Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d6343c1-f45c-3b50-a49f-0d155d812a40.roa
File:                     9d6343c1-f45c-3b50-a49f-0d155d812a40.roa (raw, json)
Hash identifier:          43JOxzNcSk6riEenJyBTVJGt3uSGb3zItImwabLIx5Q=
Subject key identifier:   93:8D:EF:48:41:45:C7:15:01:DA:3F:B8:4E:9C:86:5A:D4:97:A1:EA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD4C0E1593C22C3314E6FC
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d6343c1-f45c-3b50-a49f-0d155d812a40.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        198.45.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:4c:0e:15:93:c2:2c:33:14:e6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e9d0cd9c-65b2-4706-9096-d0c8521e02a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:91:c5:45:0b:ac:39:10:0c:94:91:0d:97:
                    a7:14:ef:07:b9:91:90:bb:33:40:98:9d:3c:09:fd:
                    b8:6d:77:20:10:da:7d:b8:e0:c4:14:61:1f:34:2b:
                    d0:ee:6c:d8:c0:3f:b2:be:43:e3:15:07:a3:3b:3f:
                    b1:17:9e:9c:95:1f:6f:aa:51:02:9d:16:b7:d8:16:
                    bc:74:95:04:e0:ad:61:b8:66:c3:56:df:32:5f:fb:
                    33:e0:2e:fa:55:70:a9:44:09:7f:df:2c:91:6c:47:
                    50:76:df:8f:3b:b3:54:e7:84:0b:bf:3f:e5:73:5a:
                    85:a3:43:9a:5f:d6:b7:8f:92:0a:0c:73:af:23:10:
                    a2:25:23:0d:b4:60:4e:51:f4:73:b7:3d:d8:d2:55:
                    cf:52:90:8f:dd:de:07:de:72:55:3f:7c:16:be:50:
                    55:d3:d2:22:00:34:0a:32:68:c4:de:e4:c7:37:84:
                    65:ff:2f:14:4c:56:19:73:24:59:59:06:28:85:2e:
                    10:34:5f:b9:4a:0a:29:b0:c7:ff:fb:54:88:4c:97:
                    97:b5:e3:c7:6d:24:c9:45:ac:e0:98:01:1d:44:f7:
                    18:53:5b:f5:f8:9d:de:e8:00:ac:0a:64:49:7b:f2:
                    15:87:b2:58:0c:ff:6a:64:b8:b4:98:9c:58:8a:b9:
                    70:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8D:EF:48:41:45:C7:15:01:DA:3F:B8:4E:9C:86:5A:D4:97:A1:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9d6343c1-f45c-3b50-a49f-0d155d812a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a3:a8:99:84:0c:29:75:2b:2c:42:55:87:f6:f7:50:39:cd:
         25:37:97:ac:88:45:69:cb:a6:36:51:77:85:6d:99:fa:f7:83:
         46:90:66:ce:31:bb:e2:78:f0:ec:f6:5e:06:e8:0b:2a:b2:3f:
         32:eb:15:f8:66:57:c2:b8:3a:b1:cf:91:64:a0:e8:1a:cd:2f:
         cb:e3:2a:5b:a0:9a:8e:f2:e8:03:48:33:7e:da:7e:90:65:80:
         e0:5c:3a:25:ee:9f:dc:e7:6b:4a:fb:25:f3:f7:52:37:77:16:
         57:03:02:8c:85:41:64:77:32:c9:54:23:cf:0d:82:65:b0:47:
         d9:64:cb:b6:5d:e4:9a:45:ba:b8:aa:79:27:37:6d:82:00:76:
         f5:d1:69:3f:b4:ad:1d:b5:c0:26:e8:e2:0d:d1:c9:de:b0:3b:
         42:36:3b:8a:80:80:42:58:fd:f8:71:87:18:8e:cf:43:3a:b4:
         0e:1f:b3:0d:d1:de:0f:52:2b:de:75:13:33:64:dd:e6:67:9a:
         07:72:6a:08:d5:21:d4:7f:17:3f:c7:42:b1:59:e4:ff:ee:68:
         f3:5b:54:8a:cc:b4:c6:e2:0a:a6:81:d1:d8:b8:2c:14:30:ae:
         9b:b2:83:65:bc:5a:fc:a1:fc:0b:f6:e3:da:cd:72:71:0a:ab:
         45:83:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:07:02 2025 by rpki-client