Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22f4f2c6-24f3-35de-92ed-991f81febef8.roa
File:                     22f4f2c6-24f3-35de-92ed-991f81febef8.roa (raw, json)
Hash identifier:          ziSG8WMBsW6UvNCJHWVew3ozcB1gfbJ8DxgwBqaDgbs=
Subject key identifier:   E9:40:16:98:45:36:40:C9:7E:EA:E8:B9:2A:93:75:9E:39:A8:AB:94
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDF4A3E1B3922A9868AB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22f4f2c6-24f3-35de-92ed-991f81febef8.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.62.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:f4:a3:e1:b3:92:2a:98:68:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c48c79bc-fef4-4bf6-a054-761628c793d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:6c:f4:f0:5b:5a:f4:de:c4:67:f6:c1:fa:
                    17:c8:0c:dd:38:9a:e5:60:5c:2b:72:01:66:2d:63:
                    3d:4e:c5:00:17:5f:aa:e7:64:67:84:f2:7c:3c:35:
                    e9:7b:16:8f:ef:43:a5:44:a1:34:20:03:5a:28:6b:
                    ec:38:27:4f:5f:af:1a:8a:73:9a:17:fc:c1:de:01:
                    2d:69:4a:fe:53:24:f4:ca:a5:1f:48:31:ed:9d:a0:
                    66:e7:cd:9d:d4:77:dc:07:bf:65:0b:71:fd:a0:14:
                    aa:16:47:94:88:00:a0:85:49:6d:0a:be:d5:27:71:
                    eb:4d:ed:55:43:35:76:dd:3b:45:59:c3:b8:12:b0:
                    1a:9d:f6:40:7a:be:be:01:60:e0:85:36:a5:45:c7:
                    d6:8a:83:48:44:39:cf:46:a6:c5:63:d1:e8:c1:e2:
                    98:5c:66:41:9a:1f:65:3a:82:73:1c:8d:a2:63:2f:
                    8b:99:20:fe:2e:23:01:5a:b1:3f:ac:78:f1:4c:70:
                    43:09:16:a1:57:79:e4:bf:33:be:fc:80:42:42:2a:
                    22:9b:1d:68:aa:ee:b0:4c:ed:a7:6b:1f:63:a4:54:
                    29:6b:e8:2a:68:5c:71:e4:65:44:bb:5d:6c:d0:ca:
                    bc:6a:30:be:3b:e8:28:68:5b:62:69:fc:6e:81:38:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:40:16:98:45:36:40:C9:7E:EA:E8:B9:2A:93:75:9E:39:A8:AB:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22f4f2c6-24f3-35de-92ed-991f81febef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:33:77:f9:b8:4e:f7:f8:7a:f9:4b:20:65:7e:1d:e0:78:df:
         f1:20:db:8d:80:58:06:82:7c:7f:38:8c:1b:a6:f0:97:fa:b9:
         9c:32:e8:a7:8f:aa:a4:11:d7:a5:4e:77:c5:92:c3:69:81:98:
         7b:4a:e4:70:ba:f8:98:5c:2d:df:ad:cd:1e:57:82:c3:18:31:
         91:31:5a:f6:8b:f8:ae:2f:60:45:b5:50:57:92:ab:8c:b0:ab:
         7a:7a:2c:48:b4:fa:e0:ea:36:6f:07:44:01:70:86:b5:b6:a9:
         cf:5b:ca:3f:3a:4c:f4:b8:3b:5d:36:b2:0f:98:45:6f:35:db:
         f7:b6:7f:3a:10:34:c7:77:55:fb:c2:e4:c4:81:18:17:d6:83:
         b0:e5:30:62:7f:e8:92:d3:63:5f:f9:95:c1:4f:b3:b3:87:a5:
         df:e3:3f:aa:6b:69:ee:e8:44:6e:f6:38:aa:2f:51:d4:c9:ea:
         cf:2d:1a:bd:2f:b9:7a:cd:7e:78:03:76:79:37:69:a3:73:d1:
         d9:86:9a:e9:35:41:c0:06:89:6b:1d:78:7c:9a:85:8f:f1:dd:
         77:7a:58:64:ad:1c:41:62:03:42:d0:87:73:36:20:42:53:73:
         9b:45:da:e6:18:98:7c:ab:31:1c:ab:74:9a:ff:93:2d:22:8e:
         18:b3:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:42 2025 by rpki-client