Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/454a8fab-a8e3-3b41-9727-e0e8d9535738.roa
File:                     454a8fab-a8e3-3b41-9727-e0e8d9535738.roa (raw, json)
Hash identifier:          ikrgwo3Lm5alnalKeCyEmB64uQXB8Mmiipzoyg6EymI=
Subject key identifier:   C0:33:44:B0:3A:14:B0:F8:34:93:98:EB:FF:5F:E1:B2:23:D5:F7:B2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDE6C035DF3E2F3CC46080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/454a8fab-a8e3-3b41-9727-e0e8d9535738.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:e6:c0:35:df:3e:2f:3c:c4:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2f16a0de-3430-49b1-a314-6464434739e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:72:c9:7a:ca:22:8f:e5:77:37:0a:fb:3d:64:
                    96:9f:22:88:a4:9a:40:dd:13:c8:b1:b8:20:d8:af:
                    1b:8d:99:a8:42:b0:ec:5a:9d:55:2c:c8:fb:6f:ab:
                    24:ef:0b:4b:61:5c:f9:d5:74:f9:ae:78:0a:22:a5:
                    34:81:80:4e:1d:30:13:d0:e0:95:61:8a:87:1e:1e:
                    56:17:7a:ec:74:3b:c3:b6:36:28:33:e5:4b:e6:f1:
                    9e:df:17:44:d7:57:7b:b2:ef:b7:ee:55:ac:4b:d4:
                    fb:d7:39:0a:79:89:18:80:78:a7:ac:7a:27:0f:ed:
                    7e:62:db:a9:34:18:84:e3:51:69:ba:f4:ef:fd:10:
                    29:ca:e6:ae:5b:4c:f0:aa:7b:66:85:dc:48:60:d7:
                    9a:aa:4b:ad:00:14:ac:f7:bf:d9:4f:78:52:da:f7:
                    ab:86:74:3e:d2:f0:84:e9:bd:60:c0:ee:4c:3a:9e:
                    17:da:62:76:22:60:93:8d:d4:34:24:32:95:0d:e0:
                    60:a9:cc:5d:0a:8b:71:1b:ad:8b:ef:da:25:4e:24:
                    19:d9:66:2e:29:fe:fd:bd:f7:37:88:77:bf:05:f8:
                    cb:cf:31:3a:b5:e8:56:a5:f3:62:8a:54:8c:3e:6f:
                    88:e0:34:5e:6a:2b:a2:70:7b:e1:00:c4:fe:f0:19:
                    a4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:33:44:B0:3A:14:B0:F8:34:93:98:EB:FF:5F:E1:B2:23:D5:F7:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/454a8fab-a8e3-3b41-9727-e0e8d9535738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:b5:9d:e7:5c:e3:c5:65:e9:c4:8e:33:15:d7:f1:dc:b4:e0:
         84:6d:3e:a3:40:b5:e2:c7:ef:44:8d:d6:52:ab:94:a2:b9:ef:
         dd:b8:3d:f1:1a:d8:c3:60:af:60:ff:b7:cd:30:86:f1:59:2b:
         c6:e8:c7:be:af:25:db:90:5f:b8:13:d2:79:8d:df:a7:8e:c1:
         bf:88:19:39:df:0e:d6:96:8d:98:b9:3c:a6:b0:3f:e9:66:b9:
         26:a2:42:fe:f5:ab:85:16:30:4e:1a:a4:0c:e5:a7:0b:0b:42:
         c0:68:dd:ed:24:38:53:0e:74:d1:0a:4f:16:96:d3:d2:ac:f7:
         7d:91:42:8e:2c:c9:c2:54:1c:ad:03:f8:62:f6:c2:9e:f6:12:
         3f:2a:aa:34:c6:cd:91:21:a0:53:0c:cf:fc:81:e8:81:17:92:
         6d:89:49:57:58:39:18:08:4d:85:46:14:23:e1:05:5e:03:a2:
         1c:d7:de:4b:02:05:8d:36:00:7a:f0:ce:e4:a2:f0:12:08:0c:
         04:e0:13:16:47:a7:9e:d0:60:37:bd:c3:79:47:30:a6:f9:17:
         50:2f:d4:16:29:36:bf:f6:76:a8:7c:80:e2:f8:50:2d:86:2d:
         32:be:04:6f:16:dd:d9:fe:1a:79:9f:5e:6d:74:d5:c9:1e:05:
         33:b6:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:21:53 2025 by rpki-client