Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbb2b8b8-c0ae-3ea3-b9a3-a4cd390215eb.roa
File:                     bbb2b8b8-c0ae-3ea3-b9a3-a4cd390215eb.roa (raw, json)
Hash identifier:          1fzgOQzR3tkSlALeGivqq6DRMqlfQXPPBebGnuyHLW0=
Subject key identifier:   89:50:49:18:4F:43:29:D8:4E:49:70:53:35:80:9F:91:03:D7:95:70
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CE03A166EFD37B0D85B380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbb2b8b8-c0ae-3ea3-b9a3-a4cd390215eb.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.63.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:03:a1:66:ef:d3:7b:0d:85:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=5c4800ba-1995-40f4-be24-94f5d06290a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7a:99:c7:97:72:89:c6:51:0d:e9:c0:60:7f:
                    09:d5:4c:13:e3:e3:cf:71:3b:97:a3:b4:ec:46:7d:
                    b5:f7:46:66:7e:3c:69:b9:f0:fa:b9:1c:3b:2d:ed:
                    95:94:da:29:4d:67:ad:26:b6:83:74:5f:dc:8f:54:
                    d9:b6:9f:da:ed:c9:9c:c8:c9:4c:5b:e7:25:29:10:
                    da:10:41:d6:48:01:74:25:a5:0c:55:f3:2d:8e:1f:
                    a5:b8:ec:b3:60:58:39:07:ea:e7:bc:03:62:4d:1f:
                    73:56:94:d4:cc:c2:09:c7:da:98:fc:42:32:fd:9c:
                    01:68:a9:8d:a6:d7:a5:62:ad:bc:d2:30:cb:9b:de:
                    39:7e:8f:b4:50:75:36:41:da:97:d0:8a:eb:ab:25:
                    18:b3:fa:4c:ba:5d:f8:73:19:6f:ce:07:7c:52:bd:
                    35:81:ee:16:14:0c:2e:2c:28:c0:39:3f:c9:5e:80:
                    09:a1:8f:fe:18:70:d5:50:c4:66:d5:be:ae:d8:9c:
                    49:c7:01:f7:5c:a6:64:b3:1a:23:6d:9e:3e:9d:65:
                    62:b6:02:ee:e0:67:50:45:31:69:43:da:88:41:78:
                    6b:86:8a:75:76:17:cc:cf:19:e4:e5:da:28:17:4f:
                    a7:6e:85:01:40:56:e4:81:fa:33:39:39:10:23:54:
                    87:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:50:49:18:4F:43:29:D8:4E:49:70:53:35:80:9F:91:03:D7:95:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bbb2b8b8-c0ae-3ea3-b9a3-a4cd390215eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:d5:fa:48:85:05:ba:1a:ab:48:a2:24:1f:48:b0:e6:c2:76:
         24:dc:bb:9d:ef:3b:57:be:55:12:5e:d0:9b:05:ce:33:39:44:
         f4:72:89:d4:37:58:65:d5:35:02:ff:f9:ee:1d:42:65:f3:4d:
         29:58:10:8a:b0:94:b9:90:e0:41:5b:93:ef:31:62:71:b0:c0:
         ea:e7:4d:4c:ce:e8:86:16:7b:f7:d5:a7:d1:4e:e3:82:9b:30:
         8a:9c:2c:c3:e4:51:89:20:60:19:3c:d3:7e:9f:45:8d:38:a9:
         b8:4f:52:06:16:d4:08:77:18:b3:63:da:8c:ad:5d:bd:22:a4:
         f2:70:63:74:f7:59:63:9e:6e:95:d8:2b:4c:95:a5:69:f8:e6:
         df:a7:06:86:67:a7:4f:8c:03:4d:14:aa:13:36:80:21:72:4f:
         56:a3:a6:42:a5:7d:01:18:ae:20:ad:a8:e3:b0:fb:8e:87:69:
         b4:c0:fb:82:e9:8c:e7:61:e3:c2:58:4d:8f:f2:f3:be:3a:5f:
         91:70:e1:9a:76:88:cf:64:ad:e8:2d:00:cf:18:79:0c:bd:2a:
         5a:85:9d:28:87:56:54:a2:0e:64:41:ef:92:60:32:5e:2c:da:
         8c:2a:05:6a:5a:1f:84:fa:ae:a8:e5:e4:aa:5e:ac:25:47:cb:
         18:b2:bb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:45:07 2025 by rpki-client