Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39095af1-f8ea-3ad5-91c4-b98d273e2dbd.roa
File:                     39095af1-f8ea-3ad5-91c4-b98d273e2dbd.roa (raw, json)
Hash identifier:          uYNVSD5R7dE8OqcUV6Y03rCilYH2utEwe1MVns4XO34=
Subject key identifier:   BF:D3:72:EF:9A:52:89:18:A3:D2:B7:6B:BF:CB:B4:2F:C4:1D:A7:57
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841163B50D65CE3C66B6B9C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39095af1-f8ea-3ad5-91c4-b98d273e2dbd.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.62.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:63:b5:0d:65:ce:3c:66:b6:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=32b01126-f465-4f96-88cc-11e3cf0e8e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:24:50:9f:d8:70:14:a2:17:5d:21:92:de:ec:
                    c9:46:12:83:9c:8b:aa:13:48:6e:a5:2a:9a:8b:c3:
                    3d:df:96:d9:6e:b5:07:93:04:7f:e8:81:44:a0:dc:
                    a2:3f:b3:6f:7c:7a:6b:84:74:a0:64:91:bc:1f:40:
                    8c:7b:01:5a:41:60:58:69:06:78:67:4f:7e:a4:21:
                    fa:28:47:2a:1e:35:6c:7a:97:bb:1c:89:c3:99:6a:
                    f8:9e:57:3d:01:60:3d:e0:16:13:19:13:29:52:f3:
                    a7:d6:73:9d:eb:f8:50:92:eb:86:2c:2a:6a:64:28:
                    7f:af:ad:84:45:d6:b8:65:b9:2f:df:6e:58:f9:1a:
                    9f:d9:3e:6e:a4:07:28:04:6e:b5:63:a8:5e:77:4b:
                    3f:e0:27:9e:75:82:61:4b:6e:7f:d4:34:4b:8e:c8:
                    5f:fa:35:ca:9b:f6:e3:51:b8:cb:3b:16:a2:db:0a:
                    60:6a:ba:02:b2:42:d2:8d:08:61:1f:54:8b:a4:5d:
                    9e:b6:75:2c:49:48:f8:15:33:c3:05:19:d4:b8:94:
                    93:03:da:b3:16:7a:51:c0:96:60:52:fc:1c:69:22:
                    05:4b:c2:a6:89:dc:e4:02:27:8b:71:c2:9d:fe:6d:
                    d2:9b:b7:1a:42:25:14:9c:15:14:8c:f4:d3:a7:94:
                    71:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D3:72:EF:9A:52:89:18:A3:D2:B7:6B:BF:CB:B4:2F:C4:1D:A7:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39095af1-f8ea-3ad5-91c4-b98d273e2dbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:de:1b:22:ca:3b:36:8a:6d:f3:30:a6:ff:ea:1b:1a:cf:52:
         15:18:04:82:24:22:e3:62:be:fc:83:54:19:60:f1:52:be:83:
         a8:a7:0d:61:58:ec:63:64:8b:0b:c0:29:4d:6d:17:4a:8c:be:
         a0:f5:68:6c:05:cb:f6:2f:4e:b6:d3:d1:59:0d:6c:84:c3:36:
         39:3f:b7:e4:19:f1:96:32:9c:d0:19:bc:8f:7a:bb:25:a4:f4:
         e6:22:59:8b:f1:27:38:67:aa:19:9c:e3:b6:af:06:c0:a3:db:
         9b:74:b9:4e:17:87:39:45:22:5b:f7:d7:bf:fc:d7:56:e6:b6:
         3c:3a:21:86:95:4b:58:93:d7:5e:c8:8e:0c:88:29:95:ff:86:
         73:68:40:2d:04:01:51:e7:20:91:dc:a0:70:98:49:31:b5:e5:
         c9:f9:61:01:37:27:dc:c5:8a:00:38:68:64:8a:00:e9:b4:11:
         bd:40:04:92:80:a7:86:65:35:64:51:29:01:0d:b9:38:ee:01:
         42:fb:bc:bd:31:02:d2:0a:02:d6:46:ef:19:2b:a4:1d:4b:5f:
         b3:bf:3c:30:da:79:51:47:75:dd:c6:26:93:05:52:08:0d:4e:
         24:18:a0:5f:74:14:78:a0:9f:92:5e:43:cd:47:37:dc:62:22:
         39:95:f2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:03:36 2025 by rpki-client