Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80fc5027-db69-3525-b1c7-b3a9d0a252a5.roa
File:                     80fc5027-db69-3525-b1c7-b3a9d0a252a5.roa (raw, json)
Hash identifier:          vYZbxw1AQR6d6aGL2ejQueF7nZCGJ4br6T5uJ54p9go=
Subject key identifier:   6F:1E:5A:99:85:27:EE:88:74:51:28:99:BF:D7:D1:56:B6:04:05:7C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411FDA7499EBEEC986EEC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80fc5027-db69-3525-b1c7-b3a9d0a252a5.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.242.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:fd:a7:49:9e:be:ec:98:6e:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a6e00852-dc21-4f87-a7a5-28adcc270d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f1:d1:b6:da:b7:ef:13:0b:6e:8f:21:a5:89:
                    b2:a0:e8:ad:94:1b:8b:ba:e0:2c:1a:6c:ef:07:fe:
                    0f:7a:30:45:dd:4c:45:68:7f:59:25:1f:68:34:92:
                    9c:fd:ae:db:1d:6b:ff:56:d2:8c:d3:32:ff:27:94:
                    53:82:58:b8:04:3b:a8:2a:9c:bc:b0:48:1f:23:49:
                    42:16:ba:59:ee:ee:c1:b6:56:46:36:b2:ff:f4:64:
                    f2:9d:fb:b1:52:08:9e:8a:7a:5b:f5:82:f2:bb:ab:
                    61:97:50:77:bd:9f:4a:53:71:b4:c8:4a:1a:07:a4:
                    f0:99:0e:24:17:d3:76:a6:29:98:0a:d0:76:f4:9b:
                    e2:f4:b6:ac:0c:ae:8b:c1:fe:0c:10:70:fd:23:b2:
                    13:cf:48:45:90:5a:3f:65:c4:f0:9c:6f:fd:58:f6:
                    4b:55:95:70:67:74:96:1c:09:ef:23:56:58:24:69:
                    4d:bb:b0:e9:5a:4e:53:3a:3a:9d:1b:27:de:5c:8b:
                    49:8f:98:7b:30:b5:d0:0a:ae:02:e9:0f:6c:90:d9:
                    ba:2f:fe:26:ce:9f:e4:df:a4:9c:16:92:9c:5b:4f:
                    db:fa:a9:c3:48:23:d0:4f:9d:dd:86:4b:0c:08:48:
                    fa:a9:e3:6a:c0:90:ec:ba:56:d0:92:9d:9b:76:fb:
                    78:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1E:5A:99:85:27:EE:88:74:51:28:99:BF:D7:D1:56:B6:04:05:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/80fc5027-db69-3525-b1c7-b3a9d0a252a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ac:9a:18:dd:8b:3f:b7:f6:cc:b2:75:44:96:ba:f6:78:3b:
         fa:a5:ca:5e:2b:8f:96:0c:df:97:3f:2a:76:46:00:08:3b:26:
         d5:b6:da:85:9d:22:13:c5:dd:4e:e4:e8:a5:9b:cd:7e:36:51:
         7b:70:3a:ab:a0:ee:17:1b:f4:1b:68:eb:b6:04:43:82:0b:5b:
         51:a1:80:e7:b2:ea:cc:60:a9:e5:68:87:f7:85:09:89:52:22:
         24:93:16:09:a6:82:af:61:7f:61:e2:c6:93:1d:13:f6:82:ce:
         6e:0c:ec:9c:56:5f:24:3a:90:75:70:8e:8a:c9:96:24:f8:66:
         44:49:b9:09:78:4d:6c:48:51:6c:c8:30:cf:5f:a5:cf:bc:d4:
         35:36:bf:9e:bf:d0:ac:bf:49:6f:1f:3c:34:f8:0c:54:59:84:
         96:f5:70:d1:23:12:2e:11:d1:d2:7e:67:2e:db:d4:be:87:21:
         16:21:5d:6c:cb:53:1a:bd:79:53:af:fd:19:c8:55:d9:e2:2f:
         70:f4:d2:05:80:16:83:ac:62:77:c9:c9:e3:da:89:3f:6f:13:
         15:6f:a6:34:30:17:1b:b4:62:9e:3a:8b:ab:10:73:13:d3:de:
         6c:ab:a1:52:6f:ed:9a:18:9c:35:14:77:a8:b2:ad:de:fc:dd:
         fe:6c:ef:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:11:08 2025 by rpki-client