Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7271c280-8ac0-3c17-ac66-d4537440da47.roa
File:                     7271c280-8ac0-3c17-ac66-d4537440da47.roa (raw, json)
Hash identifier:          gXmfumAUKy0qTWJLuKvnvAslSuY+GQrZvvEz6zarpyc=
Subject key identifier:   29:46:B9:26:A3:96:DB:1C:BA:F4:CC:60:D4:72:13:2B:63:DE:24:93
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8412029180D73BE1E9716200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7271c280-8ac0-3c17-ac66-d4537440da47.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.243.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:02:91:80:d7:3b:e1:e9:71:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=697a13d1-bc3f-4942-9665-417dfc8707a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:e1:49:8f:bc:f0:f8:55:ed:58:27:75:96:
                    e7:31:6c:30:aa:1f:67:66:fe:0c:8a:ef:75:7d:d4:
                    93:49:87:2d:e9:e8:f3:4e:f0:85:5b:01:fb:80:a8:
                    43:e6:17:e7:a8:86:23:67:9c:a5:47:1a:af:48:8d:
                    99:b7:06:53:b4:bc:32:83:76:b7:ec:86:88:ea:aa:
                    fb:48:da:18:44:ec:8e:d6:47:4c:a6:6a:d4:6e:5f:
                    db:37:de:f0:d5:81:d1:a9:1e:31:8d:87:89:39:21:
                    30:dd:93:a9:6a:8d:2f:51:93:49:d3:1a:0a:8a:50:
                    b0:69:8f:41:7b:17:04:2f:3f:48:59:c8:4d:a6:a3:
                    e8:51:2e:88:ab:94:dc:4a:fb:eb:52:76:cb:1b:3d:
                    4d:c2:8d:64:29:d8:8b:e0:3f:d0:3c:63:71:db:d0:
                    1b:7e:a1:7a:97:58:10:27:42:4e:9c:52:31:5f:1f:
                    10:5b:69:18:3d:c4:08:ca:bb:7e:c3:b0:1b:31:1a:
                    59:df:c2:6b:de:bb:1e:77:fa:d5:4f:33:1d:06:9a:
                    bb:d4:7d:a5:02:07:43:6b:f4:35:b8:f6:88:e1:92:
                    7d:6e:86:1a:fc:37:7c:66:cb:e4:ce:88:b3:02:8b:
                    3a:8b:8d:f3:21:3a:42:87:4d:38:47:7c:72:12:27:
                    17:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:46:B9:26:A3:96:DB:1C:BA:F4:CC:60:D4:72:13:2B:63:DE:24:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7271c280-8ac0-3c17-ac66-d4537440da47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:0e:78:84:c0:73:c1:e0:50:54:f4:09:3f:1c:08:3c:21:c8:
         24:e3:56:53:d9:28:ed:89:4b:e4:78:94:41:d3:52:7f:e3:1e:
         8e:42:87:03:14:a2:11:1b:39:df:14:66:e0:32:c2:1e:c2:e5:
         3d:77:7c:24:da:ca:91:ad:df:39:c2:ae:35:77:88:8a:f0:32:
         8a:d7:01:96:8d:fb:08:73:e8:de:6c:7e:a0:60:12:4f:fe:96:
         5d:5f:74:c0:23:79:c5:c2:05:5a:2b:21:93:05:e2:9a:f0:aa:
         26:04:22:65:0d:78:f4:7a:f0:a0:73:c8:a2:bc:64:c9:f7:9c:
         bf:58:91:6a:a9:76:1c:f9:fc:29:91:d7:54:16:1a:c9:01:53:
         d7:e4:4f:44:45:c8:54:d0:16:2d:dc:56:cb:7d:34:78:03:c2:
         05:6b:8f:88:30:27:6f:14:a4:e7:89:84:cd:67:e4:7a:68:87:
         70:02:3b:27:14:82:7c:75:25:8f:d6:b1:41:a2:dd:3e:ee:12:
         b0:04:cf:e3:8e:37:5e:51:37:dc:50:93:ce:f4:33:2a:43:d8:
         53:99:7d:07:86:83:2e:72:c8:b9:be:c0:68:92:c6:c8:8c:27:
         32:94:54:73:1c:8b:af:93:3b:39:5e:f0:94:3b:82:2c:02:13:
         c5:8d:91:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:12:26 2025 by rpki-client