Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be3ee4fc-fef0-321a-82ed-cd2ca5249871.roa
File:                     be3ee4fc-fef0-321a-82ed-cd2ca5249871.roa (raw, json)
Hash identifier:          u0zT2SuzFLA24BGmT7EohkrRQkkAw9ActqPeg+SjuqA=
Subject key identifier:   17:01:65:D5:52:F9:CA:99:AA:F3:16:9B:6B:DE:B0:53:1A:96:41:C8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD38F5F7F1F377737962E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be3ee4fc-fef0-321a-82ed-cd2ca5249871.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.62.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:38:f5:f7:f1:f3:77:73:79:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=441ec84b-4b22-4ea0-859b-829b4500b1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3d:72:aa:e7:9a:18:0f:7e:41:10:2a:36:e8:
                    ce:b6:f6:dc:28:9e:51:c1:0c:50:6f:fc:c0:da:70:
                    ed:d8:02:93:2e:4c:a7:e9:03:82:3a:9e:a1:71:90:
                    e5:60:a2:94:5c:e1:9b:da:c0:d5:55:59:f4:11:ce:
                    7b:c9:4d:78:dc:c3:d5:e0:e8:e7:34:56:e9:b5:6e:
                    fa:51:c7:b1:02:a2:6a:dd:f1:ee:ad:46:68:18:53:
                    dc:7b:f1:29:75:01:75:6f:39:39:b7:04:62:a9:60:
                    49:3d:36:3d:da:c5:b1:b6:5d:70:e5:84:cb:9d:49:
                    49:bf:99:6c:f1:31:04:2b:28:46:6f:6b:79:ae:88:
                    ed:4a:4a:6c:28:99:8d:5f:3c:ae:2f:28:be:30:19:
                    01:05:95:f2:8e:57:7e:c1:82:36:70:ac:91:37:55:
                    1a:4a:d1:78:d9:25:02:26:c7:6f:e1:6b:93:21:8e:
                    8c:5d:e0:83:6a:14:07:46:2b:ff:21:94:9d:53:12:
                    85:9c:ae:de:89:b5:f3:07:30:f5:77:7b:24:19:5c:
                    f1:4d:86:aa:b1:a7:81:84:54:4e:a0:21:7a:6b:41:
                    1c:bd:a2:a1:1c:8e:7b:7c:11:9c:1d:4c:a8:97:11:
                    49:ae:3a:4d:96:26:37:7a:b3:a7:f4:74:13:83:13:
                    cf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:01:65:D5:52:F9:CA:99:AA:F3:16:9B:6B:DE:B0:53:1A:96:41:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be3ee4fc-fef0-321a-82ed-cd2ca5249871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f7:07:5e:bf:89:88:9c:e6:0b:45:b4:c9:68:49:f4:0d:ab:
         5b:c0:b7:5c:a4:1a:61:12:b3:ec:8d:68:8a:e8:e9:04:c0:a7:
         48:21:6c:7b:8d:e2:c1:47:0f:71:fb:fc:2f:aa:5e:1e:4b:79:
         07:1b:8d:87:67:03:dc:c4:a7:c7:49:fd:ba:5a:ff:9c:4c:d2:
         2d:fd:13:d4:e7:6c:cc:96:e3:8d:5f:50:be:5e:90:3f:00:2b:
         66:25:1f:42:28:70:17:63:8a:08:b0:96:a2:9c:b7:91:39:38:
         4b:7d:e4:a4:61:f1:ff:e8:f5:b3:1e:d4:08:57:0f:4a:6c:40:
         08:ba:d3:3d:40:5c:6a:05:6c:d3:0b:fe:ac:e9:08:4b:2a:39:
         73:f1:21:2f:e6:67:1e:85:60:14:94:37:e7:76:7f:ec:69:64:
         d4:b5:46:35:d9:fd:66:c6:03:62:bd:db:27:e6:67:89:6b:4a:
         ad:11:14:9f:2a:ec:8b:64:b6:98:d7:a8:e9:8e:2d:a5:e2:4e:
         00:4d:36:06:4d:c5:6c:35:86:cc:18:aa:8f:53:0b:85:c7:44:
         b3:54:33:30:6d:a2:6b:a8:68:cf:0c:1b:56:c4:1b:b1:67:cd:
         4b:77:b0:59:42:c2:7d:81:6f:cd:42:d8:20:c8:38:f3:75:bd:
         da:85:01:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzTj19/Hzd3N5YuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NDQxZWM4NGItNGIyMi00ZWEwLTg1OWItODI5YjQ1MDBiMWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj1yqueaGA9+QRAqNujOtvbcKJ5RwQxQb/zA
2nDt2AKTLkyn6QOCOp6hcZDlYKKUXOGb2sDVVVn0Ec57yU143MPV4OjnNFbptW76
UcexAqJq3fHurUZoGFPce/EpdQF1bzk5twRiqWBJPTY92sWxtl1w5YTLnUlJv5ls
8TEEKyhGb2t5rojtSkpsKJmNXzyuLyi+MBkBBZXyjld+wYI2cKyRN1UaStF42SUC
Jsdv4WuTIY6MXeCDahQHRiv/IZSdUxKFnK7eibXzBzD1d3skGVzxTYaqsaeBhFRO
oCF6a0EcvaKhHI57fBGcHUyolxFJrjpNliY3erOn9HQTgxPPWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBcBZdVS+cqZqvMWm2vesFMalkHIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmUzZWU0ZmMtZmVmMC0z
MjFhLTgyZWQtY2QyY2E1MjQ5ODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD4hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACH3B16/iYic5gtFtMloSfQNq1vAt1ykGmESs+yNaIro6QTAp0ghbHuN
4sFHD3H7/C+qXh5LeQcbjYdnA9zEp8dJ/bpa/5xM0i39E9TnbMyW441fUL5ekD8A
K2YlH0IocBdjigiwlqKct5E5OEt95KRh8f/o9bMe1AhXD0psQAi60z1AXGoFbNML
/qzpCEsqOXPxIS/mZx6FYBSUN+d2f+xpZNS1RjXZ/WbGA2K92yfmZ4lrSq0RFJ8q
7ItktpjXqOmOLaXiTgBNNgZNxWw1hswYqo9TC4XHRLNUMzBtomuoaM8MG1bEG7Fn
zUt3sFlCwn2Bb81C2CDIOPN1vdqFAeE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:48 2025 by rpki-client