Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa
File:                     85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa (raw, json)
Hash identifier:          V0u5DGT+Rtc5eXusE72zEwkQiFqxcfs+R13E/95otwk=
Subject key identifier:   35:1A:DF:8D:DC:8D:2C:DE:A9:5C:E0:36:C9:4E:31:25:79:78:F6:E1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD34F5EE0D1B507E794F10
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.21.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:34:f5:ee:0d:1b:50:7e:79:4f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b91dd4c4-5941-41ab-a404-946e70af1bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:c3:ab:99:ec:b2:b6:13:3f:2d:66:33:65:
                    27:fe:d9:21:7d:8c:e3:32:f7:4e:2c:d8:97:78:99:
                    36:5b:14:5d:49:97:e3:74:96:0f:58:6b:df:17:1c:
                    69:0d:72:0d:21:13:8b:85:b3:d6:74:c6:b0:1f:39:
                    ad:7e:05:bd:f7:ce:c6:b8:e0:8b:ff:6c:76:cf:ef:
                    17:16:bc:65:1e:28:82:04:18:82:63:a1:db:e0:53:
                    8b:0f:2c:be:94:9c:6f:07:48:2e:90:7a:00:9b:6e:
                    98:87:d5:a5:63:bb:ee:a1:51:1c:14:0e:a7:df:91:
                    26:bc:ab:4e:20:c2:6c:4d:2f:57:49:4d:1b:43:e5:
                    2e:0c:eb:e0:9e:ec:66:c3:3d:3a:4d:bb:fe:03:4c:
                    d1:ef:54:58:e5:80:4c:e1:9d:a3:35:03:98:35:35:
                    07:b1:8e:b6:87:39:1f:b8:9d:37:ad:59:48:5e:a2:
                    57:78:4b:f4:5c:1e:86:d0:5a:29:a6:ad:21:fc:68:
                    93:d3:f3:02:c1:ed:20:1d:3f:f1:46:7d:b3:de:c0:
                    c0:62:f1:2e:ba:e4:e1:d8:d5:37:14:f7:9b:bf:69:
                    cc:35:b2:9b:91:4b:ad:ff:0d:4a:59:41:c4:9c:e6:
                    ef:9e:b6:d4:99:89:74:2e:14:d7:05:21:48:1f:de:
                    45:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1A:DF:8D:DC:8D:2C:DE:A9:5C:E0:36:C9:4E:31:25:79:78:F6:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85f08433-12e3-3d9e-bfdf-0ef3d2e6c645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:db:6d:e6:ba:70:10:4d:72:1e:98:e2:af:b2:78:5a:fa:67:
         b4:32:ae:c5:a6:61:a5:a8:e9:44:3c:62:07:cf:c9:47:3b:be:
         5c:6d:af:68:be:1d:eb:96:c6:84:59:bb:2f:ac:b8:e4:7a:be:
         73:8c:e0:06:50:bd:2b:30:20:c5:5c:a4:0b:2d:95:90:e2:5e:
         1c:ca:72:a9:df:bf:a6:e6:2b:ce:bf:1c:2c:eb:45:04:af:f4:
         75:22:fa:d1:dd:66:e1:5f:1b:ae:d3:11:43:fa:b0:e8:31:07:
         54:c4:68:87:8a:db:e1:52:64:bc:eb:af:14:9c:b1:fb:69:c3:
         1e:78:e8:3a:a5:6f:66:d1:9b:30:97:ad:d6:5b:f8:90:30:65:
         53:05:79:b1:5c:d7:c4:ea:dc:a5:0f:1f:b8:fb:c8:37:b7:8c:
         d2:3d:10:ea:88:34:47:14:c1:99:04:d9:1b:3b:1d:21:a8:24:
         4e:2a:b6:ac:51:c3:81:67:71:42:7c:86:33:9b:c2:d3:71:cc:
         27:e7:e2:7a:d4:cd:cf:1e:26:6f:d8:22:e1:a8:d3:b6:a7:f7:
         4f:c0:74:f3:59:07:04:49:01:a0:cb:ac:2a:ce:0d:9a:ed:0c:
         c4:0e:6d:a9:d9:1e:0e:31:8c:7a:58:7f:f8:8c:d5:b4:05:72:
         be:a2:89:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:38:20 2025 by rpki-client