Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7fc1faac-fc5b-3247-bcf7-3b6e1ea0ad45.roa
File:                     7fc1faac-fc5b-3247-bcf7-3b6e1ea0ad45.roa (raw, json)
Hash identifier:          lOIhDIg2HkSNIuuGeo+mMOLzMK3mqjYZYDQka/yHTwg=
Subject key identifier:   5B:92:85:18:A5:AD:E6:C7:A4:3C:46:03:86:F0:A4:A8:55:E4:48:35
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CE06FD2C482CAFB6814900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7fc1faac-fc5b-3247-bcf7-3b6e1ea0ad45.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        198.45.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:06:fd:2c:48:2c:af:b6:81:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ca20c15b-bffe-4752-9f47-7e97c421d93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:eb:e6:55:8a:89:f4:c5:18:1a:be:81:5a:b8:
                    2a:30:5a:fe:3b:40:4a:02:53:1c:ce:a0:45:bc:65:
                    49:f1:65:1b:af:e9:14:55:ea:aa:b8:14:f5:b2:72:
                    8f:71:60:68:80:8c:4e:4f:dd:7d:b1:62:49:a6:ed:
                    52:69:75:9d:bc:4c:32:e7:7d:88:c2:87:4d:1c:37:
                    95:09:de:30:a7:0c:ad:45:58:59:9f:2f:5c:6f:1e:
                    92:7a:88:cf:76:f0:90:c5:ff:17:91:dc:f1:fe:81:
                    fe:4f:b1:e1:8e:eb:31:5e:02:ec:de:5e:13:d4:8a:
                    b5:88:d5:56:1b:dc:d8:ae:83:70:43:e9:45:7f:72:
                    73:d0:4f:d4:e8:9e:bf:d4:79:70:43:0c:30:f1:ff:
                    7e:6f:9d:fd:ea:35:fb:95:34:f1:6b:02:bc:d3:8b:
                    d8:28:7d:20:eb:dc:e4:35:00:3d:af:8b:33:28:e4:
                    54:a1:1e:a9:00:78:1d:b3:13:f0:db:a2:8a:08:da:
                    bd:7e:aa:1b:f3:a6:e4:d0:24:02:dd:2f:4d:94:4b:
                    d0:b0:a8:81:ce:f6:3b:45:39:96:3c:6b:4a:b8:91:
                    56:4b:84:94:1c:78:95:d2:f6:92:33:8f:89:ce:89:
                    58:f7:02:d2:d4:3a:35:e8:fc:0a:30:26:4d:a3:18:
                    d4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:92:85:18:A5:AD:E6:C7:A4:3C:46:03:86:F0:A4:A8:55:E4:48:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7fc1faac-fc5b-3247-bcf7-3b6e1ea0ad45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4e:4e:08:41:e4:f3:ac:f6:92:de:41:2c:98:e2:92:90:41:
         1e:dc:a3:24:b9:d4:c7:e7:44:12:d9:13:63:ad:49:46:14:3f:
         eb:1d:f7:7e:02:e4:ce:00:cf:14:f4:4a:54:14:2d:19:aa:2b:
         2d:1a:0d:4e:a1:d6:5c:9c:2c:81:7a:09:6c:15:26:18:ab:15:
         0c:ea:80:55:da:cc:8d:e7:39:9e:9f:18:86:d0:6b:f0:6d:61:
         f2:af:66:0e:16:22:86:4d:fc:07:fb:01:2e:7c:16:66:24:08:
         de:f4:aa:07:e1:29:59:ee:99:fb:e4:a9:81:7b:8b:9e:2e:5d:
         72:00:cc:a3:ec:27:5d:90:03:10:55:c7:ae:83:69:b8:12:77:
         5f:96:de:7a:fc:e8:06:ee:4d:c2:6c:f4:82:b1:e5:48:16:1c:
         f1:f4:d0:56:e8:ea:9d:2f:97:e2:17:4c:4e:04:93:47:fb:b8:
         5b:ce:6c:7c:2d:8e:96:b9:61:43:2c:15:15:c4:bb:f6:0b:27:
         94:5c:d1:61:fc:d1:87:4a:88:f5:61:53:7a:ca:c5:23:b4:10:
         96:55:21:86:f0:2d:6c:77:a2:de:30:3d:1c:7f:3c:8b:c9:5d:
         90:10:5a:d4:fb:df:15:7d:76:bd:e9:38:ae:40:0e:ea:df:fe:
         aa:83:94:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:36 2025 by rpki-client