Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/808b4569-30df-38ab-b1f3-078d1385dc99.roa
File:                     808b4569-30df-38ab-b1f3-078d1385dc99.roa (raw, json)
Hash identifier:          mHXbRg2O7q7sP0IdaQU03vcCqicmX43y0QRf9JQO6PM=
Subject key identifier:   1E:73:7A:FB:B5:E1:10:71:B1:F8:1A:D8:B3:97:DE:9D:11:17:BD:E3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411FC44B96264693F26D040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/808b4569-30df-38ab-b1f3-078d1385dc99.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.242.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:fc:44:b9:62:64:69:3f:26:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=c9a5303a-e953-4338-8d3b-1c6c6c605162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4e:40:0a:41:58:ed:58:49:5a:af:e0:ff:24:
                    ca:a5:46:97:82:f6:e8:54:5a:a9:bb:66:c7:a7:ff:
                    c4:4c:c4:77:58:62:f7:e1:e3:21:8a:59:7d:0f:a3:
                    02:79:32:0c:d5:d6:eb:63:de:e0:36:14:91:4f:fd:
                    7c:fa:65:35:1e:7e:ba:87:50:2c:2e:e0:3f:00:d4:
                    0b:5a:88:d5:22:68:b8:48:d4:0c:24:c5:b7:f6:e0:
                    f8:c2:91:f9:b1:7c:68:51:99:82:1e:51:35:16:5c:
                    31:85:87:3d:4f:c9:d6:e3:a6:c3:83:19:f3:55:95:
                    e3:91:70:8d:16:4e:2b:c9:9a:68:72:a6:22:2a:0d:
                    98:2b:06:3a:9c:1e:44:ea:78:fb:20:4d:f3:ff:63:
                    54:a0:77:d8:69:65:ad:1e:4f:95:4f:0e:cd:65:c4:
                    1a:f9:04:91:e1:08:dc:18:03:39:e6:26:a4:bd:4d:
                    aa:f2:d4:a9:ab:01:d8:25:98:2f:19:dd:e7:77:31:
                    9a:a2:b0:28:ff:21:33:0f:3b:d6:e7:4d:2b:9e:27:
                    ec:9a:38:1b:72:fb:2e:c3:0f:07:ca:ab:42:46:cd:
                    02:e5:87:b6:9f:68:33:80:ce:50:5a:93:de:5f:87:
                    e7:7f:42:35:e3:34:01:45:bd:00:c9:d5:7a:95:3c:
                    64:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:73:7A:FB:B5:E1:10:71:B1:F8:1A:D8:B3:97:DE:9D:11:17:BD:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/808b4569-30df-38ab-b1f3-078d1385dc99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:13:30:6a:a3:82:21:43:28:40:0e:cc:3b:ea:14:b7:a8:6c:
         d9:6d:1a:f0:c3:be:18:df:08:34:6d:62:72:34:db:1e:1b:c1:
         d3:87:e2:72:8d:12:32:f4:b0:61:0e:28:07:dd:1d:ce:45:34:
         0b:c9:59:4f:5c:6a:1c:ee:d4:ca:b6:18:e0:c0:1c:2f:db:58:
         13:68:0b:95:a2:99:12:1e:a2:50:fb:94:ef:8a:2f:20:5d:b0:
         0f:f0:35:c7:4b:fe:53:05:fb:29:bc:de:13:61:a4:1d:46:15:
         fa:c2:ca:43:77:0d:b7:95:65:d7:c9:00:b3:46:b9:19:df:6b:
         0a:08:c4:65:1c:44:c3:37:30:a8:d1:96:31:6d:76:16:3f:5e:
         e8:24:2c:83:56:38:18:93:10:e2:a7:fa:71:ea:f8:14:d6:04:
         4b:83:53:15:11:87:83:f1:d4:f3:72:e4:2b:f2:49:d3:e3:8d:
         c7:c2:29:f4:7f:f2:40:26:3b:6b:7e:36:48:fc:13:d7:aa:a6:
         fc:cd:4b:eb:8a:ff:14:79:82:fb:c4:ea:b5:0d:75:7c:bb:f8:
         2a:eb:c4:31:5e:90:ba:51:ec:9d:45:1a:59:4d:45:a6:29:66:
         4e:65:5b:8e:be:17:96:13:5c:ae:54:69:35:73:9c:fa:5d:5d:
         74:7e:64:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:12:00 2025 by rpki-client