Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/765d0933-0d2d-3cbd-979f-1479140ccb6f.roa
File:                     765d0933-0d2d-3cbd-979f-1479140ccb6f.roa (raw, json)
Hash identifier:          LDDGOKDURpk1p/l60mi2zkBhr3wwrbLd0RRNkpqSv3w=
Subject key identifier:   BA:13:51:47:7C:B6:21:70:3E:A1:DE:C1:68:9F:0C:08:47:17:11:CE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8412053F3657D13D5482912A
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/765d0933-0d2d-3cbd-979f-1479140ccb6f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.243.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:05:3f:36:57:d1:3d:54:82:91:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=60267ea4-6173-4ee8-b0fe-fa02d2c09043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:b7:c8:73:8b:cc:0e:02:14:22:a6:bc:33:
                    f4:15:3d:db:0e:36:23:06:3b:a1:4f:89:15:f6:75:
                    30:bf:54:3f:7e:5f:fb:4b:40:78:4b:e7:ef:d4:3c:
                    a9:77:76:1a:f6:30:d3:8a:17:3c:0e:56:c5:9f:c8:
                    48:d9:9a:72:ef:0d:0b:65:cf:7a:4c:f1:ea:39:c2:
                    ef:7c:ad:a6:4a:9c:fd:a6:b6:41:b3:2b:90:27:d7:
                    39:91:fe:e7:53:14:69:4d:ee:37:aa:80:38:19:db:
                    eb:ce:a6:39:1d:54:3e:b6:85:4d:33:05:e2:3e:e9:
                    b6:8e:fd:33:6c:31:17:83:e0:ca:01:0a:b7:8e:55:
                    3d:f3:a4:c1:61:07:82:e6:90:4b:15:22:ca:17:48:
                    67:55:7c:be:34:ff:da:25:39:21:0f:9c:85:e4:e4:
                    ff:25:f1:2c:0a:95:97:c1:e1:21:16:77:07:1d:a5:
                    2e:79:ff:0d:48:0a:ed:31:8c:01:74:51:5c:21:c4:
                    9b:cc:59:b4:0b:7d:08:3c:8f:ab:93:9f:98:38:44:
                    26:b7:52:ab:1c:6f:08:e2:d5:0d:9f:7b:50:aa:52:
                    7f:16:cd:16:d8:e5:ed:1e:3f:33:29:c5:b7:7e:af:
                    5a:5d:cd:f4:ed:17:8e:7b:38:9b:2e:40:02:69:4c:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:13:51:47:7C:B6:21:70:3E:A1:DE:C1:68:9F:0C:08:47:17:11:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/765d0933-0d2d-3cbd-979f-1479140ccb6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:93:60:fe:f2:1c:d8:fd:fc:c3:f1:b7:88:74:a1:72:e0:bc:
         1a:1c:ef:d2:98:0b:47:ce:8c:53:20:18:f7:8b:67:61:84:a8:
         fd:d6:94:9a:8e:30:25:31:39:b6:e0:05:65:f6:06:8d:c8:2c:
         3b:7a:e2:03:f7:97:25:3d:da:2b:12:ca:c4:60:6e:37:b5:b0:
         10:b5:d1:d1:50:66:f2:1b:a0:a7:3d:ea:a6:68:68:4e:09:d6:
         88:4a:c6:67:30:a7:2a:14:3c:a2:e2:6d:7a:0d:37:c6:ee:b6:
         47:0a:68:05:83:36:6e:32:57:9a:56:3e:f3:0d:9a:21:ce:c4:
         2b:d7:60:c3:8f:f2:de:19:83:ab:29:ea:3f:9d:70:8c:23:77:
         8f:2e:9d:31:3a:d4:33:14:15:ce:18:a8:12:5a:c7:08:84:d9:
         22:87:f0:2f:fa:43:b4:14:a9:93:92:b8:01:e9:2e:1c:f7:e3:
         1c:5d:98:76:8b:04:5c:bb:22:8d:7a:ad:d6:9d:3c:12:0b:ed:
         59:bc:ed:d4:76:ee:c8:c5:cc:5a:a7:01:af:ba:11:c4:3d:a4:
         84:eb:40:ad:87:db:9a:c6:65:46:9a:13:64:65:5f:13:82:12:
         67:04:f6:ec:3f:de:18:e6:3a:e7:6f:c1:7c:92:79:26:90:28:
         ed:ff:f9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:14:28 2025 by rpki-client