Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98b980e4-3346-3d68-b6a4-5f1009b7f4a9.roa
File:                     98b980e4-3346-3d68-b6a4-5f1009b7f4a9.roa (raw, json)
Hash identifier:          s/9cyaEAddb9Hos9Z50XsS+PEC0PhjF0xJwRTmw2qOc=
Subject key identifier:   90:28:6D:9E:D3:1A:3B:23:9B:FE:6C:36:1C:8E:ED:FF:82:65:A8:24
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD36E9C99A6F3D05DDBE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98b980e4-3346-3d68-b6a4-5f1009b7f4a9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.21.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:36:e9:c9:9a:6f:3d:05:dd:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9a1dc9e1-b069-4079-a139-9015eb6975ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:ad:f4:53:f4:05:5d:07:1d:69:e6:5c:fa:
                    ca:98:ee:84:b0:e0:3f:4f:f8:33:bc:15:5a:3f:73:
                    2c:21:5c:f7:f2:49:fa:62:f1:35:3c:90:1e:30:05:
                    19:37:ca:44:de:42:2a:f5:f3:b8:36:a8:5e:7e:73:
                    f8:55:ee:4c:6d:1d:7e:a1:8d:46:b1:aa:1d:de:57:
                    3a:e0:07:3e:81:d7:75:97:cb:a7:6e:ef:e1:d6:cc:
                    64:10:52:0b:c9:36:19:92:7f:9e:fe:6d:a4:cb:8a:
                    77:1d:53:20:50:9e:d4:c9:4f:3e:a7:e8:b2:5c:4f:
                    1c:18:c0:f1:aa:06:41:ee:70:fa:22:64:eb:70:50:
                    d3:de:ef:7d:4a:2b:21:6a:d2:ca:96:80:5e:ef:db:
                    2a:e0:66:ec:da:85:3c:ca:59:ed:32:2d:44:3f:00:
                    37:ab:ee:de:2c:d8:9b:15:5d:10:17:9f:02:d5:4e:
                    33:db:33:9f:4a:1a:1c:b5:1a:c2:dc:1e:ff:e9:9d:
                    ef:85:e3:fd:d8:f1:fe:4f:7c:bf:c8:02:45:4e:85:
                    37:fb:bf:f0:21:f6:ad:5d:65:ff:85:a0:cb:8f:b1:
                    fc:8a:fb:4f:ea:d9:ae:08:ea:d4:f3:3c:5d:2e:dc:
                    fb:97:e0:46:79:2d:bb:20:66:96:be:57:d3:3a:bd:
                    95:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:28:6D:9E:D3:1A:3B:23:9B:FE:6C:36:1C:8E:ED:FF:82:65:A8:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98b980e4-3346-3d68-b6a4-5f1009b7f4a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:89:2b:df:80:06:44:54:0a:47:5d:d0:82:ff:95:8e:f4:8e:
         93:ab:50:82:b6:64:b6:6c:e2:88:7d:b8:a9:e2:9b:53:bb:41:
         8b:7d:53:7f:a5:b1:ec:f2:6e:1d:bb:dc:55:42:fd:8e:d6:f3:
         bb:5d:b3:7b:2b:c7:aa:31:e4:2e:b7:8a:75:6a:15:13:b5:cb:
         50:52:77:49:54:8e:a6:fb:e9:d7:bb:98:82:2d:c8:15:3b:39:
         df:0a:22:88:23:a4:58:9e:df:67:4e:32:ba:35:ca:78:a0:65:
         92:94:8b:bc:47:76:ce:50:05:36:43:bb:42:77:a9:91:0c:ab:
         8a:68:e9:da:d4:20:b9:aa:cb:8a:1c:a5:12:d6:09:18:1e:e3:
         b3:7c:eb:60:cf:34:d8:3a:db:7b:b9:02:be:16:4b:86:cc:e4:
         96:fb:14:42:c8:92:5d:c8:a2:72:12:a4:c6:48:7f:f2:1f:3b:
         a2:1f:bc:76:a9:ec:1e:01:bb:a5:f4:93:eb:5e:cb:69:cf:f4:
         80:07:4a:9d:62:c2:35:c6:75:cf:f6:71:63:70:e9:78:61:d5:
         33:e3:8a:05:d1:72:c7:92:ea:61:e9:2d:84:2a:ae:0b:4e:6b:
         40:71:b8:0f:40:a0:03:30:f7:f0:f7:1d:c1:aa:a3:78:58:14:
         50:f4:c4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:35 2025 by rpki-client