Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/34a54877-20b8-383a-8b8b-fca057ced1d7.roa
File:                     34a54877-20b8-383a-8b8b-fca057ced1d7.roa (raw, json)
Hash identifier:          QW1+Y2CmEgtMxL8mNQGe28Ez+vZEDco3zcYgIXrBTtg=
Subject key identifier:   58:86:8C:97:2A:6A:FB:7E:46:0F:8A:A8:A3:36:AC:9D:4B:53:8C:E6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD47AD0B72E8D6171F9180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/34a54877-20b8-383a-8b8b-fca057ced1d7.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:47:ad:0b:72:e8:d6:17:1f:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=0de1eaed-3c19-4eaf-95e4-3a965b83f594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:5e:97:99:62:d6:0c:ee:69:5b:4c:4a:3f:
                    5d:27:78:b5:e4:1b:da:33:c5:e3:5b:a9:05:d6:7b:
                    d0:cd:0c:d4:c6:fd:f2:76:48:0f:bb:ea:41:a8:02:
                    97:11:0a:64:87:0d:09:2b:58:34:9f:6e:e2:af:a1:
                    6d:34:99:e2:36:62:81:6a:d5:a9:11:7e:4d:5d:95:
                    ea:ac:72:ce:b0:e6:a6:5b:6d:97:0f:cc:c6:57:0f:
                    27:7c:80:a0:ea:28:e0:38:d5:f3:73:e5:ec:6e:cd:
                    f4:36:46:eb:2e:c5:31:56:20:47:fa:92:e6:6f:f7:
                    13:bd:bd:0e:07:d8:44:68:e3:21:d7:18:da:e2:cf:
                    c3:a1:21:29:57:81:ad:a5:cf:05:ab:79:b9:97:23:
                    38:be:69:e5:72:3d:25:4d:83:d9:bf:e9:5d:a4:f2:
                    9f:b7:d9:03:7f:75:f8:5e:ec:51:89:b8:54:fe:84:
                    13:96:c3:5f:a4:08:58:81:13:37:db:a0:ad:c4:74:
                    27:f1:25:54:08:09:b5:ff:03:7c:2d:a0:5b:e5:ef:
                    33:e3:a1:5c:97:46:8e:84:52:4c:47:72:7f:10:1e:
                    a6:c5:f6:74:76:46:23:ea:c7:b4:a3:6a:d3:02:a3:
                    5c:ab:a9:76:bc:b6:45:5b:77:d3:08:53:6b:55:e0:
                    87:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:86:8C:97:2A:6A:FB:7E:46:0F:8A:A8:A3:36:AC:9D:4B:53:8C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/34a54877-20b8-383a-8b8b-fca057ced1d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:27:02:e6:92:b5:de:1f:aa:e4:dd:db:19:18:ca:28:db:93:
         ad:29:18:dd:fa:b7:d1:fa:73:41:3a:94:f0:0a:3f:f2:83:db:
         97:35:5e:cb:88:27:49:c9:a1:51:49:4a:be:32:36:1d:67:20:
         8e:4a:8a:bd:55:b5:4f:1a:d9:a4:2c:fe:e2:f4:5e:fc:33:ad:
         bb:01:23:05:ea:e0:53:96:f3:53:b5:ae:ca:b0:5c:60:ef:3e:
         9f:2d:cf:ee:f4:4e:43:8c:56:0f:81:24:96:82:38:72:2a:1e:
         79:d5:e1:32:30:c8:e1:cf:1a:41:ec:0b:e8:2e:16:88:57:ce:
         c0:76:be:f2:5d:06:22:d5:6b:40:d1:a3:88:b1:07:f3:1d:ed:
         4f:16:d8:48:d2:54:d8:f8:7f:3e:f2:6c:75:a2:98:c0:2b:b8:
         8f:8d:ac:5f:de:09:64:b8:88:1c:f9:74:49:9a:fa:68:08:ff:
         5d:94:07:ba:c3:94:dc:62:06:bf:21:21:53:11:a9:36:13:f8:
         5c:53:f4:94:39:f4:b7:e8:a1:79:0e:15:ed:ce:9e:a6:95:e0:
         4e:99:92:f4:72:55:a8:51:5b:40:65:a0:da:29:f9:46:bd:0d:
         9a:c0:ab:7b:f1:f3:22:05:ef:83:20:02:08:68:4d:5b:99:3a:
         3f:f1:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:31:53 2025 by rpki-client