Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14abd616-1953-3ce9-981f-23a0551028ec.roa
File:                     14abd616-1953-3ce9-981f-23a0551028ec.roa (raw, json)
Hash identifier:          P6Nwaj5lp3p2T+pOZrDS1xlr+ZksxsW0OrbcdM7Yc6w=
Subject key identifier:   E5:80:03:8F:49:7E:08:F0:11:F5:44:5A:D6:3E:75:85:33:00:5F:A2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD3B6B57F258C18393DF30
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14abd616-1953-3ce9-981f-23a0551028ec.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.62.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:3b:6b:57:f2:58:c1:83:93:df:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=152f5932-8998-41e6-a434-8ef67ff7cbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:4c:ba:fe:15:82:42:68:be:d0:87:6c:f0:
                    27:f8:9c:e5:52:1a:52:2f:75:5c:25:f8:c3:bb:5e:
                    8d:07:43:95:2b:48:55:7c:4b:3a:9e:7e:0b:3a:b1:
                    6e:ed:43:26:0d:b9:f3:46:bc:9f:fc:56:8c:1c:d3:
                    bb:3f:42:42:13:e1:e3:42:39:d8:f6:dd:47:66:48:
                    e2:72:87:14:ee:00:21:3a:33:42:6d:f6:b0:d6:68:
                    83:7c:c3:20:5f:f6:11:c0:89:97:e4:a3:b1:02:68:
                    31:30:8f:48:2b:5e:f1:1b:95:0d:08:a8:f2:d3:39:
                    07:e8:f7:bb:d7:d3:3a:c5:a5:40:a9:46:48:d0:3f:
                    9d:cf:5e:5d:5b:a7:e7:e8:d9:54:ca:32:19:22:a3:
                    45:e3:67:85:01:26:6b:b3:72:65:f8:97:47:c2:31:
                    47:40:4f:b2:5e:3a:8c:31:09:38:5a:7a:cc:f6:51:
                    d4:69:54:64:05:35:cc:6b:9e:c8:f3:e4:f2:59:8a:
                    5d:be:4c:75:00:08:4e:1d:c5:52:98:d4:c6:fe:09:
                    a4:b0:71:82:84:f1:08:66:43:1b:4d:84:a9:da:d5:
                    b2:ca:1a:71:0e:2f:ac:e6:ba:0e:5a:c7:bc:7a:aa:
                    2a:f5:53:50:73:b8:2d:2b:7d:11:40:05:ff:b7:08:
                    45:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:80:03:8F:49:7E:08:F0:11:F5:44:5A:D6:3E:75:85:33:00:5F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14abd616-1953-3ce9-981f-23a0551028ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:83:83:eb:f3:a1:ad:b6:1c:0c:26:89:bb:ce:c2:0f:2b:e1:
         68:50:eb:f0:a5:60:bb:f8:69:56:51:a9:76:67:cb:1f:83:b5:
         80:a1:96:98:4e:9b:69:8a:69:05:8c:86:16:d3:6a:2d:e1:8a:
         81:78:b4:06:47:53:85:b3:27:f4:16:2a:4e:a1:6e:46:b6:ed:
         bd:aa:00:55:1e:e1:9d:73:fa:a6:db:c1:9e:87:bd:d1:e5:3f:
         6b:e4:aa:fa:79:e7:65:f5:01:b9:5e:88:c3:26:03:d8:84:bd:
         ee:7a:30:43:21:e9:82:37:3e:9c:2a:1c:86:75:e4:a0:44:2f:
         5f:3c:7e:74:20:9e:ae:35:70:b5:22:2b:0f:ad:59:85:9e:f4:
         7f:dc:58:32:b3:dc:3d:56:68:f0:c1:a1:73:cd:2f:74:f7:06:
         5f:11:5d:be:56:82:91:c5:e8:76:82:c4:4b:bd:20:97:b7:ed:
         9c:86:cb:63:f9:43:e9:2e:13:53:d6:ba:61:8f:40:e0:e8:80:
         57:98:ce:cb:4e:60:ea:6b:ad:b2:82:84:54:17:39:33:44:b3:
         16:4d:07:0a:a8:26:f6:2e:15:27:d5:d1:33:48:bb:cd:cc:8d:
         d7:64:eb:d1:6d:23:ac:e6:5f:e9:38:aa:79:51:7c:96:77:a9:
         20:89:4d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:13 2025 by rpki-client