Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a360e03-618e-384c-88c5-a8bfce789ffd.roa
File:                     2a360e03-618e-384c-88c5-a8bfce789ffd.roa (raw, json)
Hash identifier:          lZNuErVsKuv8BRMXg+ZAcootpiAYvuRn3YYTc4qqTDk=
Subject key identifier:   5B:95:26:C5:8A:E7:F3:4F:32:B2:02:23:EB:9E:A4:17:A0:E7:36:A0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDE6275CF2BC822359EE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a360e03-618e-384c-88c5-a8bfce789ffd.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:e6:27:5c:f2:bc:82:23:59:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2f8b142b-2e98-4476-ab5b-ab012ccd7970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:94:5e:3c:ed:90:7d:0c:d2:be:66:e4:c4:
                    2f:62:38:fc:d3:b1:1f:84:d1:11:e6:16:3d:67:31:
                    5f:c0:e0:fc:b0:f7:bb:f2:60:45:bb:1a:7b:82:2c:
                    d6:c5:09:fe:6f:b1:a6:b7:a9:55:71:70:69:c4:f9:
                    ea:35:37:e8:75:2a:ed:78:7a:a2:70:23:4d:b2:42:
                    61:f3:53:04:95:a4:c6:89:41:a6:6b:a4:59:23:7e:
                    89:22:e2:3f:30:19:37:b1:a8:ff:b0:c8:a3:bf:ad:
                    0c:1d:e0:fe:5b:91:50:d6:04:32:70:6b:89:bc:60:
                    30:c9:ae:78:32:08:b6:65:6d:5f:5b:3c:65:1f:74:
                    23:35:e8:08:09:28:29:f2:ef:ca:0b:5f:2e:96:24:
                    68:ed:a4:ac:85:29:99:66:38:70:dd:e7:b1:28:54:
                    f3:6d:9b:ed:07:71:0e:de:45:e3:77:52:9f:49:02:
                    0d:5f:1e:23:ab:ab:8a:d4:9d:b4:bf:ff:7e:20:47:
                    c0:e4:e0:af:6e:ff:60:df:68:14:8f:b5:cc:44:24:
                    35:74:a1:be:57:98:ad:d7:3c:46:fa:9d:4f:35:79:
                    3f:f4:18:5f:45:8e:c0:35:04:83:c8:de:18:f9:51:
                    14:0b:c9:0c:71:9f:df:ca:8c:4d:d9:fa:41:40:38:
                    bb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:95:26:C5:8A:E7:F3:4F:32:B2:02:23:EB:9E:A4:17:A0:E7:36:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a360e03-618e-384c-88c5-a8bfce789ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e3:90:4e:c5:1e:f4:59:84:aa:18:2f:79:a8:cc:24:a3:3d:
         78:5d:ab:6b:13:c6:ba:3b:cc:9d:dc:a0:fb:08:da:27:eb:79:
         ff:0e:49:3b:a8:7e:0b:56:04:9e:43:90:c2:5e:ac:bf:a1:b6:
         09:b8:fb:e6:a0:44:a7:77:63:4b:b6:82:ef:c3:3d:ea:7a:b7:
         4d:b0:8c:c7:16:89:3e:9b:48:69:e5:34:fa:b9:cf:d7:41:35:
         fb:d0:ed:7d:7c:0f:c7:da:57:53:12:cb:67:52:62:d2:b5:c1:
         77:27:37:b5:f1:7b:e0:81:16:45:c2:fc:ee:6e:ca:54:19:18:
         39:c3:4e:01:d3:65:c6:7a:b4:8d:af:d0:6d:f5:ef:7c:54:ff:
         a7:d8:59:7e:33:cb:d0:1a:c3:be:26:9a:13:87:ed:9b:72:d9:
         6c:84:ba:5a:33:74:82:30:7f:a0:c1:e3:7e:9b:e2:84:37:30:
         11:cc:c7:7c:dd:cb:9a:6e:8c:fd:9b:15:32:71:ae:b9:b0:2b:
         bf:44:c7:a1:0a:f2:c2:73:48:b0:89:16:ca:bc:3a:49:da:f1:
         8a:10:fd:a4:a7:38:ab:30:02:ac:b7:39:70:48:c9:33:6d:61:
         6d:6f:a3:c3:e1:72:f5:e0:61:fd:76:20:fc:d9:8f:e8:5b:be:
         fa:77:8f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:20:43 2025 by rpki-client