Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96fa9899-d172-374f-8d77-4151bbbfae0a.roa
File:                     96fa9899-d172-374f-8d77-4151bbbfae0a.roa (raw, json)
Hash identifier:          bL1/piNKnkVAgSjTWQN6NdXVxljwJ6FYJt31Nj9pJeA=
Subject key identifier:   B9:A7:36:02:CD:25:15:F9:C2:F5:E6:F8:FE:00:12:C2:98:2E:16:0F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C0366EF93B03D31083F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96fa9899-d172-374f-8d77-4151bbbfae0a.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.196.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:03:66:ef:93:b0:3d:31:08:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=c28c6ba8-81b0-41dc-ab1e-39fe49cfdb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:eb:84:f2:7f:8c:73:31:ea:c6:0c:6a:da:e6:
                    26:5d:34:e7:ec:70:14:1b:1a:40:b4:c8:4a:f8:c7:
                    23:af:52:94:d4:c1:10:3a:3d:40:dc:9f:c2:8a:c5:
                    e9:41:a0:e1:12:50:12:50:18:fe:88:60:a5:ce:9c:
                    b2:c1:c0:3e:c9:ad:ca:1e:c9:d8:56:a7:91:a2:eb:
                    01:36:2c:6a:f5:8e:bc:74:84:54:32:59:d6:e3:b3:
                    ba:c0:63:68:19:7a:0e:f4:7f:89:09:ea:9a:92:d7:
                    e2:ff:98:9c:bb:6b:83:6e:2f:69:74:db:ad:09:18:
                    63:35:74:cd:f7:47:73:dc:67:76:c3:af:7c:da:dd:
                    17:78:b8:29:3d:0b:d9:27:7c:39:37:8b:23:9f:9e:
                    5f:c8:10:a1:91:67:30:3f:2c:ab:2e:b3:be:81:a2:
                    de:2b:a6:a8:4b:a0:44:cf:6a:7b:03:e4:a9:06:4d:
                    32:ca:35:7b:a0:ff:a7:0c:1e:04:60:0f:8e:5f:d9:
                    22:37:c0:33:cb:97:3a:06:07:26:25:52:3d:a7:96:
                    1e:16:04:ce:55:90:ea:dd:52:b4:9a:50:6d:44:80:
                    b8:9d:6e:31:92:6c:ba:b1:a1:94:84:6c:15:a6:a9:
                    6e:7c:2a:4c:c8:85:99:00:06:3a:98:05:cd:1a:64:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A7:36:02:CD:25:15:F9:C2:F5:E6:F8:FE:00:12:C2:98:2E:16:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/96fa9899-d172-374f-8d77-4151bbbfae0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5a:04:fb:a4:e9:57:40:03:f2:1c:cd:d9:94:93:94:77:27:
         ca:b7:01:18:c3:9e:4b:63:19:c1:3c:9f:01:2c:10:df:9f:b0:
         c1:e0:06:1d:aa:58:08:f5:a4:05:10:12:e4:4e:04:94:c9:21:
         13:20:d7:90:5f:d3:a0:93:e8:8a:1a:df:20:ac:4d:13:56:b9:
         b5:bb:7f:d1:f9:65:5f:cd:f1:5b:37:25:f4:a6:df:e5:c2:29:
         ae:85:48:d0:3a:f2:ff:b3:fd:00:9b:56:52:d8:21:de:c6:36:
         8d:db:84:57:d5:8e:0b:0a:47:98:84:c7:51:9d:8b:bd:16:10:
         41:e6:52:76:6d:0d:d3:da:29:e5:cc:c9:71:7f:9a:51:76:b5:
         cf:9b:4e:79:c8:ba:43:70:5b:bd:b2:47:9e:a3:47:a4:7d:e9:
         48:01:c9:08:6f:4f:8e:bd:04:be:a8:bc:53:95:ea:62:87:fd:
         d4:77:ee:a7:b9:93:76:a4:18:45:0e:d2:f3:c5:27:3c:36:f5:
         97:5d:22:fe:6e:d0:ac:11:9d:ce:d3:4f:c6:bc:54:0b:dc:5a:
         52:9e:1a:86:8a:d2:56:46:bb:76:fd:a0:8b:2c:32:e0:4f:ba:
         a1:48:8b:de:b9:2d:41:8f:88:4d:42:39:1d:b6:aa:ce:2e:8f:
         08:d6:a2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:09 2026 by rpki-client