Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a3e80-e983-38ec-a2e4-c8a29de1d08d.roa
File:                     048a3e80-e983-38ec-a2e4-c8a29de1d08d.roa (raw, json)
Hash identifier:          dUTfAp68XYGXJEL6x2cvjUtRcqstJEYuwNiZky6Ia8E=
Subject key identifier:   D4:91:6E:95:39:E5:29:49:9E:9E:15:9D:A5:4C:01:0A:3F:9C:FD:43
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD7F56B0264E6519F7CAE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a3e80-e983-38ec-a2e4-c8a29de1d08d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        67.54.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:7f:56:b0:26:4e:65:19:f7:ca:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f26eb0a7-02a1-4fb0-b510-4eac73bbf8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:af:81:92:cc:ec:69:04:9a:06:78:4d:80:a3:
                    83:b8:01:86:00:86:56:44:9c:07:8b:d9:7b:ec:1d:
                    5c:47:f8:88:8d:7a:3c:be:cf:4e:30:56:8d:a7:64:
                    c9:74:8e:1f:58:2e:f9:ad:d3:56:ae:26:ea:bc:12:
                    85:9b:0a:42:a4:8c:96:c9:d7:02:85:07:e5:1c:37:
                    88:f6:4c:4b:f0:e7:6f:55:f2:28:96:5d:51:b7:02:
                    1a:12:42:bc:26:9b:c9:80:d2:6d:d3:f0:ad:64:02:
                    f4:a5:44:05:75:a1:28:ca:a0:f6:72:4c:01:28:e9:
                    bb:9c:22:4f:59:2f:30:17:6b:a4:a7:3a:37:84:a9:
                    92:99:24:64:d5:88:1c:6b:b0:e2:3c:4e:66:99:3a:
                    da:1f:84:c6:26:0a:49:6e:23:28:6e:0a:0f:6b:74:
                    1f:64:11:04:5e:ce:d3:76:21:c0:97:a7:25:aa:e4:
                    37:cd:61:02:c9:d4:03:e2:79:57:f5:5e:c7:68:c7:
                    ef:73:8a:a1:37:49:fb:62:c5:44:dc:26:0d:bb:0f:
                    cd:7f:d6:9c:ee:75:fd:0f:a9:cb:41:16:fb:40:ac:
                    c8:c8:5c:34:71:d1:e7:b7:f4:a1:37:fb:e4:68:d5:
                    9d:16:81:3d:04:6f:0b:00:de:62:6c:54:b5:ce:27:
                    b0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:91:6E:95:39:E5:29:49:9E:9E:15:9D:A5:4C:01:0A:3F:9C:FD:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a3e80-e983-38ec-a2e4-c8a29de1d08d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:05:60:c6:bc:5f:7a:30:26:15:62:2f:17:d0:89:6b:be:37:
         53:e3:b8:61:7a:d9:50:48:bf:8e:10:eb:e4:e3:a2:c0:81:41:
         c3:6c:f6:9e:9d:37:00:72:60:6b:d6:2a:e3:44:8e:de:86:1f:
         78:05:62:01:1b:f9:c6:e2:cb:a6:d8:b5:e8:e7:a3:bb:71:77:
         1d:4c:3f:3d:78:2a:50:17:a5:08:cb:46:47:fe:e8:8d:59:d7:
         53:34:f5:bc:bc:e0:9d:7d:02:88:9e:f3:64:04:c2:63:ae:1c:
         05:38:a6:81:db:3e:1e:90:50:e3:17:70:f1:26:a7:d1:07:21:
         96:58:73:41:52:a8:55:b9:b5:c1:4d:bf:de:22:4b:33:64:7a:
         fc:8f:6b:52:5b:52:4d:c5:fe:32:fb:e4:4e:38:19:a2:eb:88:
         4a:cd:bc:9d:3e:71:44:ad:c5:ea:1d:cb:d6:50:4a:05:4e:07:
         2d:7c:90:d0:4b:b4:0a:0e:aa:ea:58:ad:f5:e1:52:e0:5a:69:
         e4:f3:7b:00:04:88:d8:d9:8c:d5:b5:6c:01:ee:68:ac:50:be:
         78:4a:be:10:53:66:e7:38:fc:18:53:0a:85:0b:59:71:ce:b6:
         74:f3:43:0f:dc:19:cd:c7:7c:df:42:a0:0f:5a:6c:42:6e:26:
         39:62:01:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:28:35 2025 by rpki-client