Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa
File:                     083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa (raw, json)
Hash identifier:          65ujEoPdSyNKcpLIcYFlPAWM9JnRmdhCNe4rTIeWHrI=
Subject key identifier:   1E:72:E6:27:13:56:05:B7:47:0F:FB:3D:DE:09:F7:05:08:74:0C:1D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD1EA298FB5C5C0F660280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.243.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:1e:a2:98:fb:5c:5c:0f:66:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a280fe9a-146f-46cf-ba07-47844ba0d5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8e:de:03:67:74:22:0c:da:dd:e7:5f:5a:4d:
                    fe:08:de:96:6b:48:5f:11:c9:b6:bb:b5:79:37:9a:
                    13:67:34:13:35:39:15:97:c5:2b:13:36:88:89:3c:
                    14:41:b6:f1:5b:56:72:ee:59:d9:30:b8:b6:92:93:
                    5b:85:a1:04:33:8a:59:b8:25:31:e5:5f:8d:0d:0c:
                    46:6e:fa:4c:39:01:a7:9a:0f:db:bd:d5:84:28:cc:
                    05:ca:89:21:30:ff:b8:af:22:d7:ec:39:c7:eb:2c:
                    dc:f0:be:39:b1:c2:b3:63:ef:cc:f5:e7:10:b3:9a:
                    7f:f8:36:70:21:7a:ec:bb:8d:08:2d:0e:fe:cc:cc:
                    e3:3d:7f:d9:56:67:cf:3c:e0:42:6d:c9:39:14:06:
                    c3:2f:9b:4e:a4:8a:ca:62:5d:0d:95:37:c8:8f:07:
                    03:0b:5c:43:d2:e6:86:17:5e:58:95:e6:78:a6:6a:
                    dc:92:b2:87:09:94:20:e2:9e:a3:d6:3f:df:8e:80:
                    f3:f5:40:25:66:bb:d4:2f:01:cb:0d:0c:0c:4e:37:
                    c3:e1:d4:a2:39:95:73:34:3a:b9:87:6d:88:17:95:
                    00:cc:18:c7:6b:cd:b2:f6:50:6b:0d:af:82:47:d7:
                    b6:01:9e:2d:de:7d:ab:bd:b2:4b:2a:e9:33:f0:3b:
                    e2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:72:E6:27:13:56:05:B7:47:0F:FB:3D:DE:09:F7:05:08:74:0C:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/083c10f2-1ad9-3491-9a35-4cf1a0b25ff3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:99:7f:1a:83:da:24:37:fe:3e:0c:bf:22:83:20:2d:62:a5:
         ec:49:92:98:30:c5:7e:80:16:fc:1b:ef:43:8e:dd:a7:3f:3a:
         4c:47:10:0d:7f:ed:3c:e9:66:70:bb:94:af:75:00:3b:fc:c0:
         c8:41:d3:96:d0:38:e6:f5:2e:29:9a:62:8f:16:31:fa:cc:ef:
         6f:5e:ae:6d:a2:07:7b:8f:32:3a:4f:25:f0:d0:5c:5d:f1:62:
         30:03:98:ca:6a:27:22:81:ad:35:cc:fe:79:e7:c9:cc:cf:c8:
         b1:34:ad:2c:e7:79:b3:8c:f3:1b:2e:81:64:d3:13:77:54:7b:
         62:8b:81:72:58:11:e2:04:8d:9c:8b:6a:3f:ee:9c:89:01:57:
         f8:17:d3:6f:ec:a5:25:98:e8:5b:e7:24:4a:01:62:96:f2:ab:
         5a:e5:7f:1d:cc:29:10:8b:de:9b:cd:4b:cf:3e:31:67:3a:92:
         68:1a:50:1c:94:18:b0:21:6b:51:60:0e:99:f8:2a:0a:20:12:
         97:8d:9d:f2:e6:35:42:98:fd:4e:e5:a3:ec:94:51:cf:c0:d4:
         21:c5:d6:5b:2a:fc:f2:8d:b7:1a:ae:6d:94:01:7d:da:b3:5d:
         62:8a:66:dd:92:ae:bc:10:6a:41:ba:33:c8:92:5d:40:3b:39:
         1f:af:63:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:54:22 2025 by rpki-client