Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc3fb61a-d35b-3a00-a270-792b75953f12.roa
File:                     fc3fb61a-d35b-3a00-a270-792b75953f12.roa (raw, json)
Hash identifier:          Dt6/v2+uY0++owgq3K75ms38HLyeY6fT3rjRb1/Uw1g=
Subject key identifier:   A3:08:81:EE:98:61:2A:13:B9:A5:51:92:84:88:05:C7:A4:04:B6:F0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584B64CDE157290E3AA206CC8A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc3fb61a-d35b-3a00-a270-792b75953f12.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     7155
IP address blocks:        172.243.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:e1:57:29:0e:3a:a2:06:cc:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f1b10845-e7e4-43bd-a120-4936e38c0800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:32:8b:e8:eb:5e:32:43:ca:1a:ae:7b:36:
                    00:58:3f:06:79:a6:d1:59:4a:b8:99:ce:e6:c5:9a:
                    72:d2:2d:d4:3a:b4:79:3a:6f:26:5f:ba:84:3d:37:
                    8d:19:64:25:ec:e3:bc:4b:85:14:7c:6f:7b:ec:fd:
                    66:89:18:41:90:f1:10:f8:21:d9:e3:ba:73:c4:39:
                    a5:41:be:e4:56:3a:80:14:68:9e:b3:9f:d8:a0:a0:
                    e8:a4:16:b8:f3:d9:47:9a:2e:3f:0c:0a:cc:4f:a3:
                    07:a4:97:d9:fb:2d:8b:d9:42:0b:cb:f9:96:a5:95:
                    58:61:4e:51:49:40:4e:fc:c4:84:e4:97:5f:c9:8e:
                    3b:38:a4:da:1a:cf:09:5d:48:b2:98:60:80:5d:4c:
                    eb:e7:b2:a5:49:70:38:7d:da:34:4f:72:d5:04:69:
                    ea:71:e0:37:4f:54:35:0d:8e:95:65:34:c7:e1:f8:
                    41:e5:87:4f:7b:a9:3a:40:a3:5f:01:28:9e:1c:e2:
                    84:fe:e5:1c:21:2d:f5:86:20:5e:e1:51:c6:4b:a8:
                    d9:22:b2:3e:78:b8:cf:d3:08:41:5d:56:33:47:d1:
                    28:eb:55:df:93:f3:75:dd:85:a2:f2:e0:2d:4c:10:
                    96:9e:19:97:fd:72:ad:85:99:42:04:1b:8c:af:c6:
                    10:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:08:81:EE:98:61:2A:13:B9:A5:51:92:84:88:05:C7:A4:04:B6:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc3fb61a-d35b-3a00-a270-792b75953f12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:f1:48:51:83:32:8a:a9:4c:44:df:65:d7:37:aa:05:c7:ab:
         5b:42:8a:f3:da:a6:70:50:46:15:f7:01:58:66:c0:1a:eb:07:
         fe:e7:a9:ea:fb:de:65:15:7e:3e:e4:52:0e:52:9f:aa:11:f8:
         2c:f2:a7:a1:be:70:7b:91:6a:73:a5:fe:03:d0:bf:78:e3:4a:
         30:d1:72:2b:22:df:7e:2e:56:1b:09:0d:fe:01:dd:3d:67:c5:
         ad:ac:2f:1a:86:4f:44:a0:bd:13:cc:58:5d:71:e5:cb:a3:15:
         89:b3:82:0e:ba:e5:7d:37:17:8e:c4:90:37:58:dd:ad:36:7d:
         75:6d:88:62:35:2b:f3:d8:d8:c3:a9:0a:15:cd:a2:fa:2d:36:
         9e:1c:e3:9a:bc:2d:c1:14:4d:7f:e2:6f:c2:6f:d9:cb:ca:ef:
         f9:b2:7f:5d:ab:9a:a0:d9:f7:c3:bf:16:4a:45:dd:8a:8e:41:
         b4:bb:6e:9d:d5:30:ce:bb:c3:76:33:5a:b9:d0:6e:37:ad:a8:
         b8:4e:47:a1:c6:21:ec:ad:c2:fe:82:af:05:8b:df:30:6f:2e:
         c9:0b:1c:3d:b6:23:46:85:a8:08:dd:4d:39:dd:37:ff:a4:5d:
         c2:99:32:39:aa:4f:44:78:b6:87:45:3b:16:3c:77:88:9a:09:
         4e:30:42:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:16 2025 by rpki-client