Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5eb1765-4cab-3c63-8b8a-6437a9c635aa.roa
File:                     a5eb1765-4cab-3c63-8b8a-6437a9c635aa.roa (raw, json)
Hash identifier:          gFG0wzMppYNrbLWpDeYEsYTAw/dEJJhHVOyG5oUK6uw=
Subject key identifier:   BD:34:56:B6:44:8E:03:31:47:F6:80:81:9A:26:CC:27:C1:0D:98:E7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79DDC0211E804432BB11780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5eb1765-4cab-3c63-8b8a-6437a9c635aa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        99.196.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:dc:02:11:e8:04:43:2b:b1:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0bc0c40c-d286-4274-8440-e58b12c885c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ef:49:cb:fb:2c:2c:33:e3:69:89:e0:14:da:
                    cb:ec:06:ee:5b:f1:fa:cd:bf:7e:25:f5:ba:79:e0:
                    2e:1b:a6:99:19:e6:f7:6d:3a:cc:97:57:f1:47:eb:
                    d7:6b:28:7c:ad:fd:9d:f7:23:aa:28:5e:68:9d:09:
                    f5:5e:0c:3b:b4:a8:58:9c:b8:aa:f4:37:5b:23:75:
                    2d:08:de:6d:aa:75:60:66:6c:4c:1c:f1:4b:53:83:
                    f1:5a:b5:fa:a7:82:00:28:e0:0a:90:10:1a:38:30:
                    9b:97:0f:68:42:cc:18:1c:46:7c:44:21:bb:07:29:
                    21:fb:57:77:43:8e:c6:e8:e7:e8:30:5c:c6:9e:86:
                    49:f6:3b:a6:69:d9:ef:45:40:0a:36:31:e8:f2:13:
                    79:fe:b6:e2:ce:44:54:92:4d:4e:68:e5:f3:19:33:
                    08:8e:21:7f:9d:9f:6e:88:75:15:af:57:0d:71:0f:
                    61:bd:aa:b6:28:14:b0:12:ba:c0:8c:bb:8b:c9:a1:
                    a0:27:89:fc:bf:b4:bf:c4:fb:c4:38:65:d3:07:d6:
                    26:2e:6c:e7:06:35:99:c5:06:64:30:48:37:15:cf:
                    74:39:3c:e3:57:e4:17:d3:da:3a:bb:d9:1d:a5:8d:
                    ba:9b:4b:66:f1:e3:53:c1:9b:5d:0b:6b:a8:18:71:
                    bf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:34:56:B6:44:8E:03:31:47:F6:80:81:9A:26:CC:27:C1:0D:98:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5eb1765-4cab-3c63-8b8a-6437a9c635aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:a7:6f:4d:56:45:3e:eb:82:99:d0:c9:da:f3:65:08:2d:ea:
         8c:02:0d:48:bc:66:8c:98:9b:f3:ce:c7:bf:da:8c:8f:8d:9a:
         db:ba:f7:35:89:18:aa:c0:ff:6a:f1:c0:4c:ee:f3:1c:38:b5:
         8f:39:15:80:a8:e0:77:95:1c:a8:3a:c1:97:a5:7c:bd:e6:28:
         4d:a7:1d:37:00:74:cd:9d:7b:a2:e1:8b:20:01:83:f9:fd:84:
         3c:6c:96:40:de:43:36:b1:32:7f:92:00:b5:f3:84:2f:20:20:
         97:64:fd:74:36:88:39:03:b7:31:f9:49:0f:6e:f1:80:c0:5e:
         e2:0f:a1:97:47:27:d6:86:f0:a7:60:64:8f:e6:bf:c5:ab:e1:
         7c:90:eb:cb:e3:bf:dc:69:9d:79:f6:26:bb:fe:c9:99:b2:d9:
         b9:9e:14:48:97:a4:b5:c9:db:59:c1:e0:2c:4d:ad:f4:e7:d7:
         a5:e1:82:87:b8:c3:27:3b:0e:1d:01:f2:ab:98:80:ba:b8:bf:
         9a:a3:c4:f8:d5:00:1d:33:75:30:a4:1d:e7:e3:14:bb:6f:f3:
         52:d6:1b:09:71:98:1c:7d:cd:9b:43:72:c8:df:c9:15:8c:16:
         1f:1a:fe:b9:87:44:61:a1:c4:cb:2e:d1:5b:54:3a:2d:8a:16:
         ce:2d:09:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:56:08 2026 by rpki-client