Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/661e1109-e30d-3fb8-bd78-8b9676945a8d.roa
File:                     661e1109-e30d-3fb8-bd78-8b9676945a8d.roa (raw, json)
Hash identifier:          xosZnrPZkjjN7hxAYo5rZhBel3u74fh2uUKB0svrk1U=
Subject key identifier:   15:EA:4E:4F:7F:CF:4C:2E:4B:6B:03:30:B6:E2:14:53:D3:C7:8F:3E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CE03B1ABD511656428A380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/661e1109-e30d-3fb8-bd78-8b9676945a8d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:03:b1:ab:d5:11:65:64:28:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=31e82117-8a50-47fd-aef8-f9d35efe035a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:32:24:b4:c5:4a:32:24:22:f3:1a:6e:4f:
                    ca:8f:79:fd:42:84:da:be:dd:72:76:93:2e:a9:29:
                    01:8f:00:ff:ab:71:c2:67:4b:f2:d1:3a:39:5e:24:
                    4c:56:99:59:25:29:38:53:a1:46:e0:4b:fd:f7:7d:
                    47:25:a0:08:24:80:d8:ea:2a:b7:dd:e4:c0:27:fd:
                    99:ef:d9:af:03:80:5c:07:4e:7d:fb:b4:fa:42:4e:
                    2f:3e:38:85:ae:12:8e:f1:88:c3:07:4c:52:3a:6b:
                    cf:bf:57:c8:c6:c5:5a:79:55:77:da:f2:51:73:19:
                    7f:78:16:8f:4b:57:c3:1e:f4:1d:87:94:03:1d:f3:
                    ff:b9:de:d3:d9:23:9c:24:0c:ac:2c:3b:32:9c:83:
                    b9:2a:e2:13:1e:c9:d1:33:97:2f:22:17:4b:9a:c2:
                    36:bc:01:84:27:28:aa:3c:b9:05:a4:31:2a:03:43:
                    2c:29:cf:95:11:7a:6a:a3:7f:fb:77:fb:41:a2:50:
                    00:85:a5:29:56:20:9e:52:b2:89:70:54:bd:7b:92:
                    f4:36:31:59:33:0b:f5:33:fe:f6:fb:ba:b8:88:c5:
                    dd:2c:39:cb:57:5c:b7:68:9d:2d:95:df:b5:0c:bf:
                    28:6b:d6:f7:07:49:54:0e:4d:41:51:01:3d:e0:59:
                    af:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EA:4E:4F:7F:CF:4C:2E:4B:6B:03:30:B6:E2:14:53:D3:C7:8F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/661e1109-e30d-3fb8-bd78-8b9676945a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:75:22:d9:f1:d9:3f:38:78:75:b7:c5:80:41:55:98:b4:6f:
         50:38:e7:9a:7f:a7:60:c5:48:ba:38:d0:30:01:49:4a:5c:50:
         eb:76:70:36:b2:8e:f4:90:49:75:f5:3a:71:dc:5c:34:8c:33:
         ef:78:3e:ee:47:3a:17:80:39:e7:f0:40:91:11:f8:f4:a0:09:
         da:76:f9:22:eb:84:2d:12:5c:eb:27:89:ad:0b:af:63:9f:90:
         6d:1f:35:44:ec:a6:4c:ca:83:0f:b4:d7:02:59:9b:89:2c:80:
         6b:46:81:9c:f0:3c:93:41:b3:23:b7:b6:14:b3:dd:69:d5:96:
         d2:12:16:fb:37:29:06:c1:2f:7f:bb:1f:4f:37:f3:aa:67:9f:
         29:7f:79:ca:cf:8f:34:ee:54:78:fc:6c:2a:69:8b:cd:fe:22:
         96:d4:b0:28:27:e4:89:03:7e:83:c4:15:77:d8:81:b8:d9:d1:
         b2:8d:24:fa:18:ae:0c:01:b9:9c:f5:66:c9:c1:96:f4:0c:6c:
         5c:f4:ab:0d:a2:05:c6:76:8f:3b:c9:d0:2e:be:26:b1:19:90:
         2a:ec:47:88:0b:f6:00:ef:24:cf:e4:9e:be:ec:14:b3:c5:82:
         2f:92:3d:53:61:a3:94:02:3e:7f:1f:e3:25:7d:68:78:37:30:
         ee:94:7d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:42:06 2025 by rpki-client