Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8436167-fbd0-3f67-8cf4-86f256e88370.roa
File:                     a8436167-fbd0-3f67-8cf4-86f256e88370.roa (raw, json)
Hash identifier:          l1D8U0a22+2YkQH5y6Elc8/vvt0shj/WymgnX4+YG18=
Subject key identifier:   DB:81:97:F9:5B:A5:9F:6E:33:5C:7D:A2:C1:EC:85:9C:30:A7:14:4D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD2B417AC8D7EB0E9CD6D8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8436167-fbd0-3f67-8cf4-86f256e88370.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:2b:41:7a:c8:d7:eb:0e:9c:d6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1e70ec5b-ff80-4902-9081-2e04185654aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fa:9e:e2:f7:8b:89:64:d1:77:7d:c3:e3:11:
                    61:7d:2b:ad:c8:b5:05:2a:48:e3:22:b1:ff:2c:e8:
                    a9:a4:e8:0d:ec:74:07:62:e0:f0:16:c0:d6:d1:17:
                    8c:b7:28:9d:fe:04:3f:a5:77:d6:ee:52:82:48:1b:
                    a0:25:30:ae:c8:48:b6:13:a3:94:49:ab:3c:77:4b:
                    6b:f0:39:35:e5:f8:23:a6:66:00:ab:b6:4d:f0:b7:
                    9a:7e:3a:37:da:52:3c:40:4b:a1:6f:00:18:19:05:
                    00:fd:a9:80:16:2a:28:d9:fe:b7:c8:aa:44:ab:45:
                    97:67:7e:7c:f8:da:28:a1:3b:3e:12:6b:91:50:9a:
                    93:ef:16:2f:1b:87:da:e9:c8:a1:5c:91:78:3d:6c:
                    2f:3f:63:c0:3b:2c:2b:7e:a7:46:c5:7d:df:03:be:
                    26:c0:7a:08:fe:b4:79:20:ee:58:fd:a0:7e:da:19:
                    dd:e2:96:ab:00:aa:9f:ea:71:18:41:9e:c2:91:ec:
                    0e:e6:fa:47:7d:33:76:91:8f:78:1e:70:65:5b:b1:
                    af:c9:99:a3:0a:fb:88:c6:5d:7a:ad:ab:bc:98:06:
                    9b:25:8c:00:4c:6d:b7:53:ca:13:e1:3d:ba:d0:22:
                    f9:13:f9:e5:3f:ef:4f:52:bb:45:cf:09:84:05:d5:
                    11:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:81:97:F9:5B:A5:9F:6E:33:5C:7D:A2:C1:EC:85:9C:30:A7:14:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8436167-fbd0-3f67-8cf4-86f256e88370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:38:11:01:70:82:28:63:4d:57:f1:67:6d:b9:a3:85:65:ca:
         87:2c:11:64:b2:6d:de:ff:60:d4:a5:6f:44:be:71:38:63:d6:
         41:ec:d0:2b:72:b3:59:96:4a:e6:48:9e:af:65:5e:3a:c5:66:
         8c:1b:63:63:30:e2:d0:21:d8:33:ed:c2:e5:ea:62:06:36:df:
         e0:99:81:71:39:31:4a:8f:7e:60:9c:2e:ab:b7:ec:2d:1b:c5:
         f2:69:52:9f:bb:25:a7:0a:b6:a1:5a:fa:41:17:7b:52:f7:84:
         f7:45:8e:45:72:6d:7d:32:e4:b0:28:f6:e4:99:00:b3:c8:70:
         4e:c4:62:c3:8b:61:0c:6d:53:02:d4:41:7a:37:81:32:5d:5e:
         d5:59:5b:fd:8d:c0:2a:95:50:ba:89:2e:bd:83:8a:df:9d:48:
         a6:c9:f3:09:ff:69:4c:5d:91:4b:7f:10:42:25:9c:21:c1:27:
         d1:3e:2d:1c:9c:d2:72:db:6c:96:ba:c0:37:99:84:3b:f6:2b:
         ec:39:34:c3:51:33:49:d0:ed:ad:86:00:a2:68:cd:98:c6:47:
         67:68:1c:6a:bd:be:5c:e3:3a:e3:7a:4d:9c:5a:9e:18:6b:0e:
         3b:90:e9:6e:56:85:c7:c5:75:46:7f:0d:82:3e:84:65:e2:3d:
         28:ee:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:39:41 2025 by rpki-client