Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e54b4323-64b0-3224-b562-d2fbb8824449.roa
File:                     e54b4323-64b0-3224-b562-d2fbb8824449.roa (raw, json)
Hash identifier:          rZx+5VP9KVj/Zdqa3JuajcI7Njj4Zq/iCm4utti6da4=
Subject key identifier:   8D:D6:14:0C:66:AF:CC:74:89:35:8F:67:96:CA:75:6B:CE:F1:4F:5C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDDA93AE1AAC06F487BE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e54b4323-64b0-3224-b562-d2fbb8824449.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.242.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:da:93:ae:1a:ac:06:f4:87:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=aa63a9c7-a2ad-4aff-9927-9f42f05341ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:43:dc:e7:a0:b4:d2:73:72:25:83:1a:3f:80:
                    06:cf:bc:68:8c:36:cd:71:2b:b8:af:81:af:f3:53:
                    78:8e:b5:e5:03:8c:81:57:33:3d:93:42:23:3b:06:
                    17:e4:fa:6d:e7:03:72:b2:3f:7e:29:8d:2e:c0:09:
                    b1:6e:8f:bf:b1:ee:02:e8:6c:c3:ea:60:eb:ef:c6:
                    62:1a:ef:21:99:d4:33:cd:b2:5a:c5:95:b2:22:85:
                    0c:81:67:e3:ad:30:01:6d:d1:df:d2:b3:37:94:5a:
                    58:01:4b:45:94:67:0f:e4:ec:69:75:ae:f4:9e:05:
                    9d:c5:93:dc:98:c8:fd:30:3a:4f:3b:01:91:5f:5b:
                    19:92:10:93:3f:30:80:cf:f1:78:4f:7a:ae:18:29:
                    1f:2b:61:fa:f4:b2:89:3e:df:d0:9e:40:ca:65:b0:
                    ff:c4:ca:e3:ee:60:b6:24:02:d6:e0:9d:94:29:b6:
                    84:93:c7:4e:17:ea:43:83:11:27:99:9b:9d:82:de:
                    ca:aa:79:e4:13:c1:88:93:29:8e:3a:a3:92:f0:09:
                    43:2b:ba:d7:fc:c1:c8:2b:ac:f5:e1:3f:47:83:08:
                    07:51:fb:d1:16:9f:21:01:5d:be:b7:42:22:7a:13:
                    ee:81:b3:dc:59:41:ef:b4:02:6d:6e:68:d7:af:ef:
                    90:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D6:14:0C:66:AF:CC:74:89:35:8F:67:96:CA:75:6B:CE:F1:4F:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e54b4323-64b0-3224-b562-d2fbb8824449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:18:95:b4:f3:fa:ee:1a:b9:d7:0e:50:4a:07:71:80:1f:ca:
         66:be:23:c3:ec:7c:4a:83:a2:8e:10:c5:7c:06:e4:10:d5:ee:
         58:50:d5:95:29:ed:a0:17:e0:6e:f6:79:cb:04:a5:53:96:d6:
         1e:65:51:d8:d1:16:de:95:2d:a9:c3:b6:30:22:81:d1:19:1f:
         b0:cb:b0:6a:54:e6:39:a3:ee:a3:31:fd:b7:69:af:7c:9f:c8:
         02:47:32:a1:28:b2:ec:b5:e1:73:d8:48:b9:2f:fa:fb:5f:e8:
         7b:9a:e1:02:11:c5:bd:36:02:3c:32:d6:02:5f:89:ab:14:b4:
         bc:8f:1c:42:5d:9e:00:46:04:c4:7c:69:c4:7e:d6:99:83:f0:
         a3:3a:f9:cb:2c:7b:c0:33:5e:56:82:2b:5c:2a:b8:60:b7:47:
         09:09:a4:7c:b8:4e:aa:ad:e1:90:a0:1e:cf:0a:02:85:1e:90:
         9b:61:8d:c3:b0:8e:b5:bf:1e:f7:22:22:cf:12:83:94:8b:25:
         cc:3a:4c:6b:28:00:d4:36:10:a9:a1:73:43:41:0d:82:97:2d:
         6a:b3:24:2c:35:8d:4a:e5:82:43:9b:66:3a:e0:a8:25:2c:14:
         c5:b2:b8:0d:eb:14:b4:31:dd:30:1c:20:b7:9d:0e:ec:9a:4b:
         df:8d:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:05 2025 by rpki-client