Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/531bd9ea-915a-350f-919a-1404237fd40d.roa
File:                     531bd9ea-915a-350f-919a-1404237fd40d.roa (raw, json)
Hash identifier:          p7FfrUajuXeHFk5k6v27XtBY2CeMcx+9akLyThYG+u4=
Subject key identifier:   E1:29:AF:24:A3:0F:EF:75:9D:A3:3E:7B:93:82:10:9F:AB:E7:13:69
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDE637172FE5BF864D8900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/531bd9ea-915a-350f-919a-1404237fd40d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:e6:37:17:2f:e5:bf:86:4d:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=99dc59e0-0a44-4c93-8985-64148bd9a3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ff:97:f3:a2:0a:d2:c4:02:41:33:a2:a1:20:
                    99:5c:c6:c4:ff:ae:01:68:cc:26:04:cc:cc:50:73:
                    1c:3c:60:49:ae:a0:bc:aa:51:37:b2:28:1e:c6:68:
                    19:b6:94:9b:7f:7e:5d:33:a0:00:e2:54:bc:72:24:
                    6f:7a:67:5e:ff:90:38:c2:69:e1:cb:c7:82:f5:60:
                    fc:fe:a6:46:32:34:78:c4:ab:25:00:8d:48:07:18:
                    f5:69:40:93:3a:78:21:e2:af:c7:b1:05:36:ef:87:
                    77:c3:c6:3a:4c:92:c4:f3:46:2e:b9:0d:bc:5f:f5:
                    62:e4:4e:da:d8:da:e6:da:e4:5c:bf:8a:85:6c:66:
                    9d:4f:6e:61:02:20:e3:6b:de:2b:d5:f3:6d:97:31:
                    96:bd:75:54:a2:53:ce:08:8a:d4:8d:20:d5:6a:3c:
                    83:1a:b3:e8:3a:12:ae:37:3d:5b:c8:bc:d3:87:1b:
                    6a:27:8e:de:0f:b1:f7:57:d7:04:88:b0:64:ac:74:
                    6c:33:31:fb:43:ad:4d:dd:2f:d5:02:08:fb:e5:2a:
                    8c:02:6e:92:69:f7:ce:85:17:99:25:09:ad:18:7b:
                    58:ad:96:61:e3:d0:74:26:b9:00:75:69:3a:1f:d7:
                    1d:5a:97:ee:15:66:9f:5c:eb:6f:87:93:7c:f9:90:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:29:AF:24:A3:0F:EF:75:9D:A3:3E:7B:93:82:10:9F:AB:E7:13:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/531bd9ea-915a-350f-919a-1404237fd40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:84:b2:65:66:19:0e:7d:bd:42:5f:13:bd:0a:26:44:5f:56:
         a8:de:c4:99:f7:1c:a8:cd:be:03:3b:4c:9c:31:ac:9e:e4:6c:
         ea:26:14:f2:5b:ea:a7:58:62:9b:4c:61:81:9d:28:e5:80:50:
         7a:8f:70:7b:97:83:88:a5:00:9a:ee:f5:1c:a3:c4:3c:74:af:
         6f:bc:53:69:3b:57:c7:ac:f3:a9:df:8f:16:5f:3a:2d:33:43:
         97:32:ce:25:05:7c:ff:20:01:b0:1d:ce:d6:dd:74:db:c4:87:
         67:0f:67:c1:87:0c:3a:8a:d0:6a:e3:0a:1c:37:40:7f:34:e6:
         86:f2:52:2e:9a:d2:07:ab:d5:10:5a:73:93:21:40:ca:25:73:
         86:a4:21:d8:1d:bd:dc:5a:db:af:15:16:e2:24:b8:b6:26:aa:
         35:75:aa:b3:01:96:70:73:32:e2:80:ce:b2:0c:61:61:18:ed:
         75:00:28:cb:66:1c:73:43:9e:12:4e:2f:0b:3b:08:86:a9:5f:
         d0:fd:50:3c:ac:7e:29:56:7a:ef:cc:55:56:a1:74:9f:96:38:
         da:f1:b9:a2:1a:95:02:d1:78:90:b8:f9:92:43:20:10:a9:6e:
         d1:27:4a:a6:2e:00:dc:b2:ac:5d:ac:f1:62:5e:1f:c9:32:32:
         d6:7a:fa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:16 2025 by rpki-client