Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0724c8db-38c3-3da7-ab4b-e1c62f775758.roa
File:                     0724c8db-38c3-3da7-ab4b-e1c62f775758.roa (raw, json)
Hash identifier:          koNEEzpWSTOmoldZdJh5KFKlU5YTS+9XoHVBsEF1Q8o=
Subject key identifier:   CD:00:C8:74:0E:D7:FC:5A:87:93:26:68:8F:B2:56:70:45:23:8B:86
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD2DC35A37371045802280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0724c8db-38c3-3da7-ab4b-e1c62f775758.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:2d:c3:5a:37:37:10:45:80:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=505d6c0d-5176-4514-9557-3973626307e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:08:39:94:a6:c7:9e:9e:f1:bc:47:47:90:
                    c5:3c:56:e5:b2:02:6d:72:f3:c0:b1:0c:11:b7:0f:
                    5e:7d:a9:38:90:c9:0b:f9:15:87:5a:93:70:ac:8c:
                    26:07:0d:1f:29:42:a4:01:bb:fc:8d:f4:16:85:a7:
                    fc:54:d4:33:85:7f:71:a2:81:04:2c:16:5b:3d:7d:
                    49:e6:d4:ae:e3:73:0a:30:89:ac:10:5e:ba:37:2d:
                    7f:3f:bd:df:8c:41:e7:02:d8:9a:58:26:8d:bd:0f:
                    fb:88:cf:32:92:b7:76:40:3f:e2:1e:50:01:88:e7:
                    ea:98:23:f2:49:ea:5e:d1:0a:b2:94:b3:53:88:9d:
                    2e:3b:23:79:db:ac:f2:7b:03:9e:3d:81:3e:65:f6:
                    9e:94:92:3c:cf:9d:4f:ca:b1:ff:6b:5d:09:96:5c:
                    28:a1:dd:2c:41:06:1d:24:97:e4:c0:a5:5a:17:40:
                    81:47:f8:a8:13:db:e9:89:fa:a8:12:1d:fa:1d:01:
                    bc:68:3b:ea:11:a1:c9:76:1d:5c:95:8b:6f:00:f7:
                    3b:e1:39:2c:0b:a5:98:6f:3f:4e:78:03:4d:b8:f3:
                    92:a0:a7:1f:db:1e:8f:b7:f7:1c:17:5c:aa:0e:c4:
                    bf:9b:11:4b:4f:db:35:ec:35:35:50:9e:9d:ea:9c:
                    43:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:00:C8:74:0E:D7:FC:5A:87:93:26:68:8F:B2:56:70:45:23:8B:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0724c8db-38c3-3da7-ab4b-e1c62f775758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:db:59:d8:45:0c:d0:7a:80:9d:3f:15:34:ef:74:39:17:74:
         50:2c:f0:ab:08:4e:c5:cd:cd:b3:67:ea:07:87:79:67:e3:aa:
         83:23:ca:c3:65:45:78:c1:f6:8b:c5:c1:43:47:2c:03:37:2a:
         6e:4e:3b:44:3b:14:ce:28:d2:23:ec:b2:26:43:48:7c:d8:f3:
         e8:90:16:d1:03:a8:b4:91:7b:a9:49:f2:15:3b:7a:fc:ca:0d:
         41:14:74:3c:72:61:6e:86:6b:97:db:8b:03:4c:04:78:06:46:
         8c:6c:68:7c:ce:67:83:2b:95:45:b0:26:96:0b:12:cd:22:8c:
         28:a3:5b:25:69:c3:ef:84:ca:a7:dc:ef:3d:a8:95:52:62:ec:
         53:7b:34:c7:a1:bd:54:71:df:75:3c:2c:ee:b6:eb:4c:13:dc:
         fd:f6:3b:ef:62:2f:f5:ad:79:ee:45:e8:7e:7f:db:24:42:7c:
         59:9b:61:a7:21:c0:b0:24:b8:67:40:09:e7:1f:c3:29:7b:8f:
         52:b1:10:f1:bf:89:ce:ca:9c:e8:39:3d:53:2a:6d:4d:6b:75:
         a5:25:bd:2e:ef:ac:61:14:b8:80:1c:50:3e:ac:3f:49:ee:10:
         7d:cc:c1:af:ef:8d:62:f7:cb:55:85:0d:e7:57:99:7a:6c:86:
         cc:97:75:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:20:40 2025 by rpki-client