Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a6d64a3-9926-314d-b514-0641b86cdb63.roa
File:                     1a6d64a3-9926-314d-b514-0641b86cdb63.roa (raw, json)
Hash identifier:          S6vAAZDTr6ZWZXSo3RS6OxEkaBVZrGKd4xquTPm8E/c=
Subject key identifier:   73:00:33:02:51:A4:A3:82:95:53:01:45:C0:1A:3F:DC:80:B9:28:90
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD44E3A641E2A86A80F000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a6d64a3-9926-314d-b514-0641b86cdb63.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:44:e3:a6:41:e2:a8:6a:80:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=167ddafc-797c-4a80-a0bd-9609db965675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:6c:36:86:4e:57:f2:98:20:cf:92:e1:2d:
                    2a:ba:44:5e:30:d0:c4:5c:6b:5c:14:4f:fc:c7:3c:
                    f8:0f:ec:4f:39:f4:3c:e4:53:f1:67:4b:5b:8a:38:
                    e6:7c:b7:32:e8:2f:f8:09:36:e0:59:b9:0f:9d:ec:
                    ee:df:97:1e:d9:4c:74:28:5c:14:d2:af:1b:82:ac:
                    f3:ff:fb:ea:aa:28:e3:47:b4:25:c3:38:75:e5:a8:
                    61:cf:da:7a:e4:ea:b4:a0:46:7e:f4:77:b5:6b:2f:
                    46:8a:85:67:6f:e1:0d:eb:2d:18:b2:d9:a9:f7:e5:
                    d2:8b:78:24:3a:d9:ae:cb:da:f1:d8:9e:ad:f5:e4:
                    1a:bf:a5:d2:aa:fe:6b:9a:f6:0e:49:9f:49:57:1f:
                    f7:76:d2:42:7f:97:8e:50:9a:e2:03:d6:e7:b3:1c:
                    22:9f:fb:3b:d2:2d:8c:d1:0d:a4:4e:fe:bd:cf:d6:
                    9b:8e:bb:8f:67:fb:dc:1c:c8:4d:10:7d:c1:7f:f4:
                    ec:f8:9c:6a:23:58:ea:14:6d:ff:3f:5a:a1:c5:1f:
                    4c:57:19:5e:74:54:18:9a:ba:16:de:5b:46:0c:31:
                    0c:74:3e:ac:3b:86:71:85:04:b5:70:c9:bd:9a:14:
                    e9:f6:bc:10:f0:17:34:28:c5:09:a4:50:42:d6:b1:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:00:33:02:51:A4:A3:82:95:53:01:45:C0:1A:3F:DC:80:B9:28:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a6d64a3-9926-314d-b514-0641b86cdb63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:bc:24:e5:02:92:1b:fd:9b:fa:53:c0:9e:62:1b:1a:25:9c:
         25:d0:05:6a:c2:fe:cb:4f:1a:66:a7:9e:33:eb:d0:c8:6d:0c:
         86:fd:e5:fb:9d:8e:30:f7:85:97:be:09:18:de:15:37:08:9b:
         4e:e9:6e:ba:8f:f1:42:91:ce:89:f5:49:c4:53:90:0a:0b:63:
         ec:11:dd:e8:08:8d:96:52:64:52:c1:6d:79:e1:3b:53:e9:8e:
         75:31:74:9d:33:5e:06:01:89:51:1c:6e:7a:96:f7:9e:0f:d0:
         71:88:2d:ed:87:ba:7f:2e:ed:62:64:b3:1f:1b:55:71:cb:da:
         a5:80:ed:9d:25:a8:b1:91:30:fc:22:3d:2f:30:3f:17:71:43:
         2a:e1:c6:4a:de:b1:b0:a2:3d:4a:91:85:da:77:6d:98:dd:82:
         96:49:8b:52:16:19:f9:17:9e:ae:c4:e4:d6:af:da:b6:9f:36:
         c6:97:87:ca:fc:9f:fe:03:95:71:f6:30:0c:75:9b:3f:ab:be:
         81:0d:08:d0:77:82:ef:0b:30:fd:ee:32:3f:d8:d9:3b:d9:42:
         31:95:19:fc:fd:c3:c6:52:77:9a:a3:8e:d5:4f:85:d3:8d:1a:
         7e:62:69:89:04:89:76:f7:c0:60:db:bb:06:7b:f6:bf:14:df:
         22:37:8c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:47 2025 by rpki-client