Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71f31d90-8ea0-3564-8a1a-d8204e3e6665.roa
File:                     71f31d90-8ea0-3564-8a1a-d8204e3e6665.roa (raw, json)
Hash identifier:          ph8xGeNVTyrzN4u8fapz+FrPZIDmQu03eJcsCILx3W4=
Subject key identifier:   9F:8E:48:C8:30:81:CA:91:DB:5E:1D:BF:9C:E9:4F:9D:BC:2E:67:72
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C09BCE651CC1E6EBAC580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71f31d90-8ea0-3564-8a1a-d8204e3e6665.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.197.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:09:bc:e6:51:cc:1e:6e:ba:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=a4b8c047-9b6d-4926-af45-86acc66abeeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:e2:40:b2:6a:c0:61:e6:e7:7f:49:1a:6b:
                    c4:84:e1:ee:15:18:9a:b9:7f:30:de:9d:82:cc:72:
                    3d:33:dc:f7:31:fc:00:79:f2:10:f7:ed:c3:16:87:
                    db:1c:48:7b:68:f8:cc:71:13:19:25:e9:86:a3:38:
                    83:ec:c6:8b:3e:b8:c6:19:8f:7a:f0:87:b0:65:db:
                    39:20:c8:85:86:06:36:cf:17:67:6e:a0:16:ae:0d:
                    54:30:3b:76:06:27:3f:b8:ea:50:33:d8:8d:d0:2c:
                    aa:6c:4c:75:8b:64:a6:ed:c6:73:73:d5:1c:08:31:
                    86:45:a6:18:1d:94:bd:70:0a:aa:89:b3:e7:38:31:
                    f3:8a:ed:62:48:b8:50:4d:77:de:8f:81:06:83:4a:
                    53:15:3d:76:7f:a8:9c:0a:cc:b1:31:d9:2e:62:da:
                    ae:62:1e:3c:1f:bc:17:ad:56:f3:f4:27:79:9d:1e:
                    a5:ea:88:54:26:fc:d1:fe:aa:da:49:c0:bf:1f:2a:
                    05:2b:88:e0:94:1f:92:92:4e:3d:7f:82:5c:51:07:
                    2b:50:9c:32:c5:d2:11:06:5c:f9:c0:80:7d:04:71:
                    f8:e8:1f:5d:81:2f:ba:97:60:ef:7c:59:21:69:a1:
                    0f:45:60:bb:92:db:89:af:35:61:e9:fd:18:b8:89:
                    06:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8E:48:C8:30:81:CA:91:DB:5E:1D:BF:9C:E9:4F:9D:BC:2E:67:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/71f31d90-8ea0-3564-8a1a-d8204e3e6665.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:84:ce:7f:68:b6:0c:c0:8d:d7:8e:b4:66:fa:73:9f:93:b1:
         38:02:04:76:40:de:8c:13:79:38:8c:5b:0f:c4:8c:f1:41:e1:
         e4:23:25:af:01:2f:fd:cc:19:e3:77:52:45:e9:8c:e1:1c:e2:
         ac:b8:f0:be:4a:e6:6e:68:65:bd:02:47:6c:85:25:66:db:c1:
         c3:e5:34:0f:6e:5d:9d:e6:14:4d:cb:01:c6:bb:ca:6a:59:02:
         88:1d:ca:8f:c7:07:10:ea:12:e9:2c:ad:2a:78:dd:fc:7b:28:
         76:35:cc:eb:f1:b2:e5:14:ff:b2:cb:1f:c2:20:8d:7b:a5:78:
         06:5e:45:1e:3e:85:84:32:e6:ef:06:ea:cc:b1:ac:6f:10:85:
         4f:a0:8f:4e:5f:aa:a7:e9:2c:ae:07:fc:42:a6:a9:46:02:cb:
         93:4b:99:74:da:bd:6a:33:d1:39:ae:e3:a5:6f:a6:62:08:3d:
         ca:46:20:2d:95:fa:32:61:82:56:b5:48:11:11:c9:3e:00:99:
         6b:f0:52:6e:e4:72:41:b3:7d:50:8f:12:7e:48:dd:44:93:4c:
         88:56:a2:02:c4:ea:dd:00:c7:0c:82:1d:ed:cd:08:e4:b9:0b:
         f2:f1:76:ac:d9:2b:1b:f8:45:05:0f:8e:83:12:af:71:b7:90:
         5c:24:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:40:03 2026 by rpki-client