Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27dfa490-0043-389e-905d-b29373777a3a.roa
File:                     27dfa490-0043-389e-905d-b29373777a3a.roa (raw, json)
Hash identifier:          7n6L8osNWlIsoQQOQ/femp+T2aVpubIw5o6Znh6l+m8=
Subject key identifier:   D1:08:AA:FB:C0:6B:B7:F4:5D:B6:8B:F0:D1:97:F8:2D:C9:0B:8B:A2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84115ACACD809300EC23A9C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27dfa490-0043-389e-905d-b29373777a3a.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.21.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:5a:ca:cd:80:93:00:ec:23:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=24a446d8-9221-4440-8be2-fe62e0aeae9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9d:ac:7c:48:67:98:aa:15:cf:b1:1d:b2:e2:
                    b5:42:d3:62:c3:d4:ff:9c:e8:1b:82:0f:1c:75:26:
                    fb:19:a4:0c:94:6e:b7:d4:ae:25:ef:72:3f:1e:02:
                    fb:8b:e7:6d:01:71:a1:d9:be:44:bb:3f:56:23:ec:
                    42:d9:db:68:31:87:84:57:ec:d6:0c:09:7d:2a:63:
                    84:b8:92:00:95:a1:b2:1a:ff:79:06:ea:f0:93:c8:
                    d2:ef:84:ef:6e:d4:b0:4d:0c:a0:12:31:40:f4:1c:
                    c2:4e:41:4d:f2:ca:34:5e:90:c1:17:a7:8a:ef:6c:
                    0e:aa:d5:84:48:4f:17:91:99:0c:66:85:61:b9:07:
                    a1:6d:1b:4c:40:21:a3:5f:07:a1:d0:7d:96:bc:5a:
                    d0:32:d2:5e:54:38:08:cb:d0:d9:e0:ab:e7:be:4c:
                    41:96:21:e6:68:54:67:43:30:8d:50:19:23:22:ef:
                    80:b7:85:c7:dc:94:25:ed:e5:ad:1c:89:25:cf:dc:
                    ef:f8:5f:9c:9d:04:61:c0:54:e7:7e:c5:32:55:c4:
                    9c:29:78:3a:b0:49:55:fe:a4:74:1b:fb:ed:cb:91:
                    eb:e0:4b:cd:b3:8f:7b:83:08:ef:36:71:a2:87:d6:
                    84:f4:c8:e9:bb:3d:2d:0b:6e:f9:ba:f1:8f:de:40:
                    53:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:08:AA:FB:C0:6B:B7:F4:5D:B6:8B:F0:D1:97:F8:2D:C9:0B:8B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/27dfa490-0043-389e-905d-b29373777a3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:63:c9:80:30:ea:43:4f:9b:14:65:5e:e9:66:53:18:89:6a:
         05:aa:4a:48:92:ae:a0:00:05:e4:a4:d9:2d:6c:b5:df:5d:ba:
         6a:55:1f:75:29:86:d9:61:ec:b2:e7:ac:14:cb:4b:e9:1b:ea:
         3e:89:20:b3:8c:08:da:c9:df:55:7f:1d:b7:11:e8:e2:93:a1:
         ae:73:79:eb:a5:83:88:68:4f:cc:ba:46:d9:eb:2c:54:58:bc:
         25:2d:f7:14:47:ed:76:69:8b:21:2b:51:3f:bc:44:9d:63:0f:
         10:ab:f3:ef:d9:86:08:65:47:77:47:54:cd:09:09:ea:0c:f7:
         76:59:22:02:aa:af:c6:1a:a5:d8:83:25:27:c8:c0:bf:4d:35:
         51:1a:06:b9:1a:ca:b5:f5:8a:bf:78:3c:99:b8:4a:1c:ce:8e:
         36:87:4b:47:99:99:ac:a2:cc:40:ff:24:16:07:f8:13:b4:38:
         20:e7:c2:fd:da:67:1d:ec:9c:4a:b8:55:7b:e4:8f:c8:cc:e2:
         1c:ef:e9:72:5f:1c:36:35:57:0c:9b:98:a0:5d:4f:a1:5a:20:
         43:b4:25:19:d0:14:f4:a5:49:11:f9:f8:6c:d5:63:d1:7a:7b:
         10:fd:82:2b:45:61:f3:84:96:17:57:a0:64:42:63:99:7a:bc:
         03:94:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:14:22 2025 by rpki-client