Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3197ba5d-7b62-3b17-a6a5-0a41cb034c61.roa
File:                     3197ba5d-7b62-3b17-a6a5-0a41cb034c61.roa (raw, json)
Hash identifier:          f8Xs5oCLLKWe7Fw0QZnzU0BdD9OQmOMr8L15Xbbk+Lg=
Subject key identifier:   40:A8:4D:F4:D4:8D:49:FD:77:6E:E1:6A:0C:25:2F:89:B9:30:34:07
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD30DB5C7229F54E3E4300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3197ba5d-7b62-3b17-a6a5-0a41cb034c61.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.21.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:30:db:5c:72:29:f5:4e:3e:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f054b823-9993-4016-9811-477e58678080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ab:db:ff:3c:84:c3:1a:99:64:6f:ce:b1:57:
                    54:e6:ea:63:68:e8:b7:74:78:05:fe:cc:52:19:7c:
                    0a:e5:da:a9:d2:62:de:37:53:c4:a2:48:73:6c:ef:
                    64:0b:f0:79:84:94:b7:e6:85:e8:f8:49:e3:fd:c8:
                    a5:70:61:74:a5:13:9f:69:e7:f5:cd:7e:3d:e3:b8:
                    20:29:7e:17:c5:a2:f6:f7:fd:9b:58:5e:b0:62:59:
                    f4:b3:3b:32:a1:4e:25:1e:27:bf:08:42:ce:89:08:
                    1d:dc:16:d6:b2:f7:4f:bb:28:19:bf:65:0c:25:54:
                    0a:cc:24:24:1d:12:61:a5:34:be:5b:e8:e8:45:54:
                    4a:02:09:ea:d2:21:cf:06:7e:34:5f:2f:9c:28:04:
                    1c:cf:07:df:4e:ed:36:e8:bb:83:00:07:b0:37:e2:
                    e5:ca:76:fe:8c:ca:bf:b4:8a:6b:d4:18:c8:41:5c:
                    55:59:71:17:a5:7f:46:42:b8:96:f9:22:8e:8f:be:
                    29:46:d6:ea:73:ba:5c:7e:20:36:26:a3:cf:04:4e:
                    44:e4:d5:65:14:a4:24:cf:be:66:ba:68:c5:38:53:
                    a6:8d:9d:06:38:08:3c:01:0c:68:56:ac:b7:78:1f:
                    98:e7:79:8e:45:67:65:8b:65:bd:32:09:e5:2e:ea:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A8:4D:F4:D4:8D:49:FD:77:6E:E1:6A:0C:25:2F:89:B9:30:34:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3197ba5d-7b62-3b17-a6a5-0a41cb034c61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:a0:10:c5:4c:bc:26:95:94:a5:cc:1c:cb:e5:d1:36:20:07:
         2c:d2:97:28:2c:bb:ae:af:33:27:d1:b6:29:7f:8a:1f:d9:6d:
         d3:a7:14:d8:89:4a:ea:ec:6b:a2:21:46:9c:eb:b4:8a:a1:90:
         49:51:41:69:e1:8e:03:2d:36:96:ff:58:f0:c5:74:7a:22:25:
         58:bf:50:48:28:45:21:ac:b4:4a:b2:c2:21:3b:e8:31:da:28:
         3d:1a:83:55:96:d0:fb:44:fd:c8:bd:90:c9:d5:b0:80:c4:52:
         0f:a9:93:83:68:d3:8b:75:23:8e:2d:1b:b8:31:a0:d7:9e:4b:
         be:0c:00:55:d2:f8:7d:c5:f3:41:e0:ab:eb:a9:85:90:00:87:
         59:ff:e0:97:d5:a5:de:cf:71:12:0a:c5:2a:94:cf:fc:12:ae:
         d2:58:ee:e8:71:fe:e9:2f:ec:1b:c8:cb:99:0f:4b:e4:ab:77:
         90:ab:a9:b2:fc:66:a7:5c:ad:48:5d:50:ac:5f:1e:a0:56:1f:
         f5:e1:9b:71:03:35:bf:bb:18:71:13:bf:d4:c9:4d:2a:5e:45:
         af:27:28:e0:26:a2:fa:d9:c6:7d:ad:58:86:79:6a:17:e5:34:
         f1:dc:23:44:4c:b2:47:1e:b8:b6:5a:c5:6c:23:5e:bb:93:2e:
         a4:94:d1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:28:18 2025 by rpki-client