Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b872ea6-de0a-3c00-975b-f64503704d61.roa
File:                     7b872ea6-de0a-3c00-975b-f64503704d61.roa (raw, json)
Hash identifier:          zJ5DNAdorBkcwRK+YTq3DJTaiD0vKnEcHnTdJhtAjRs=
Subject key identifier:   25:62:85:84:C2:ED:CE:68:FC:9A:14:AD:03:0F:A7:7B:9D:7D:1C:19
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDE7A8C279AC4C12DE7EA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b872ea6-de0a-3c00-975b-f64503704d61.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:e7:a8:c2:79:ac:4c:12:de:7e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=de6b9cb1-4d13-4869-aa1d-93aed5ed0c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:92:1a:00:46:5e:b9:a9:6d:69:2d:7a:e8:
                    ae:8b:ac:ab:99:15:7e:4d:3b:64:3b:7e:e4:f1:26:
                    81:df:90:f8:02:2d:5d:e4:23:94:de:fe:a6:68:f8:
                    ed:39:57:a0:72:a3:c5:a2:ba:3b:ce:ef:68:91:f1:
                    a6:c3:ab:dd:c8:54:37:b6:b8:8b:4a:64:8c:69:48:
                    71:47:53:1e:07:e9:66:8c:9c:a8:ba:be:1a:56:fc:
                    01:e2:b4:a4:86:87:54:2e:f3:33:7b:82:70:05:d6:
                    21:eb:14:82:33:dd:b2:0d:56:35:87:35:84:e0:9b:
                    5a:b0:c5:12:74:8a:47:cd:c3:84:b4:b1:56:91:f0:
                    07:40:14:b9:64:16:7b:35:7f:3d:34:f3:1f:54:d0:
                    01:b1:92:47:c3:11:c9:f2:72:02:40:ec:e9:be:b3:
                    13:39:14:8f:ec:52:6a:4d:94:fe:da:ec:bd:3c:dc:
                    cb:c6:99:a1:a1:af:f5:01:06:44:d4:eb:05:f7:fe:
                    7e:3b:38:ed:00:5a:24:88:b8:bc:16:3e:00:38:3f:
                    8e:01:79:24:c8:2d:a9:88:28:9d:6f:a2:ce:eb:34:
                    75:39:a3:fb:4a:31:97:d9:2b:06:cc:f7:02:3f:f5:
                    c6:c9:29:f6:be:5e:4f:31:60:6b:4d:37:c0:76:86:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:62:85:84:C2:ED:CE:68:FC:9A:14:AD:03:0F:A7:7B:9D:7D:1C:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b872ea6-de0a-3c00-975b-f64503704d61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:89:5b:9b:9e:8d:b9:94:b6:08:9e:84:e1:c4:a1:6d:5a:79:
         62:b8:b4:07:09:cb:bf:e6:9d:64:ea:8f:b8:fd:c3:a6:28:bb:
         78:d0:a1:44:f7:09:24:ff:55:21:71:a1:c0:ff:90:e0:02:33:
         1d:72:11:45:ec:12:65:0e:8f:d0:b7:46:30:dd:76:0b:6e:55:
         d4:1f:3b:c4:f8:13:43:99:02:82:65:43:46:c0:10:bf:29:d2:
         43:e3:24:82:c1:60:58:f9:5d:72:c0:82:1e:42:05:42:80:df:
         a2:03:58:21:f6:a8:ce:32:ca:3f:f8:a4:c0:61:83:be:85:d1:
         5f:46:ee:d0:a4:bf:56:a4:ca:c7:a5:d6:db:68:9a:db:d9:2b:
         69:f2:9d:35:a5:c2:df:b7:ea:03:62:50:b5:49:06:fd:7a:e8:
         17:44:7b:5e:04:a0:98:7e:d4:ff:19:58:62:4e:bc:e4:fd:00:
         ab:f2:90:aa:b1:90:0a:0b:7b:df:91:3b:d8:20:c6:7a:93:17:
         fe:3c:8a:d6:86:7c:54:4c:db:85:5d:24:81:a5:bf:86:ee:42:
         2d:37:3e:38:21:25:d3:d4:09:c2:6e:2f:3d:9e:5b:95:3c:d9:
         25:af:47:10:81:b8:4e:9d:e3:af:2e:47:2b:29:3b:51:ba:3b:
         0f:c4:68:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:51:48 2025 by rpki-client