Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a551c0ef-d03f-3226-958a-638e9189650f.roa
File:                     a551c0ef-d03f-3226-958a-638e9189650f.roa (raw, json)
Hash identifier:          QHawxwWxv6TtMBSwERdY7berN7tl7ldLsz/8kkeYdEY=
Subject key identifier:   A8:D1:B8:26:EC:3D:EF:A6:D2:49:F3:F0:2B:0C:0B:07:31:CD:99:C7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84116958B2FFD81D54938600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a551c0ef-d03f-3226-958a-638e9189650f.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        184.63.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:69:58:b2:ff:d8:1d:54:93:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=f69c6ed8-a82d-48d2-a8f7-05ff957bce3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:71:8b:8f:84:bf:e2:66:98:28:20:ea:a2:
                    f4:0e:66:89:a6:2b:7a:81:ef:b3:ab:71:4d:a6:32:
                    2a:d0:b2:c1:37:69:16:3d:a4:b5:5b:ab:2a:9f:39:
                    bf:eb:1a:7b:19:08:8c:de:be:71:35:51:66:b1:36:
                    8a:ed:09:4a:3d:d6:8a:84:47:8f:23:3e:fc:f1:48:
                    de:a8:6e:96:86:d9:8e:e8:66:7d:fe:3d:dd:f6:98:
                    3a:bc:5c:bc:49:4e:4a:bb:84:3c:b4:c0:76:bb:76:
                    dd:15:bb:3d:f4:7a:e4:8e:df:a9:00:bf:88:3c:24:
                    52:b9:b9:bc:29:01:51:c8:19:d3:d6:84:da:f1:5f:
                    64:96:55:2b:28:dd:20:a9:f1:c1:d2:b4:44:af:f3:
                    5e:54:6e:9d:e4:6f:ba:b2:c1:3c:c8:fd:d1:32:5b:
                    43:2e:f8:d8:b4:8f:7b:12:83:a4:a7:46:26:b6:c9:
                    ae:d9:e3:f8:e3:cf:a3:fa:70:11:8c:d0:8a:9b:6d:
                    90:52:a0:8b:31:e5:fb:1c:ca:fd:cb:54:ab:64:eb:
                    70:db:63:56:e8:e1:d2:19:8d:63:3d:61:e1:43:52:
                    47:bc:f7:b8:21:46:6d:b2:ed:20:93:72:dc:05:de:
                    a7:fd:d2:0c:b0:ac:55:6f:c2:23:6f:a2:15:c1:84:
                    7f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D1:B8:26:EC:3D:EF:A6:D2:49:F3:F0:2B:0C:0B:07:31:CD:99:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a551c0ef-d03f-3226-958a-638e9189650f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:26:0f:7a:a9:61:03:a2:26:cc:3c:a3:60:26:f2:be:bb:9e:
         4b:44:ef:eb:4f:c9:84:5a:2e:e9:42:b7:3a:e5:d3:ac:2c:13:
         c4:12:6e:4f:e3:d4:2c:b0:3e:4d:0e:eb:b3:11:71:48:ce:94:
         39:e9:10:7f:b1:b7:72:3c:e1:d1:48:27:77:9c:6d:70:47:f2:
         e9:cf:5e:78:42:13:bc:18:8c:b3:77:4a:87:9b:0d:c1:4e:e3:
         ac:d2:ed:2f:30:47:5b:38:23:33:cd:c0:8e:34:ea:cb:80:6a:
         71:60:d7:3e:72:07:60:d4:23:02:bf:a0:d0:4e:d2:ca:82:2a:
         63:7c:fa:2f:13:cf:43:9c:59:4e:1e:92:3e:66:80:97:ab:23:
         52:26:79:26:5a:03:25:f0:f8:09:10:e1:a1:64:11:49:33:59:
         c0:e5:50:3f:16:7f:a8:9f:b8:fc:9d:4b:70:c3:e7:0f:b6:34:
         b7:7c:dd:7e:bd:ec:6d:01:17:61:ac:8c:eb:1b:1b:dc:b1:e2:
         e0:05:86:9a:5f:5a:82:51:2e:21:5b:b4:43:7c:7f:1b:ef:ef:
         43:a1:58:e8:54:53:b4:f3:62:1a:fa:13:7b:66:01:8c:01:fd:
         60:96:cb:21:a2:b1:45:93:f4:67:f1:a8:7a:21:6b:75:83:a1:
         e4:e8:ee:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:40:14 2025 by rpki-client