Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01207d9e-3598-33a2-9041-7a4fafffdb25.roa
File:                     01207d9e-3598-33a2-9041-7a4fafffdb25.roa (raw, json)
Hash identifier:          4O/B7p+MQzONCvapIkxOcon/F/Mj8jOqjU7rsbeH5+I=
Subject key identifier:   06:8D:5F:A9:9A:56:A3:35:FB:82:9A:98:63:4B:36:B0:FB:2B:F5:F3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841201D2A24A642BF1E63FB9
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01207d9e-3598-33a2-9041-7a4fafffdb25.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.243.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:01:d2:a2:4a:64:2b:f1:e6:3f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=55cb7dd7-f7c6-45db-bdce-f82213d8da28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c5:29:6d:65:fb:36:6f:96:5f:a7:8c:94:55:
                    88:ed:f7:4a:80:19:d6:1a:3f:67:d3:87:88:99:e5:
                    b7:ab:39:6a:ec:0d:1c:da:1f:6d:7c:1f:84:d3:83:
                    f7:63:b7:70:76:f3:de:3f:2a:42:a1:f0:a2:76:e0:
                    e3:71:7c:69:e2:af:7a:c5:46:2c:a4:24:b5:e1:2c:
                    bf:93:79:4a:0f:68:28:c5:45:19:bf:64:fc:57:1c:
                    1a:5b:44:5d:bf:1e:51:ab:d3:83:1e:93:ed:b8:49:
                    e2:be:46:05:52:54:c1:a7:84:44:b4:bd:c9:0c:06:
                    9e:03:32:5e:c5:2f:c6:e1:0f:c4:dd:c2:c0:2e:95:
                    84:ba:34:9d:c7:71:88:8f:aa:09:56:67:99:fa:8b:
                    17:3d:2f:82:81:9f:a8:c2:c7:61:c3:3e:85:2f:30:
                    1a:9e:09:3f:bd:8a:01:cd:9e:1a:b7:7d:6a:2f:b5:
                    e9:91:65:83:7f:88:f6:17:4a:63:ff:a9:9a:af:8c:
                    c0:36:93:51:14:ca:32:6f:a1:7e:e1:ea:f1:10:3f:
                    d2:41:92:64:e4:91:c4:7b:31:6f:cf:b2:83:fa:b7:
                    a6:4b:1e:e4:d5:af:ab:28:68:0f:03:01:f3:97:10:
                    e9:d3:1c:93:c6:c6:f5:8c:00:b5:ca:41:eb:e9:b4:
                    26:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8D:5F:A9:9A:56:A3:35:FB:82:9A:98:63:4B:36:B0:FB:2B:F5:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01207d9e-3598-33a2-9041-7a4fafffdb25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:8c:9f:5c:46:3e:47:4c:21:c0:bf:6c:d3:6b:b7:77:17:81:
         cd:26:06:69:87:e1:83:59:bc:9e:64:a4:a3:c3:57:c8:04:ba:
         77:dd:d7:8f:06:ca:90:22:a4:f9:45:5e:87:ea:69:4f:4d:2b:
         bb:74:d7:ba:73:4d:b8:43:23:41:4b:f5:d4:ea:d8:af:65:f3:
         53:61:38:0d:74:08:69:65:08:e2:f8:e6:0a:16:4e:8e:b2:57:
         b7:bc:07:bb:89:1f:45:f2:f9:f0:41:9c:9d:e0:41:2c:30:c5:
         e6:32:ce:55:98:79:e9:74:4f:54:ba:c9:d9:31:37:fa:e6:60:
         4f:76:a2:8c:d6:0a:ad:90:64:d7:b5:98:77:63:b2:70:eb:4f:
         5c:b1:64:2e:08:78:05:79:b4:66:8e:b1:5a:51:f3:96:6e:85:
         62:d2:d0:58:73:b7:3a:57:07:a9:16:89:4d:79:56:95:33:ee:
         50:21:33:96:f3:44:30:6d:51:79:e7:00:d0:34:02:4d:15:2b:
         af:b0:cd:62:3f:11:d8:1c:bb:a1:ca:c6:04:4a:57:5d:9e:e7:
         8a:a8:d5:f4:f9:57:f9:bc:07:b5:31:a5:86:be:2c:f9:af:03:
         46:53:71:fb:89:bb:66:f6:20:ba:87:66:f6:d3:a8:1d:8d:02:
         e2:fd:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:14:24 2025 by rpki-client