Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9dedeb26-926d-381a-9625-07991ce44037.roa
File:                     9dedeb26-926d-381a-9625-07991ce44037.roa (raw, json)
Hash identifier:          6I8TQ8L3+yeuBZgeYbeJFlM0qtURVEeKcFUiK3lnHFA=
Subject key identifier:   AB:E4:44:9E:6D:3F:B3:67:EB:33:E5:39:86:69:6E:F5:32:69:33:98
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8411FE4D244012B1507692C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9dedeb26-926d-381a-9625-07991ce44037.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.242.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:fe:4d:24:40:12:b1:50:76:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=5fcee8c7-d4d4-4995-acdd-766d5bbec53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:78:26:c2:c3:fe:48:89:09:1d:8b:c3:56:c0:
                    25:c6:60:6c:be:2f:20:41:16:5a:87:ae:04:3d:b9:
                    d8:09:86:fb:31:df:29:d9:1d:be:23:0f:06:4f:9e:
                    83:68:16:a6:f1:0c:81:80:78:9e:5f:fe:0b:15:82:
                    c0:8c:63:bc:91:7e:ba:d6:4e:f9:2b:9a:19:07:1c:
                    11:07:56:36:77:46:e8:7f:55:1b:a1:02:9e:6f:f0:
                    75:23:c9:00:98:66:69:a6:ba:7e:6e:c8:23:4a:de:
                    ad:6a:f7:93:eb:c2:77:5f:06:87:fc:46:25:f1:16:
                    f6:ee:a2:84:84:03:11:dd:19:eb:77:7f:6f:36:ed:
                    85:3d:6c:0e:f1:19:27:63:03:85:94:e9:d2:76:de:
                    e3:3c:37:ed:bc:c6:ed:a1:d0:1a:d2:98:99:34:ed:
                    ba:0c:77:b2:4f:4c:c4:91:51:54:74:23:66:0d:0c:
                    c8:7a:75:2b:3c:a3:f5:3b:59:5c:cd:bd:be:17:7a:
                    d1:5d:64:8e:3e:47:07:98:2d:1a:aa:b8:20:d9:ec:
                    71:5c:2b:97:bb:bc:a8:da:d4:44:ae:c7:13:87:92:
                    3f:79:b7:68:4d:d5:6c:07:fd:53:70:a5:c0:c4:ca:
                    93:ec:a2:79:c3:01:a6:95:68:6f:5b:25:3e:a2:ab:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E4:44:9E:6D:3F:B3:67:EB:33:E5:39:86:69:6E:F5:32:69:33:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9dedeb26-926d-381a-9625-07991ce44037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:47:ce:94:76:42:81:d6:e1:12:e7:e1:73:85:ef:27:5a:
         5d:c1:01:89:e7:36:c5:fd:fc:75:88:d1:e1:21:00:9e:b4:4c:
         6f:ba:72:e7:53:14:5f:86:1a:d3:96:ec:23:b4:f6:da:99:65:
         c5:52:96:f0:c9:34:74:90:bc:4c:70:95:00:e0:e2:08:63:bf:
         22:d3:39:29:01:d8:d0:dd:d9:b4:8e:0d:10:a6:88:84:b1:10:
         00:79:52:59:c1:5a:e9:5b:79:17:ef:b7:6c:56:4a:2b:65:c5:
         e3:1c:80:f8:ea:51:a8:d3:b3:6e:1c:84:ea:fb:55:86:88:8c:
         8c:61:91:0e:77:69:74:55:55:db:03:7b:24:5f:b8:38:f0:71:
         23:bd:79:f4:c0:66:62:8b:18:30:3a:11:a4:d8:a5:33:1e:fc:
         5e:f4:a2:97:33:37:7e:c4:75:04:22:2b:f4:9a:19:ec:57:42:
         7f:03:e5:b3:0f:0c:b3:54:55:34:ea:b8:0f:c5:2e:ae:24:57:
         80:d6:e2:5c:fe:85:6d:ee:c6:36:9b:28:f7:48:20:e2:09:12:
         e7:f8:06:44:b6:01:d5:77:2b:1f:00:59:79:30:87:dc:05:35:
         d0:16:e5:f5:5d:a0:9d:33:e0:47:63:d0:70:03:8b:31:29:92:
         a2:81:2d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:16:19 2025 by rpki-client