Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14952819-48aa-3a8d-9fb5-811a0df0e0cb.roa
File:                     14952819-48aa-3a8d-9fb5-811a0df0e0cb.roa (raw, json)
Hash identifier:          YT1n2R9PjEMRtwPHyIb/9ehwpCI1UKmeTzUQJK5nPtc=
Subject key identifier:   5B:2A:C0:ED:6B:C8:91:9A:62:01:E8:BE:11:5D:50:66:03:FA:FF:27
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84120013FAA9EB2E6C004C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14952819-48aa-3a8d-9fb5-811a0df0e0cb.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.243.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:00:13:fa:a9:eb:2e:6c:00:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=9aa43c9e-54b8-4056-a06c-ac6e73fabc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:99:77:6e:0b:fd:9a:ae:ba:ae:1d:ea:bc:a3:
                    81:9b:4a:7b:03:87:81:5e:46:34:3a:a9:83:0b:23:
                    ef:cd:e3:9f:da:55:dd:a9:4d:eb:92:be:d2:5e:53:
                    3e:7d:39:df:28:01:c4:bd:c9:4f:c0:21:ba:fd:de:
                    03:b4:64:f6:5f:bf:04:f3:4e:5a:df:09:5f:04:86:
                    6d:cd:88:f1:2d:63:43:7e:3f:f6:6b:8c:ce:66:ec:
                    f2:11:81:b5:ab:c5:0f:6b:61:86:8b:84:65:79:db:
                    e1:c3:07:09:2f:18:25:91:26:44:17:8e:22:72:aa:
                    71:a0:bc:78:c0:66:4e:e2:66:95:ec:a8:e5:59:e9:
                    2a:73:3c:7f:af:66:ec:45:11:6e:4f:31:27:78:ab:
                    14:93:68:6b:b8:ba:f1:8d:b9:bf:e0:68:9b:70:70:
                    8a:04:bc:f1:e5:18:2d:6a:42:97:7b:65:cb:d6:c0:
                    96:d7:83:fc:ed:e2:aa:d2:11:3b:fb:39:41:9d:3f:
                    dd:94:cc:6f:e8:2f:8f:3f:6d:53:47:4d:7b:c0:a8:
                    37:8c:63:c6:0f:83:ef:cf:b7:fd:99:a5:36:e6:d4:
                    55:8c:a8:2c:f1:56:01:07:22:ee:e5:5d:03:a4:44:
                    9e:cb:ff:69:60:b2:50:4c:dd:50:73:83:ab:27:94:
                    79:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2A:C0:ED:6B:C8:91:9A:62:01:E8:BE:11:5D:50:66:03:FA:FF:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14952819-48aa-3a8d-9fb5-811a0df0e0cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:c8:3d:32:9e:c0:2a:14:c1:d1:f5:c5:a1:7e:1f:6f:90:13:
         8a:ee:f9:00:f3:7a:e0:a7:8a:51:5a:aa:62:96:f6:9b:60:6d:
         d3:10:df:45:37:d1:f0:f6:0a:d9:a7:2b:67:19:26:e4:68:e7:
         75:80:68:2f:e3:fb:52:cd:b0:f4:c5:43:6d:21:10:a5:e1:3d:
         ba:e9:fd:9e:d2:9b:fa:6b:38:de:66:f8:72:d9:c0:84:eb:1b:
         c2:ca:48:61:56:cb:1b:06:08:fc:e0:45:b9:b7:15:8e:ab:8f:
         96:17:ad:ef:5a:5a:d9:f9:48:55:7b:df:fb:32:25:8c:23:e0:
         c6:25:ce:9b:31:48:f8:05:01:d6:01:e9:b5:4a:44:28:f2:9d:
         4b:39:01:79:64:63:40:89:45:3d:d7:12:01:ca:24:2d:54:fd:
         d3:52:f8:c4:19:1d:e7:df:0d:40:c2:9f:a9:42:79:11:0c:ad:
         e8:37:36:5f:75:2b:7f:71:76:4c:72:19:50:3b:cb:97:9a:e2:
         64:f5:b6:a7:37:0c:c2:91:e8:4b:17:2f:a9:21:12:16:2b:57:
         16:66:0d:00:4b:a3:c1:86:62:38:79:b1:85:70:f3:c8:aa:85:
         ca:2c:88:22:de:ad:d1:2a:d9:31:18:cd:25:5b:fa:61:c8:28:
         c2:c5:6b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:10:46 2025 by rpki-client