Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad02097e-a61a-3389-af15-71310fb933f1.roa
File:                     ad02097e-a61a-3389-af15-71310fb933f1.roa (raw, json)
Hash identifier:          w1MPa/1sSWjRew5yWHk42SjeM2R7vYOL3iL/MIOwI0I=
Subject key identifier:   0C:0A:97:DA:C1:5C:E7:22:97:DC:4E:1A:89:6D:59:06:BD:F9:85:BE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD45594985B71BDF8DD800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad02097e-a61a-3389-af15-71310fb933f1.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:45:59:49:85:b7:1b:df:8d:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=1e3456e2-e3d3-4eca-a849-0b1584f5a22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c0:f6:58:46:78:08:23:04:dd:5b:74:f2:2e:
                    6b:73:2a:29:60:5e:c4:ab:c1:cb:55:e9:04:45:a2:
                    29:d6:99:75:47:98:24:4c:8f:eb:c0:4f:0b:f5:90:
                    87:4d:f5:e6:3c:a3:1c:92:d2:88:c2:f4:84:ad:39:
                    e3:a2:4c:ab:93:ca:3e:22:38:5c:8b:5b:9c:15:b2:
                    78:5b:59:1f:63:89:c0:90:3d:4c:e7:15:fd:e4:cf:
                    ad:1b:97:54:9d:d4:26:96:5d:83:d7:7f:31:b7:fd:
                    bd:9c:de:5f:f5:67:76:0c:4e:1f:39:96:a8:80:72:
                    3c:89:b7:67:0a:91:eb:dc:24:f3:c1:c5:a8:78:96:
                    2a:c8:10:8d:c2:ba:52:e6:52:e5:97:10:77:e5:cd:
                    12:6d:f9:4a:8b:58:86:67:dc:da:f6:db:ea:0a:18:
                    82:74:ad:c7:53:a5:ff:eb:c9:69:87:6b:76:d1:07:
                    f9:6e:cd:03:6a:0c:22:8a:b6:24:a7:ef:eb:d9:3d:
                    b1:62:e3:3c:58:85:18:1c:65:a2:cb:27:25:b2:fd:
                    62:0c:9a:ad:aa:2a:b9:ba:78:96:1b:e4:27:88:e7:
                    74:99:48:27:1f:7c:c2:35:02:a6:40:4a:a5:6a:be:
                    24:9f:7b:a1:66:60:8d:c2:e1:80:84:f5:db:4f:30:
                    6e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0A:97:DA:C1:5C:E7:22:97:DC:4E:1A:89:6D:59:06:BD:F9:85:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad02097e-a61a-3389-af15-71310fb933f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:78:06:53:1b:f2:30:f1:b0:ef:54:26:35:25:fe:23:cf:26:
         17:26:10:78:63:94:95:c9:a6:8b:45:fc:24:ec:e2:e1:cc:6e:
         74:f5:94:1e:99:4e:2d:91:12:8c:ab:3e:cd:db:5b:47:23:de:
         4e:9c:c9:2f:9b:46:f3:44:df:a0:e4:e9:9b:1e:f5:ca:98:d0:
         86:a7:ea:cb:21:ae:de:cd:be:cf:a3:32:9d:7a:a3:9d:a0:c6:
         3e:18:27:f3:a6:26:fa:03:54:10:3a:c0:c2:08:81:4c:89:20:
         c3:b3:5b:ff:43:30:8b:61:85:30:c1:c5:28:b4:2f:35:ba:e9:
         a6:c2:22:21:83:6f:43:9f:64:70:dc:64:bc:cb:e0:84:2c:f5:
         2d:2f:a6:25:af:a4:a5:20:3f:ea:3c:b6:a1:b2:48:0a:22:84:
         fd:76:60:f0:f6:ab:a5:80:20:34:f4:2a:7d:3f:36:f6:8d:27:
         ee:d4:77:ed:82:c4:6e:93:4d:4b:aa:4a:79:b0:ce:b2:c7:16:
         ff:82:31:38:d7:0b:db:66:9b:1f:f4:68:b1:d4:e4:fd:97:83:
         18:4f:7a:1a:d0:11:45:38:c7:db:f6:9a:80:85:06:e8:df:fe:
         af:c5:70:b5:86:60:a7:f7:fa:ca:33:5a:0a:ae:22:2b:0c:51:
         b1:06:03:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:13 2025 by rpki-client