Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17d785e9-4de2-3bae-9ba3-f1bc02e0be5f.roa
File:                     17d785e9-4de2-3bae-9ba3-f1bc02e0be5f.roa (raw, json)
Hash identifier:          BuArz7A+dTZPZIA9vFW+QvZv2ffP/H6PQDe3wEfAR4E=
Subject key identifier:   28:7B:41:CD:D9:47:5D:10:FA:8D:C3:51:99:57:51:57:FD:F1:DF:17
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD35DBCB01B112656EBDE0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17d785e9-4de2-3bae-9ba3-f1bc02e0be5f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.21.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:35:db:cb:01:b1:12:65:6e:bd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ad6f6ad8-2376-4e03-96af-1502d85e2c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:6c:2a:32:db:b2:73:7e:f4:05:1d:0a:37:
                    dc:c5:e5:2b:9e:2e:a3:b1:53:b2:ef:ff:8c:e9:81:
                    29:e1:b1:68:a8:04:d0:22:24:fb:d4:6e:3f:10:80:
                    db:d2:9b:b8:3a:63:d7:ac:1d:35:db:aa:2d:e2:84:
                    6a:33:4f:8e:e8:d8:70:d2:f4:3c:72:12:f1:18:f1:
                    21:f8:16:26:e0:00:6e:cc:10:fe:c9:a3:7a:78:b7:
                    71:7d:41:2a:76:af:51:ac:99:9b:2a:5a:6b:df:45:
                    6a:14:b8:b9:45:2c:4a:73:9f:b0:0a:11:bc:db:c9:
                    f3:ed:14:51:e2:87:df:e9:ff:c6:eb:37:f7:c7:1e:
                    60:00:49:b2:7c:1e:f9:0d:0a:df:12:18:59:a5:e1:
                    9e:d7:f5:a3:62:0c:e1:22:53:fb:3e:17:e6:d5:cc:
                    61:3e:a8:5f:50:78:1f:dd:fa:35:89:1c:cf:8c:0c:
                    ac:9d:3b:04:99:bb:52:93:52:40:12:27:87:78:6d:
                    40:dd:6a:15:ff:26:35:83:fb:4b:83:90:d6:0e:75:
                    fc:44:e8:a2:98:83:25:23:07:63:24:f3:31:c5:64:
                    40:e1:b2:0c:15:55:42:77:dc:6f:a7:79:5b:06:b6:
                    b5:b9:e6:cd:ea:5d:6b:ee:7a:0c:ba:71:fa:5a:17:
                    1a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7B:41:CD:D9:47:5D:10:FA:8D:C3:51:99:57:51:57:FD:F1:DF:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17d785e9-4de2-3bae-9ba3-f1bc02e0be5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:c0:f0:50:5a:55:88:30:1e:61:cf:9b:3e:79:8a:e5:e1:fb:
         b3:e3:8a:0f:c5:17:57:47:35:4b:d0:ba:1d:32:1a:2e:a9:d2:
         8f:23:d3:68:43:c7:12:19:d2:79:50:57:61:79:61:2d:b9:a4:
         0c:d3:d5:9e:6a:f4:a6:24:ea:0b:dd:51:e0:f9:90:8a:61:71:
         77:3a:0b:8d:f4:6a:2c:0c:1b:84:d6:fb:c4:64:8d:c3:4d:73:
         f0:d3:36:2a:4f:ff:81:94:ae:a8:65:dd:0c:28:08:1e:6b:4f:
         eb:1f:ba:51:ce:04:2e:30:3a:64:9b:58:3a:91:8f:7c:be:5c:
         01:d2:a2:1f:83:f8:23:6c:89:61:df:53:57:4d:2c:28:36:86:
         da:f4:3a:30:3c:38:72:ca:54:2e:e8:a0:92:6e:9d:cb:08:3b:
         ac:1e:d7:16:85:a3:f0:25:8d:ee:40:f2:b7:18:e8:0a:71:9d:
         11:e6:67:68:dc:f6:0b:f6:e4:5f:91:af:00:de:8c:c2:34:65:
         d8:e1:80:12:76:5a:a4:24:a4:f3:4c:91:ce:1d:e8:d7:ae:93:
         f0:9b:46:5a:be:ef:4c:53:f3:a6:fa:84:41:3b:91:0b:2e:2b:
         37:a8:ef:7b:f9:4e:c5:e6:a6:d7:51:19:28:e4:a0:a3:d1:7d:
         20:f1:08:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:08 2025 by rpki-client