Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55a6e064-abee-35bc-95aa-b12b25151789.roa
File:                     55a6e064-abee-35bc-95aa-b12b25151789.roa (raw, json)
Hash identifier:          JsvoCKvhhm7QLkIHXO52oLJG7ODBWsYMsStiOiHsZls=
Subject key identifier:   52:5F:EF:71:64:16:BF:7A:31:4E:64:80:C7:6C:27:39:16:14:CF:F6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841143CB0E02A153E8191600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55a6e064-abee-35bc-95aa-b12b25151789.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.242.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:43:cb:0e:02:a1:53:e8:19:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c1174346-6b8b-4382-8cb3-f165b9540cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a9:3e:e8:0a:dd:6e:83:4e:2d:05:f7:34:c0:
                    ce:73:26:a6:a8:06:cc:a1:3b:49:76:5d:58:0d:83:
                    d1:b4:eb:39:bf:b4:f8:11:57:2f:44:e7:5f:ff:3f:
                    ab:22:17:a6:37:1c:20:27:4a:bc:6b:48:8c:5e:8c:
                    3a:9e:90:ab:0c:1a:9a:d0:1f:ed:1a:7f:41:7c:56:
                    63:31:85:bb:01:35:22:87:57:72:e9:fe:c1:20:4a:
                    7f:07:c4:1d:15:47:12:29:e5:65:d8:9e:9d:0e:96:
                    bf:64:84:d1:29:61:ab:3d:72:53:cc:69:2b:9c:f1:
                    7e:b9:19:46:fc:a5:b8:bc:b2:dc:7c:c6:87:97:10:
                    60:f3:ec:cf:96:40:30:36:6f:c0:2b:9c:2b:f4:38:
                    08:70:3a:35:8c:eb:f0:15:88:72:f2:4c:01:66:0c:
                    c8:96:07:93:ca:38:91:82:e2:19:46:89:2b:f4:43:
                    18:97:a1:cb:0f:d8:67:76:30:d7:5b:eb:b0:3d:28:
                    ff:94:57:c6:bb:43:43:3f:90:e2:9e:48:7e:fe:96:
                    5b:52:39:4d:cc:ba:4d:a0:5f:b6:31:d6:c7:e7:cd:
                    5a:e8:1c:c1:ad:32:04:f3:9b:4f:96:2c:67:ff:dc:
                    20:8a:28:60:0c:59:24:83:8a:7c:85:51:d8:cc:ad:
                    30:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5F:EF:71:64:16:BF:7A:31:4E:64:80:C7:6C:27:39:16:14:CF:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55a6e064-abee-35bc-95aa-b12b25151789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c4:d8:19:ee:cf:4f:47:b7:67:7e:55:47:ef:cb:e7:bb:0f:
         f4:66:58:a9:90:3b:1b:ab:86:88:bb:12:05:0a:e7:57:5f:9d:
         ba:85:81:cd:7e:f4:77:fa:f4:a9:b6:5b:5d:f3:ee:3b:d2:41:
         ac:30:70:ec:4f:7d:01:7b:3c:3c:e6:86:26:ac:a7:c1:a9:bc:
         37:cf:f7:b9:31:02:77:c7:ae:98:da:86:d8:c9:08:66:ff:38:
         3e:e6:0a:71:24:f7:4e:2f:c0:ee:27:fd:0a:d9:7a:e6:76:26:
         7c:0b:6a:56:2e:0a:31:54:4a:eb:0e:f6:ca:4f:42:8c:eb:2f:
         d7:3c:e0:b5:65:55:2f:c6:cc:c7:82:81:8f:74:43:d7:7b:7e:
         9e:2b:96:72:db:dd:03:d6:cb:a4:84:1c:d8:42:61:8d:b3:31:
         38:95:da:51:58:87:a3:9a:cb:b4:78:9a:6c:e6:4f:eb:a3:c2:
         76:cb:02:07:4a:1c:e2:8b:6e:8e:0e:29:19:ad:85:e9:65:52:
         fd:5b:41:d9:b3:1b:8e:b7:66:8d:43:85:56:ee:62:28:00:7f:
         8b:f0:7c:cc:3a:94:5a:1e:c7:15:92:f5:6f:df:62:b8:3a:cd:
         a3:77:09:3a:52:be:81:c0:d4:88:cd:ec:1c:53:91:a3:b8:a0:
         e5:f6:5a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:03:11 2025 by rpki-client