Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d68fdc0e-c881-3e78-a75c-358dc9108c8c.roa
File:                     d68fdc0e-c881-3e78-a75c-358dc9108c8c.roa (raw, json)
Hash identifier:          x8pFybrut5dwleQhCAJzbi3zBQk402t4/g3izDSO72Q=
Subject key identifier:   93:29:6A:45:2D:0E:35:7E:74:58:3F:3B:1A:A1:AA:BD:68:46:5E:89
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDE9CD615400B161291F80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d68fdc0e-c881-3e78-a75c-358dc9108c8c.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:e9:cd:61:54:00:b1:61:29:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ae296dff-7fdf-479f-a57a-7c2ad4b4fe83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:b5:b3:9d:72:94:cb:66:69:2d:97:46:7f:
                    a2:c6:0d:a6:62:af:76:62:16:cc:b6:9f:43:f9:82:
                    21:c4:b5:45:cd:d7:07:ce:ce:88:65:62:b7:10:63:
                    57:28:75:a1:8b:a2:26:ab:bb:e4:1a:cc:7d:b3:6a:
                    20:0f:ef:fa:5f:3d:b2:c9:ef:02:7a:0e:5a:46:af:
                    ae:ea:59:60:86:ee:97:62:47:06:b4:c2:db:78:5f:
                    82:7f:c2:26:e1:bc:9d:5c:19:7e:22:03:91:a3:1e:
                    6e:fd:8d:d5:ab:f0:7a:6b:78:c1:9f:bb:c4:07:bd:
                    7a:1b:d8:08:2c:3f:8d:e0:1f:c5:c8:ea:c9:df:8d:
                    e6:70:f4:ba:ce:fe:1f:34:cb:07:08:7b:36:0b:a8:
                    dd:47:e7:df:05:46:be:87:b1:51:f2:91:b1:88:1d:
                    c3:e3:fc:4d:6b:81:66:05:ac:ea:c9:bd:aa:cd:51:
                    95:aa:34:29:91:19:df:f7:d3:6a:07:88:e6:00:3f:
                    46:2a:95:79:66:3c:01:7d:ac:b2:40:4d:4e:e8:d5:
                    bb:6a:ef:56:e0:7a:55:5b:ec:85:c6:3f:94:d6:ee:
                    06:94:7d:c6:1d:f3:3e:4a:72:ea:dd:6d:11:8e:b5:
                    e2:67:65:4c:48:29:97:af:6e:f5:63:35:71:ff:90:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:29:6A:45:2D:0E:35:7E:74:58:3F:3B:1A:A1:AA:BD:68:46:5E:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d68fdc0e-c881-3e78-a75c-358dc9108c8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:7f:5b:85:98:ae:f6:0b:cf:92:58:e5:2f:5b:26:e4:cd:2a:
         1d:2d:d7:3c:14:83:8a:54:78:69:ef:2c:49:ce:b1:ad:7d:a6:
         9c:d0:84:41:59:e7:5d:08:51:c6:31:1b:85:15:da:2d:23:7d:
         1f:d7:41:3c:bd:05:a6:d9:dd:c4:4f:bc:90:7a:c3:43:55:a7:
         fe:53:f6:27:52:bc:e2:7e:30:c5:80:f8:87:95:6d:c3:0a:00:
         b4:87:51:84:69:30:2f:03:e9:1b:eb:b3:90:34:59:89:66:31:
         24:a0:a3:3a:bf:9a:e2:2d:d2:7f:83:33:48:1c:72:db:a6:7c:
         93:08:ad:5e:76:e6:85:c3:35:32:3b:c5:96:10:fb:90:97:f8:
         5b:e4:f8:a9:ea:c9:6f:54:6b:66:41:64:e8:16:2b:ad:d0:6e:
         bb:23:56:81:02:92:d9:4e:d2:41:8f:51:ea:d8:97:b8:1e:99:
         6a:8a:c7:66:26:01:28:0b:0e:d6:13:9d:1a:a0:0d:64:67:aa:
         29:dc:9c:4b:3b:a4:34:50:e7:01:87:a6:6f:7d:85:68:8c:b9:
         01:da:9d:ad:5c:f2:64:a3:f3:30:66:77:42:24:a9:19:63:cd:
         bd:f5:16:43:00:ff:2d:0f:b2:7b:3e:8a:86:c1:07:99:36:11:
         d9:d9:ea:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:48:47 2025 by rpki-client