Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f28b0d3c-b2d9-35b9-9e6c-fb49647404ac.roa
File:                     f28b0d3c-b2d9-35b9-9e6c-fb49647404ac.roa (raw, json)
Hash identifier:          /CGUH2kBTCp/BCIA5GJlEyTftUFCeqZVjX35nG1kjW8=
Subject key identifier:   09:C7:AC:55:37:1A:CB:C3:1C:EA:AF:02:DE:E8:68:60:0A:3B:88:16
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDEB56F4C2F87345A9B200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f28b0d3c-b2d9-35b9-9e6c-fb49647404ac.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        184.20.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:eb:56:f4:c2:f8:73:45:a9:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a6a2c8d1-a7bb-4970-bb25-d2e4b636d010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:52:81:5d:0c:00:18:43:64:45:33:6b:01:7a:
                    df:a9:9b:fa:fb:b6:f4:f6:a5:c0:2b:6b:89:6b:3c:
                    b2:15:30:5a:ac:5c:5d:1b:06:c9:a5:3d:92:b6:4c:
                    c3:c3:89:54:3d:a2:b9:5d:72:ef:d9:d6:21:fe:ae:
                    75:be:82:e1:37:42:5e:7d:af:05:c8:fc:15:1a:01:
                    ee:04:6f:3e:da:c4:9b:f0:17:31:47:79:92:e9:fe:
                    06:f9:3b:ab:7b:82:8c:bc:5a:be:55:02:19:f4:4e:
                    74:66:5a:ff:2c:fa:f0:13:f4:41:99:97:c6:47:2a:
                    bf:de:5e:ce:59:bb:5b:5e:30:f4:57:04:e5:8d:66:
                    d3:1c:2d:65:d2:a7:d9:e7:2f:da:90:83:0a:b2:6e:
                    05:e1:08:ba:c5:5f:75:10:a4:00:e3:2e:65:da:26:
                    88:d2:12:5f:38:2f:af:f6:d3:ac:3f:61:ec:1f:56:
                    3f:ee:ef:d7:02:3f:8b:cc:a5:e4:3e:77:28:a8:f5:
                    9f:94:5f:3c:04:0f:3d:a1:25:62:98:2d:18:75:ea:
                    6b:b2:be:20:07:82:1d:45:99:d4:bf:f7:cd:da:36:
                    f5:91:a5:bc:a0:0c:f8:7c:7b:b3:30:43:44:13:70:
                    cb:07:db:f4:de:9f:45:3f:58:90:16:fc:65:8f:49:
                    bf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:AC:55:37:1A:CB:C3:1C:EA:AF:02:DE:E8:68:60:0A:3B:88:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f28b0d3c-b2d9-35b9-9e6c-fb49647404ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:5f:82:96:a0:e2:0d:32:5f:3f:5f:47:d2:d3:25:ea:d1:3c:
         98:29:f6:55:d9:a1:9f:83:26:48:96:e1:d5:29:e9:dd:f5:0a:
         f5:44:dd:82:ec:a5:0e:36:93:49:eb:8e:dc:dd:d9:66:8d:a1:
         e6:c3:ab:d4:9a:25:ae:75:f0:c1:8d:b9:05:83:55:47:4d:9f:
         66:cf:fa:b3:5b:78:e4:74:41:69:b1:a6:a7:ce:af:9c:89:22:
         54:f7:0f:1c:89:20:56:26:72:77:11:90:f6:ad:c3:df:4b:e4:
         38:07:14:52:65:f6:22:1f:6e:10:13:91:1e:34:43:ac:50:aa:
         13:81:11:81:86:c7:51:f6:d6:fc:ca:00:1c:c4:3e:ed:cc:cd:
         15:61:90:7b:8b:05:d1:92:da:43:4b:20:a9:21:28:b9:a2:88:
         df:30:cd:d9:dd:a4:58:82:6e:26:2f:d7:47:3a:00:c6:97:fd:
         95:f1:48:95:16:31:52:a6:f6:fb:8d:41:40:0a:1f:9d:78:ce:
         86:88:51:b7:7b:78:a6:f7:f8:33:15:73:39:3a:66:a9:ce:19:
         ea:00:f6:71:7f:99:d2:7b:d3:3d:76:10:8f:8d:0f:64:cc:ec:
         1c:13:fa:76:02:24:37:fe:24:b9:05:57:08:1c:14:13:05:a3:
         1d:7c:72:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:42 2025 by rpki-client