Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4efc226-f7c9-3e25-8f15-efcf4b8877c2.roa
File:                     a4efc226-f7c9-3e25-8f15-efcf4b8877c2.roa (raw, json)
Hash identifier:          XljXSNZi1CZTo62aN8uvAh+u/30wwpjnv33MnNIC+KE=
Subject key identifier:   A1:7C:8D:7D:3C:B3:F0:11:76:39:17:7F:3B:16:F9:68:DF:32:18:B9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD2FEBC75735A97B155B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4efc226-f7c9-3e25-8f15-efcf4b8877c2.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.21.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:2f:eb:c7:57:35:a9:7b:15:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a86e525d-f43c-46d7-9b94-bfc31c655b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:6b:4b:de:72:80:5e:02:5c:f7:40:a7:a8:
                    cb:b8:87:51:a6:08:07:01:ba:d8:de:e1:65:e7:8e:
                    56:9c:0a:13:9c:31:70:2e:af:05:e1:08:ee:38:86:
                    d9:67:94:9d:39:0e:5a:00:3d:d2:66:78:58:a9:2b:
                    ae:7b:39:df:02:ad:d2:8c:0c:28:38:e8:ea:1a:37:
                    20:f5:61:9e:25:2e:da:03:85:96:60:b6:16:45:3f:
                    45:3d:0f:38:38:6c:da:44:ad:1d:d9:23:ef:63:8b:
                    92:08:96:cc:a0:8a:c7:b7:d4:60:de:6c:c7:c2:08:
                    9a:76:ee:fa:64:ab:1a:b0:04:10:ae:48:17:47:e7:
                    0b:2f:97:2c:e7:f9:e4:7c:d4:0b:31:c6:23:42:9e:
                    0d:3c:9a:7a:00:af:49:34:ba:b7:12:8f:b9:24:d1:
                    67:75:b9:25:25:21:49:e1:30:76:af:41:f9:76:1a:
                    5e:c4:64:9c:b9:e5:f0:81:ee:b2:33:44:01:3c:dd:
                    c4:8c:af:7f:25:01:c0:61:b5:c5:84:e5:4b:d8:0a:
                    27:4a:87:9d:7f:16:fa:ff:90:6c:e2:fc:9f:93:2c:
                    e7:a5:be:6c:a8:d0:7d:db:26:63:71:59:ac:a5:6a:
                    b1:fb:b2:50:a0:ac:50:1b:92:cd:7f:f3:31:de:03:
                    a6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7C:8D:7D:3C:B3:F0:11:76:39:17:7F:3B:16:F9:68:DF:32:18:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a4efc226-f7c9-3e25-8f15-efcf4b8877c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:54:08:03:11:8e:ae:4e:23:c1:79:c2:44:64:96:11:5d:5b:
         3b:40:0a:b7:20:52:cb:4e:9e:04:32:9e:08:0c:17:df:02:4a:
         14:50:5e:82:c4:19:76:ec:bc:68:9f:b2:d2:f7:cd:6f:83:95:
         d5:bb:a8:d6:66:f6:33:9f:90:89:07:71:5b:36:41:2c:24:d2:
         f1:1c:5e:08:f1:5c:55:5f:17:76:ac:6d:15:e7:91:85:53:64:
         29:2e:ea:1d:01:86:83:b1:c9:26:8d:51:fb:86:1f:a3:a8:a2:
         29:20:96:b9:8b:81:f0:4e:f2:89:6c:62:6c:6b:89:ef:30:8a:
         23:61:28:1b:8b:f4:14:7c:f0:b7:0b:eb:31:ff:4d:61:ab:d9:
         26:eb:5a:c0:31:a9:4c:43:7c:3d:33:19:26:63:e6:7e:37:2a:
         a0:84:ce:88:d5:9c:f8:e7:38:75:60:f4:f1:12:43:e9:c1:c2:
         8f:6e:d7:35:19:cb:fa:d3:ac:96:9a:be:44:b5:37:a0:89:a1:
         f7:73:d2:a5:13:46:f9:c2:93:1a:35:ac:91:31:24:57:95:01:
         dd:ed:84:c5:bb:32:51:dd:31:d4:b9:e8:19:5c:61:80:01:d6:
         8d:14:f6:c0:a2:b7:48:9f:9b:52:c8:46:3c:08:2e:b9:39:8d:
         55:73:db:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:27:40 2025 by rpki-client