Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d7a8b28-1c5c-3510-b74e-63e81f69f73b.roa
File:                     5d7a8b28-1c5c-3510-b74e-63e81f69f73b.roa (raw, json)
Hash identifier:          awkzUkniISjUM62RPI5zvuvpREv+X9Eg2plZowVbOXc=
Subject key identifier:   5F:00:EA:35:15:ED:D4:7C:19:7F:F0:DD:57:C5:53:C4:67:9B:B8:89
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841207F7D0134521AF952D60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d7a8b28-1c5c-3510-b74e-63e81f69f73b.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.20.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:07:f7:d0:13:45:21:af:95:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3d019e98-48bc-47d9-8a9a-7286004e8cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6b:95:9a:c7:71:85:14:1c:c2:48:48:9f:e9:
                    61:9f:c2:70:c4:f0:23:00:09:5e:ca:35:2a:ac:16:
                    69:a6:fe:a1:6c:0f:43:98:dd:d6:8a:c5:19:76:69:
                    8e:83:f1:00:b0:b1:9f:fa:40:07:a5:de:72:89:0a:
                    78:1b:7e:5b:d3:f8:01:cb:3e:5b:4e:14:0d:e0:97:
                    6e:77:a8:f7:e9:85:99:8d:3c:ac:12:02:d1:42:31:
                    bb:77:6c:b3:7b:b0:ea:c4:d0:dd:3b:08:4a:ad:59:
                    e6:f6:98:9a:fa:da:ff:bc:a5:d6:c7:2c:a2:86:c2:
                    c7:fe:6c:ac:87:7d:08:fd:0f:76:6f:05:ba:0d:d8:
                    8c:61:4f:f3:02:f1:d7:db:a4:8b:36:ce:c7:52:c3:
                    81:bc:67:07:e9:81:1c:ae:40:79:21:70:51:64:b4:
                    90:9d:80:64:04:9f:77:a7:9d:12:cf:f7:8b:a1:81:
                    dc:35:45:da:e6:51:bb:0f:18:34:94:15:e8:cd:3d:
                    94:c0:51:8a:00:af:c6:13:70:0a:91:3e:b7:d0:8f:
                    86:c3:4a:ee:95:49:74:26:0c:c0:5f:75:15:44:4d:
                    19:06:1b:5b:f3:48:f3:24:d1:aa:56:fc:5a:26:0b:
                    bc:ff:bc:a1:0e:fa:6b:2d:91:99:6f:f8:09:c8:c9:
                    26:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:00:EA:35:15:ED:D4:7C:19:7F:F0:DD:57:C5:53:C4:67:9B:B8:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d7a8b28-1c5c-3510-b74e-63e81f69f73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:a1:97:4e:d0:8f:bc:7e:c8:ec:d2:33:ff:8e:1f:40:00:
         62:ee:eb:5a:63:87:f5:d2:a8:2c:9b:58:be:55:78:0c:23:09:
         6a:7c:53:dc:f0:c7:33:6c:16:9e:d0:4a:b1:da:4e:ba:40:07:
         1a:38:b5:ae:71:fd:13:86:1e:c0:0c:50:97:5b:28:8b:b6:b2:
         7a:0a:53:5d:d2:3c:64:8c:45:9b:b9:66:4c:00:a6:bb:39:3b:
         69:d7:e4:21:2e:0f:10:ca:7a:7f:38:3d:2d:fd:b5:3e:aa:1b:
         00:d4:f8:fd:c4:c7:ec:0a:97:67:b0:cb:6a:cf:63:57:f4:e4:
         63:1f:c6:20:a0:f2:77:ab:d3:46:6e:c5:d1:8c:8b:53:6e:40:
         9d:5c:e7:a8:c0:2f:2c:23:56:62:3d:91:b6:69:3f:81:2c:36:
         54:45:01:78:9a:66:73:15:ce:93:64:63:da:55:ec:18:49:d3:
         c0:a1:2f:7a:c1:b9:aa:0b:24:fd:91:4b:e9:01:be:96:7e:4a:
         68:6a:de:8b:be:51:d0:d6:2c:99:c6:5f:96:db:68:4c:e3:1a:
         c3:51:99:89:53:73:cd:2c:24:91:29:34:4a:23:fc:76:ab:6d:
         1c:8f:17:a3:82:54:57:65:06:fc:95:af:21:54:02:84:a4:e4:
         9f:09:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:11:10 2025 by rpki-client