a5:
                    5c:91:b9:3e:5f:0e:56:b0:e3:57:24:8c:d3:a2:a3:
                    ef:29:9b:cf:aa:31:41:ea:2a:85:dc:a5:57:ec:cf:
                    35:b3:a5:29:dd:68:44:a8:49:f2:ea:4a:b9:f5:81:
                    76:c6:54:29:94:f3:cc:83:3f:f2:ae:e9:05:66:ca:
                    17:ba:2c:dd:ca:72:46:79:37:a5:a5:38:43:2a:a2:
                    40:43:04:1a:71:41:d8:3b:7b:bb:6a:36:42:dc:15:
                    e9:ae:c3:10:2c:f1:d1:1b:7b:97:30:4c:26:cf:79:
                    f4:fe:09:0a:e2:df:36:21:86:5c:b8:99:a2:c5:b2:
                    4a:af:86:43:13:64:15:d7:ba:26:d7:c6:f8:4a:6d:
                    d5:19:60:81:a3:cd:6e:f3:99:30:1e:68:d6:a3:f9:
                    4c:c1:10:ba:a6:e4:73:61:b8:34:e7:2f:5e:54:c2:
                    91:0d:63:ff:e3:64:a9:9d:1a:a1:dc:73:9a:5b:61:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:48:DD:7D:B0:DE:13:DA:37:A5:CD:F1:DB:4A:6A:BE:25:BC:5A:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/69c706d4-d909-366c-b5c8-0885997fdd24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:5d:d4:7f:e6:1a:f2:a0:f5:84:4e:50:47:2e:88:c6:5a:ba:
         be:5f:81:74:88:c1:43:0a:c9:fb:9c:0f:92:19:4b:b6:82:5b:
         0e:f4:c6:d7:cb:31:2b:5c:8c:cd:b0:08:52:38:69:4a:c7:df:
         72:9f:f4:32:38:60:f2:d6:b9:5b:6c:dc:c3:2e:54:31:57:ee:
         92:46:6b:9c:15:d9:49:eb:de:c5:25:a6:87:8f:ee:91:06:d3:
         78:d7:71:5a:dd:eb:87:84:4e:45:46:f5:35:c0:c3:08:51:14:
         39:d0:c8:26:71:56:0f:d9:79:35:ae:34:68:80:5b:b7:9a:ef:
         c2:d5:8a:34:45:06:2c:c3:18:09:57:7e:f5:2a:3f:3e:ee:40:
         c8:98:d7:96:14:bf:7a:35:ed:a7:b4:bd:19:c4:99:f7:32:ac:
         e6:39:28:8c:75:ce:d0:6d:4d:0a:2f:7a:60:8e:d1:b8:06:e5:
         2b:9d:7c:f2:83:05:c5:2f:15:c4:b9:21:27:2c:7d:25:74:3a:
         a8:c7:97:7e:a1:22:a1:7e:bb:23:3b:03:9c:8f:08:3c:c6:b1:
         6d:20:29:13:24:73:31:ea:74:b0:16:1b:e6:24:69:97:51:0d:
         eb:08:3a:f9:e9:91:2d:8f:4b:c7:b2:a2:02:81:f8:cb:c9:43:
         d3:dc:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:15:06 2026 by rpki-client