Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03f904f9-4547-37f9-928d-ea6cc676d673.roa
File:                     03f904f9-4547-37f9-928d-ea6cc676d673.roa (raw, json)
Hash identifier:          hZ8dvTseJnhZVlSDAxcIddqKpBtQeUrt4iJKB5LRfJo=
Subject key identifier:   B2:ED:4C:8C:14:42:F7:3A:92:AB:D2:03:6F:36:7D:29:59:F6:66:07
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84121360ABD9F4A0BE5F3E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03f904f9-4547-37f9-928d-ea6cc676d673.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.62.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:13:60:ab:d9:f4:a0:be:5f:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=6e19a709-3908-4e8f-b467-dc303bb0af97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4a:fb:8d:bd:60:75:47:a2:03:f2:bf:78:e9:
                    88:5c:ef:e2:be:59:c2:98:e1:93:14:bf:07:2d:ab:
                    ca:63:c6:93:b3:20:1a:81:9a:53:d9:77:e2:40:83:
                    5b:cd:46:7d:a3:e4:33:35:43:96:2d:8d:6a:e5:b2:
                    c1:54:1c:2e:6e:f6:f2:01:27:fb:70:09:a8:35:7e:
                    db:8d:96:22:9f:bd:cd:0a:da:78:fa:d1:ae:15:1f:
                    94:fd:c9:b8:74:53:dc:19:26:7d:45:11:e1:92:a8:
                    e6:d7:be:9d:4e:52:da:c0:6b:29:c4:0b:67:52:45:
                    5a:e3:e5:6d:76:0e:84:59:cc:80:e1:a2:29:12:be:
                    e5:42:5e:f0:bf:c8:3e:05:d9:94:e2:e4:99:d0:e0:
                    d3:9b:b7:21:87:0d:dd:30:07:1b:0e:c5:80:cb:ec:
                    b4:27:3f:88:34:cb:d3:ce:8f:9c:31:36:51:72:58:
                    09:63:0b:62:84:04:65:18:39:4e:87:db:55:70:cc:
                    9d:eb:d3:af:80:26:92:ec:14:66:b3:ca:35:0e:d9:
                    8f:c4:49:67:35:12:34:fe:13:80:9f:da:d9:b7:d5:
                    62:75:84:de:5f:70:90:c8:bb:19:96:b5:cf:dd:e8:
                    47:7e:a4:9a:62:ac:3c:84:77:a2:c5:d8:02:4a:c0:
                    92:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:ED:4C:8C:14:42:F7:3A:92:AB:D2:03:6F:36:7D:29:59:F6:66:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03f904f9-4547-37f9-928d-ea6cc676d673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:92:91:72:c1:2f:a9:e7:6d:41:4c:63:b3:63:16:f4:ce:34:
         af:38:d9:25:c7:27:9a:91:21:80:51:8f:2e:a7:0d:4a:61:f8:
         99:b6:0a:ca:91:51:cb:72:e6:51:a8:2d:2c:fb:bd:31:0d:f5:
         3b:7f:21:79:a9:81:1d:8b:23:a6:e8:57:ef:7a:3b:39:15:0d:
         46:be:0b:d3:81:39:e5:b5:2f:7d:e0:b1:b9:a1:93:4f:88:d0:
         7f:09:3f:ee:3c:0b:8d:3c:40:f7:2a:74:14:51:9f:9a:13:9e:
         cc:12:b9:b6:cb:a0:0f:53:5b:36:ba:ed:3a:73:ea:13:5f:fc:
         73:b0:c3:0d:18:f6:61:5b:d3:ee:39:b0:6b:58:00:14:c6:45:
         4a:63:0f:cb:b2:85:bc:b2:e5:d5:81:d6:d8:21:b9:9c:a5:c0:
         62:37:83:d3:5a:8c:6c:f9:1a:29:a7:f0:8f:cc:52:dc:c7:fb:
         46:13:0e:dc:36:9a:d9:76:05:5e:f6:dd:ea:e3:a5:30:d1:37:
         10:d8:13:a2:48:15:d3:ba:7d:29:d2:87:de:61:16:88:68:e7:
         97:e2:11:53:fb:be:c8:ef:e5:4d:35:ad:ee:2d:12:79:e6:c9:
         e3:9b:62:bb:da:87:25:6f:48:55:07:2c:b9:c0:85:0b:e1:7f:
         d1:61:a2:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEhNgq9n0oL5fPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NmUxOWE3MDktMzkwOC00ZThmLWI0NjctZGMzMDNiYjBhZjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkr7jb1gdUeiA/K/eOmIXO/ivlnCmOGTFL8H
LavKY8aTsyAagZpT2XfiQINbzUZ9o+QzNUOWLY1q5bLBVBwubvbyASf7cAmoNX7b
jZYin73NCtp4+tGuFR+U/cm4dFPcGSZ9RRHhkqjm176dTlLawGspxAtnUkVa4+Vt
dg6EWcyA4aIpEr7lQl7wv8g+BdmU4uSZ0ODTm7chhw3dMAcbDsWAy+y0Jz+INMvT
zo+cMTZRclgJYwtihARlGDlOh9tVcMyd69OvgCaS7BRms8o1DtmPxElnNRI0/hOA
n9rZt9VidYTeX3CQyLsZlrXP3ehHfqSaYqw8hHeixdgCSsCSIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLLtTIwUQvc6kqvSA282fSlZ9mYHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDNmOTA0ZjktNDU0Ny0z
N2Y5LTkyOGQtZWE2Y2M2NzZkNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD4dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKSkXLBL6nnbUFMY7NjFvTONK842SXHJ5qRIYBRjy6nDUph+Jm2CsqR
Ucty5lGoLSz7vTEN9Tt/IXmpgR2LI6boV+96OzkVDUa+C9OBOeW1L33gsbmhk0+I
0H8JP+48C408QPcqdBRRn5oTnswSubbLoA9TWza67Tpz6hNf/HOwww0Y9mFb0+45
sGtYABTGRUpjD8uyhbyy5dWB1tghuZylwGI3g9NajGz5Gimn8I/MUtzH+0YTDtw2
mtl2BV723erjpTDRNxDYE6JIFdO6fSnSh95hFoho55fiEVP7vsjv5U01re4tEnnm
yeObYrvahyVvSFUHLLnAhQvhf9Fhooo=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:09:00 2025 by rpki-client