Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e063393a-feea-31d8-a0f0-955038576b9d.roa
File:                     e063393a-feea-31d8-a0f0-955038576b9d.roa (raw, json)
Hash identifier:          6q91sibb3wAt8zjZlf/H1tSvs1C5L63dO8KxrgGVme0=
Subject key identifier:   2D:01:1D:C2:36:6B:FD:54:3A:B2:80:28:44:6B:DF:80:73:2E:FE:CF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CD379D3B3D1DA366E47780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e063393a-feea-31d8-a0f0-955038576b9d.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.21.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:37:9d:3b:3d:1d:a3:66:e4:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=17b0bbda-ffd4-4532-b27b-56e779fe512a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:de:c4:3c:00:ac:30:3f:51:0b:1b:e1:3a:4b:
                    e5:32:0a:73:d3:7f:eb:3e:12:ed:82:06:a6:79:4a:
                    4f:92:02:88:6d:60:ac:07:55:14:71:48:fa:fb:5a:
                    70:df:fb:7a:3f:fb:2a:82:ea:92:40:c0:4b:fc:5f:
                    1d:42:ab:68:b3:3e:8e:32:82:c6:aa:b2:bc:97:29:
                    67:b8:29:8d:c7:ee:3d:97:d3:e7:2d:3e:4b:c5:d0:
                    c7:d9:01:09:1e:07:23:ce:df:b7:ff:1e:78:80:7b:
                    0d:41:d4:86:dd:e1:27:63:62:e0:fc:ed:70:da:55:
                    09:bc:9a:dd:3c:20:22:7f:8f:81:51:fb:1d:30:e8:
                    89:7b:36:b3:55:92:f5:32:3c:c6:df:b5:17:52:3c:
                    e8:36:76:69:e7:ea:14:11:b2:29:8a:1a:88:9b:ae:
                    17:2d:e2:b6:a2:df:7d:be:26:d2:a2:f8:11:da:a2:
                    2e:0a:14:5b:0c:c0:0a:4a:7d:93:a8:77:97:45:a8:
                    40:aa:c0:d0:3e:8d:e8:f9:28:37:46:67:7e:7c:c1:
                    ff:a8:fa:c1:0f:00:dc:9b:0a:0d:da:e7:24:5c:a7:
                    d5:14:9b:42:82:09:9b:e7:60:c9:a2:68:e8:a2:a5:
                    d3:6c:de:77:a0:22:e1:55:c0:b3:bc:44:4a:65:fb:
                    b3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:01:1D:C2:36:6B:FD:54:3A:B2:80:28:44:6B:DF:80:73:2E:FE:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e063393a-feea-31d8-a0f0-955038576b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:02:97:93:a4:fa:b0:17:84:aa:5d:17:7d:5c:1c:f3:f3:ad:
         51:c1:58:e1:67:e1:ee:2d:43:6d:dd:c8:d7:55:5a:fd:4d:e5:
         fb:51:21:79:02:4e:14:25:73:40:18:cb:fd:ba:7f:9d:75:0a:
         80:1d:a9:47:7f:22:8e:08:c3:cf:04:06:3f:60:0a:8e:a7:17:
         eb:f3:f3:a5:70:d2:1f:2f:b8:f9:89:72:da:2f:c7:1f:43:4f:
         d3:93:29:39:58:fc:cc:f1:b2:e4:22:31:ce:bf:c6:55:6b:50:
         5c:be:0d:5f:16:37:a3:29:15:f4:08:92:94:ea:0d:f5:4d:77:
         04:89:3f:5e:30:5f:21:eb:e9:c0:9a:56:47:83:39:6b:0d:aa:
         bd:08:fd:68:62:fe:64:07:d9:08:a7:19:76:b6:91:49:1d:73:
         a6:d8:db:82:65:e3:d1:20:fa:0c:fe:65:44:3c:74:63:dd:09:
         ef:4f:9a:bc:2a:71:56:a7:2c:27:53:6d:bf:0a:ee:7c:6a:91:
         b8:28:40:94:88:19:ec:97:d9:86:3e:19:7b:9f:39:8c:d3:78:
         f4:c6:e1:3d:f5:d3:fd:a0:c8:87:31:d8:52:fb:d9:21:f8:e9:
         00:a2:c8:2e:2a:c8:34:1b:4e:20:a5:7b:a0:ec:0a:bb:24:92:
         92:a4:b1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:29:55 2025 by rpki-client