Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/34927099-dfeb-3754-b50d-e4a3d284c3ee.roa
File:                     34927099-dfeb-3754-b50d-e4a3d284c3ee.roa (raw, json)
Hash identifier:          Mv452uN02VbADq0q6Nem6hL+is/Z/XiSl2Ual4JCYC4=
Subject key identifier:   D0:B5:1A:F5:F8:C0:52:2A:E5:22:7A:EF:ED:E0:A4:C4:05:3D:AB:F2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CE00C6A6CA022FD64DE400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/34927099-dfeb-3754-b50d-e4a3d284c3ee.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:00:c6:a6:ca:02:2f:d6:4d:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=277d46bf-3549-41d0-ac92-59e47fb10985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:c1:4f:c3:0c:0d:ee:7f:95:c5:15:69:08:
                    17:87:49:b7:0b:1c:8e:f8:24:e0:b0:67:5f:20:1e:
                    89:c1:ad:65:bf:7d:99:01:18:07:e6:09:cb:de:95:
                    e3:2e:6e:ae:82:96:e1:8c:cc:49:18:c3:32:41:7d:
                    24:91:07:ee:39:c0:db:e4:0b:81:41:73:4c:ee:f2:
                    20:a0:dd:6c:23:75:77:e9:89:0a:57:4f:e5:d7:4e:
                    bd:b3:9d:46:02:20:a3:d8:f5:5e:31:49:4f:76:c4:
                    d4:07:9c:2c:19:b8:4d:d6:28:41:72:0d:f3:b1:3e:
                    29:0c:80:d9:4f:5a:19:f7:bd:46:39:5b:81:4a:d4:
                    50:e4:9e:0f:61:45:a1:ba:08:be:80:a2:15:bf:f3:
                    4c:ea:cc:47:82:a8:2b:d0:90:40:44:31:6c:f0:aa:
                    1c:4a:83:9f:88:fa:c4:f3:ec:d5:52:b8:e7:00:2d:
                    57:cf:5c:51:cb:c1:63:22:83:65:51:be:8a:80:0e:
                    89:0d:b4:20:4f:5f:d7:03:51:fa:c9:90:d2:b2:64:
                    18:8c:4f:e3:e2:23:aa:25:72:da:10:4c:40:26:ff:
                    51:77:df:c8:03:35:aa:c4:33:23:85:9e:b2:1a:17:
                    2f:af:cc:9a:56:fc:69:a6:5d:0d:d1:c3:fd:e8:d5:
                    46:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B5:1A:F5:F8:C0:52:2A:E5:22:7A:EF:ED:E0:A4:C4:05:3D:AB:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/34927099-dfeb-3754-b50d-e4a3d284c3ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:42:71:15:f0:c0:ac:87:67:ad:1b:ec:02:cb:cf:8b:a6:13:
         18:39:9f:c2:f1:fd:67:a4:6b:3e:62:66:9f:99:d5:51:cc:ae:
         c2:af:c1:fb:1c:47:e1:27:7d:b3:12:5a:29:f2:24:00:e5:fa:
         19:b8:8b:9a:2e:c3:20:af:1f:39:f1:66:30:84:3a:5b:79:10:
         bf:eb:a8:3a:00:a3:1c:7f:db:37:08:4d:71:05:22:ca:35:02:
         dd:a1:a8:dd:dd:a1:0a:1d:5b:df:f9:31:8a:49:ff:c4:1a:c0:
         8c:47:cf:b4:27:57:64:76:94:01:a0:87:d1:a5:23:44:da:1f:
         07:6f:d6:2a:0a:c3:08:78:b3:e3:45:23:c5:37:78:35:b4:d8:
         02:c2:68:57:fe:1e:3f:15:9a:5f:01:a5:c9:59:62:ae:0f:5c:
         3b:c6:bf:d9:50:05:d8:00:56:ee:2f:f7:e4:58:b1:8e:15:be:
         d2:85:62:66:cd:80:ea:f1:9e:19:60:42:0e:a0:a7:5c:21:65:
         5e:12:14:69:77:db:d3:e2:50:f5:a3:1f:3b:01:f2:d8:74:b7:
         50:6f:1d:81:fd:d4:9e:2d:07:f6:af:da:fd:f4:0c:68:98:9f:
         77:bf:61:20:f0:c2:7c:fe:7a:bb:93:b5:fd:39:6a:d2:7f:c2:
         32:2c:5d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:24:57 2025 by rpki-client