Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad9fd2c1-ebb1-30f6-a308-66e3ddcee7b2.roa
File:                     ad9fd2c1-ebb1-30f6-a308-66e3ddcee7b2.roa (raw, json)
Hash identifier:          cAjtPxg84jdjLmhwUKOa6j0F119qIDnRxEZGG3152J8=
Subject key identifier:   79:FC:E4:20:41:D8:34:2B:18:D8:39:A6:50:E6:98:ED:42:26:25:CA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD3AE4F0232421654DD980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad9fd2c1-ebb1-30f6-a308-66e3ddcee7b2.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.62.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:3a:e4:f0:23:24:21:65:4d:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2a4b17ba-c395-43b0-901a-8f9ed6ae9a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:52:d8:db:d3:e0:b4:21:c2:ef:35:80:48:
                    b1:f4:44:4e:59:c3:f0:1e:2a:3c:b6:ef:29:c3:2f:
                    90:04:6a:1a:e9:de:ec:67:b7:6e:3a:00:01:5d:92:
                    0d:85:a7:4c:18:3f:2a:ab:23:81:74:e1:be:8e:13:
                    ff:94:b5:93:dc:67:10:4e:7a:73:c1:a6:0f:05:9f:
                    23:e5:1e:ba:fc:8f:5f:77:53:58:dd:aa:95:51:f4:
                    d2:93:4f:b3:2a:95:89:f0:33:ba:04:af:4e:84:e9:
                    be:b1:de:81:b7:33:7e:7b:08:e9:42:d8:76:e0:1a:
                    e9:10:2a:cf:3c:73:2b:be:4c:eb:53:79:0f:c0:6f:
                    cc:f8:f9:ce:1f:60:6a:b8:47:d1:93:ab:d0:b0:2b:
                    57:1d:41:2c:49:ae:68:74:a8:c1:78:ae:05:11:14:
                    70:cc:f0:fc:cf:86:6e:45:85:ab:2d:35:89:3d:1a:
                    ad:7b:26:46:68:15:12:02:cd:48:c0:85:17:d4:8d:
                    f8:5e:48:79:8d:4a:93:d5:75:f4:8e:c6:cf:f8:49:
                    6f:76:e0:67:8b:1f:b6:26:79:29:dd:b4:9e:d3:ca:
                    23:18:74:b3:a3:17:14:0f:de:f5:1f:58:96:e7:87:
                    f4:be:6b:ae:a9:11:68:59:3b:0a:1d:04:93:5e:5c:
                    1c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:E4:20:41:D8:34:2B:18:D8:39:A6:50:E6:98:ED:42:26:25:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad9fd2c1-ebb1-30f6-a308-66e3ddcee7b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:5b:56:f7:8c:29:cd:3c:36:c8:ff:2e:d5:4e:0f:0f:0b:95:
         32:01:e2:9c:5f:3e:e7:4d:37:a9:b8:22:fb:ee:81:42:1e:bb:
         24:06:f4:11:74:3c:50:a6:21:ca:3d:27:7f:44:e9:36:22:ad:
         da:d1:95:d9:2a:19:06:d2:29:da:e2:21:dc:72:64:30:28:48:
         50:20:3c:bd:76:97:66:d9:85:ad:8c:70:1e:e0:4a:52:76:97:
         c5:d1:4e:a7:e2:1b:80:74:49:13:25:2b:1c:43:b7:14:dc:30:
         e9:de:6f:a8:32:4b:d5:29:4f:18:93:8e:a8:f4:a1:bb:5b:fc:
         0b:81:c8:74:dc:84:61:12:cf:57:2c:3e:d8:47:fd:a9:47:80:
         33:9f:43:10:6e:7d:41:e4:b8:17:5a:e6:d0:36:ec:69:a0:54:
         07:1f:df:05:7e:2d:48:5e:8e:77:ec:1b:c2:ac:74:1e:58:ab:
         ef:10:78:fb:84:e4:22:b2:c4:53:a0:1a:a9:4e:da:23:00:5e:
         71:69:01:73:b5:4d:73:d2:ae:4d:8c:35:88:46:13:88:a1:3e:
         ca:08:01:6a:c0:5b:20:c2:07:c0:91:61:68:e1:79:7d:3e:4d:
         ca:a7:17:32:71:07:2e:56:53:49:54:11:d9:ad:17:1f:6d:de:
         ac:67:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:22:57 2025 by rpki-client