Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5477ea07-7b48-3823-a13c-5e0eee576482.roa
File:                     5477ea07-7b48-3823-a13c-5e0eee576482.roa (raw, json)
Hash identifier:          nm8zjfZrHxPmvdIpOM/l1xnRngRizSxaNibAZEWv9HU=
Subject key identifier:   3A:B3:AB:B1:91:EB:05:CA:45:E5:31:70:F1:C2:14:B3:F0:98:A7:63
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841212D5ED0F9A08DEB13A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5477ea07-7b48-3823-a13c-5e0eee576482.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.62.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:12:d5:ed:0f:9a:08:de:b1:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c0c8dba1-be08-4bf3-b0a4-61935c0365c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:8b:1a:06:93:92:9c:45:c6:cd:f4:09:c9:
                    c8:11:52:72:e0:a4:75:36:31:6e:84:ed:77:83:95:
                    0a:13:49:21:0a:15:ea:f0:05:04:65:ba:61:f9:b9:
                    d9:5a:47:31:6e:cc:f0:dd:34:7b:c4:e0:1b:14:ce:
                    35:1d:ba:8e:5d:1a:92:bc:69:d9:79:2e:c6:59:2a:
                    ee:5e:93:3d:7d:ec:b2:5a:02:dd:f3:83:49:08:ed:
                    7a:0b:1e:f2:05:52:18:28:dc:15:42:ee:b1:a7:e5:
                    44:41:49:f6:cb:93:95:b5:fd:86:30:6e:66:50:e3:
                    cf:4f:05:0e:bd:c2:55:13:4e:c0:50:f1:1e:91:95:
                    6f:84:37:56:57:d2:52:3c:a7:ba:02:ad:73:a8:10:
                    72:28:6a:19:a8:b9:98:6e:96:44:f9:71:c3:19:c5:
                    03:08:12:dd:b8:dc:aa:b3:7e:63:0d:2d:97:a2:28:
                    8b:aa:19:6a:33:16:34:c5:a2:d5:f3:2f:16:a8:21:
                    6a:f3:4f:74:cc:7b:0f:05:69:b6:95:63:be:ac:79:
                    a4:6e:d9:7b:f4:44:4d:2d:13:a1:9c:ef:22:8b:ca:
                    67:44:c8:15:46:13:6d:82:17:99:75:87:a9:20:72:
                    19:e1:c7:b1:f8:12:e8:9e:61:0c:ef:5a:07:6f:b7:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B3:AB:B1:91:EB:05:CA:45:E5:31:70:F1:C2:14:B3:F0:98:A7:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5477ea07-7b48-3823-a13c-5e0eee576482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1b:12:91:be:10:7d:f3:1a:5f:b9:73:79:94:78:b8:3f:b3:
         eb:63:f3:7b:6b:0b:6c:60:0a:97:55:25:60:5b:53:fe:92:51:
         40:4f:85:34:2e:67:66:6c:fb:bd:c4:0f:42:a6:e5:a4:b6:d5:
         1f:04:80:c8:1b:2c:33:ae:bf:cd:a3:a1:4b:0d:00:07:9b:da:
         8c:be:0c:d7:08:86:73:a7:b3:c9:66:c6:84:02:94:d7:81:ac:
         1c:e7:71:a7:79:be:2a:b3:68:13:af:1a:c9:1f:93:d8:f6:97:
         2a:d7:31:56:6b:b5:58:39:39:aa:ac:68:df:8e:92:f7:38:b0:
         2b:fe:00:f6:64:51:b5:a9:27:c3:9b:13:b4:a6:13:d0:46:5e:
         55:8a:58:a0:a7:c0:5c:ae:2f:45:82:1c:60:29:96:80:10:9a:
         6b:49:0f:6e:87:c3:ae:d3:99:78:c9:19:1d:11:49:80:d4:bc:
         3c:67:18:8e:68:b9:90:95:e4:21:ef:f0:88:3e:38:1a:94:62:
         e1:03:6e:84:77:d0:e8:ec:e8:32:1e:fe:cf:45:4d:7a:30:91:
         04:18:24:a6:ed:9a:d8:20:4a:16:b0:7c:eb:4e:c4:da:a6:d9:
         97:be:d7:71:56:22:f0:65:c3:c5:99:1c:bc:de:96:c5:11:76:
         b2:89:cb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:07:12 2025 by rpki-client