Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c36cfe7-c4b9-3983-abad-113fbe2831cd.roa
File:                     7c36cfe7-c4b9-3983-abad-113fbe2831cd.roa (raw, json)
Hash identifier:          f7S0AZ7yRxg41mregRqqK/9hPxS3NAWR9qx+uQAYLT0=
Subject key identifier:   06:AE:9D:E6:37:72:54:A4:E0:03:DF:BC:8E:D8:7E:7A:79:18:85:3B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841168D82EF6FE038C182E40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c36cfe7-c4b9-3983-abad-113fbe2831cd.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.63.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:68:d8:2e:f6:fe:03:8c:18:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=374d54b3-3ae1-4bda-97ef-0c7663d4958c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bf:ca:b1:9b:14:5d:d8:72:21:7e:51:1f:0a:
                    63:9f:62:a7:a4:5f:4f:2e:83:c5:c6:9a:93:29:24:
                    71:2e:33:66:f8:1c:b9:0e:5c:37:ec:69:a6:fa:7d:
                    ab:8a:59:68:98:72:56:1a:ff:75:6c:ef:1a:10:b3:
                    d1:b7:60:5d:4f:87:ef:ea:e0:36:c2:23:90:d6:bd:
                    c5:c3:79:48:30:99:e8:b7:d5:85:62:c1:aa:f9:98:
                    52:7c:a1:cd:60:18:26:f3:74:3d:de:d1:b8:f8:0c:
                    5d:9a:ed:90:86:9f:fb:da:e8:8b:e8:05:62:fa:b1:
                    04:2b:a9:98:b7:8c:60:fd:eb:e3:0c:a5:e6:d1:b5:
                    46:c2:af:f9:5c:0a:49:2d:1f:35:cb:e2:17:10:61:
                    46:db:08:2b:26:3a:ae:3c:fa:cc:c7:2d:c2:f5:f9:
                    6b:3f:f0:d7:69:34:62:83:88:aa:c9:9a:6e:3f:3b:
                    60:94:80:5a:0d:58:1e:c0:74:40:43:e2:19:05:f5:
                    ea:40:7d:8f:7d:d0:a7:6f:4a:6d:e0:45:a2:e5:5f:
                    8d:0b:c9:c2:41:97:32:c9:3a:90:07:f9:80:80:82:
                    86:39:03:76:b6:fb:02:14:24:6d:16:a3:69:f2:97:
                    82:7a:32:c3:28:7a:43:f2:94:8d:71:8a:af:94:ab:
                    89:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AE:9D:E6:37:72:54:A4:E0:03:DF:BC:8E:D8:7E:7A:79:18:85:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c36cfe7-c4b9-3983-abad-113fbe2831cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:31:6a:51:b3:88:dc:b5:92:4b:7e:b8:89:66:28:9d:0b:8d:
         b9:57:ee:47:29:60:f6:a1:dc:25:3e:73:05:58:f7:5c:8d:76:
         05:a0:a6:85:39:e4:95:ed:72:ca:cb:1a:9c:21:53:cf:7d:d8:
         ae:18:78:f5:5e:77:43:f5:04:47:bd:f1:6c:50:35:d4:a4:46:
         ef:3a:4c:71:ee:00:d0:d8:45:09:db:36:fa:ae:09:af:1c:1a:
         14:ee:d9:19:27:dc:6d:51:56:dc:33:81:f0:1f:0f:66:5a:78:
         8c:50:d7:11:12:c0:e1:5c:a3:db:ec:88:e3:75:0e:27:dc:ed:
         88:51:7e:c9:01:fb:fe:f3:75:eb:18:6d:0a:19:03:a0:53:f4:
         c8:fb:bd:7b:0f:d9:9e:ea:da:d0:aa:35:e9:80:39:54:3a:07:
         6c:ed:c5:36:2f:b5:7f:aa:57:63:a2:9e:c4:09:04:97:dd:3a:
         91:6a:35:52:f5:04:6d:63:db:45:0b:eb:03:19:72:00:af:51:
         8d:d6:ae:98:31:60:fd:ce:03:21:d6:24:2a:3e:1a:75:5a:30:
         ba:2c:97:0c:7c:4f:aa:41:f6:fe:10:1c:51:62:6d:c2:b1:17:
         3f:83:63:4f:cd:b5:bd:9c:c8:41:10:96:3c:7b:7a:d4:82:03:
         5f:30:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:36 2025 by rpki-client