Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c51057e6-6497-3766-a9ed-b0c9d83df7c0.roa
File:                     c51057e6-6497-3766-a9ed-b0c9d83df7c0.roa (raw, json)
Hash identifier:          E3niwuonaeTmAyeQ5Nwbe8c6Q2vLd2qvcq01w3WWSAk=
Subject key identifier:   39:68:FB:4C:6A:AC:BC:E1:B4:64:18:FD:96:82:4C:19:27:90:AA:5D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDD6D1FBE18544CE9AE1C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c51057e6-6497-3766-a9ed-b0c9d83df7c0.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.242.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:d6:d1:fb:e1:85:44:ce:9a:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=4e69a763-6ec1-4d1b-af9c-4fc530f97f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d6:80:ac:27:da:b7:79:78:ad:bd:78:2d:5f:
                    1b:b0:d5:83:49:5d:40:9c:f1:fc:f1:ee:c2:80:2c:
                    7f:d5:eb:3f:98:a4:dc:35:ed:e1:22:21:15:f2:49:
                    1a:a3:ba:d7:2b:82:b5:a5:d8:c2:7f:3e:c0:a4:af:
                    a2:45:e0:44:07:39:b0:26:59:7f:27:b6:49:ac:0d:
                    b5:ef:4f:75:b8:16:55:ab:6e:c4:cf:13:6c:0d:8c:
                    2c:42:85:fc:c5:b8:74:4e:e3:30:16:80:fa:47:26:
                    f3:87:dd:37:18:f9:c3:5b:4e:22:ba:d2:bf:77:c9:
                    29:68:7d:4f:a8:5a:21:ca:87:43:74:ab:82:2f:c5:
                    18:28:84:2e:0c:b2:c5:23:59:ef:c3:59:81:c7:ff:
                    93:7c:04:87:c3:f7:6d:9f:20:37:65:5b:ff:32:6b:
                    68:50:46:a5:24:16:d9:ed:87:f6:6f:28:f6:53:f8:
                    9c:d5:11:2a:06:e4:5d:22:fc:e9:cc:65:1b:43:e2:
                    6d:6a:61:0d:07:ee:ee:cf:3b:a3:4a:77:9e:35:4b:
                    05:b4:fc:73:fa:ae:95:65:35:b1:50:f9:4f:66:03:
                    de:08:35:95:91:c8:c1:fd:ca:05:8b:95:60:5e:19:
                    ac:a6:4a:dd:fa:43:84:61:c5:79:67:a3:77:44:37:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:68:FB:4C:6A:AC:BC:E1:B4:64:18:FD:96:82:4C:19:27:90:AA:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c51057e6-6497-3766-a9ed-b0c9d83df7c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:a8:a9:c1:e4:68:9f:10:54:36:b2:c4:13:7c:90:ee:b6:
         9d:de:41:b0:ab:3a:31:1b:df:b7:7c:c2:28:d9:58:7c:bf:28:
         61:91:3c:8d:33:32:47:ab:95:3d:fd:4f:7e:c4:6f:76:87:3f:
         90:95:63:91:6d:32:bb:42:12:16:7f:8a:60:ca:db:48:24:99:
         19:ce:cd:89:d6:6f:49:b4:57:5a:53:b9:81:ec:df:c3:d3:14:
         8a:af:ba:4b:61:1b:18:64:5e:81:1a:93:93:4e:60:b6:a5:83:
         c0:0a:a2:ad:74:51:7f:48:4d:9d:37:7d:c8:c3:c2:9f:9a:1b:
         de:59:fd:80:a1:41:e1:71:9b:d2:ad:40:75:c9:c3:73:b3:12:
         af:45:e6:70:8c:ef:f5:7b:16:15:b7:90:43:24:aa:ac:be:04:
         01:fd:0d:18:c9:d0:22:a2:29:96:d5:8e:71:a6:44:33:d9:d9:
         8a:7e:5c:1c:01:84:36:b2:ee:be:9f:bc:08:5f:05:c4:de:b5:
         34:de:ea:df:36:c4:5b:4d:bf:58:c4:57:48:8c:e4:cb:b5:7e:
         00:b3:90:77:6e:d4:cc:07:ba:5c:1c:7d:20:0d:18:f7:43:3f:
         fa:97:ea:43:23:b1:73:7a:c0:0c:c0:b5:ac:a5:cb:f1:c6:74:
         01:c5:ba:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:55 2025 by rpki-client