Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc931694-90b2-3f7b-a8ad-f9320a37db10.roa
File:                     bc931694-90b2-3f7b-a8ad-f9320a37db10.roa (raw, json)
Hash identifier:          nMi8YgKA1P3yAgwsu1wPhpswaEab3yC2NyHkMin2WM8=
Subject key identifier:   CD:17:28:60:B6:0F:94:E7:AD:84:E4:35:97:7D:A4:A7:8F:11:B1:DE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A841142EC395135D87BBE8290
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc931694-90b2-3f7b-a8ad-f9320a37db10.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        172.242.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:42:ec:39:51:35:d8:7b:be:82:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=e7ec2ceb-f5fb-4ba2-917c-ee61d6be1440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:81:2c:02:e7:ca:bf:38:ad:1c:f0:55:21:
                    21:6a:1d:af:29:e0:63:db:6a:a8:b9:ff:73:69:80:
                    d9:85:fb:bd:c5:e7:48:db:28:67:51:da:1b:eb:f8:
                    d5:68:2b:49:69:46:81:ea:75:09:68:56:bb:00:85:
                    02:9d:ee:8c:3e:41:fd:e9:5b:56:22:e4:2d:cc:b4:
                    13:78:00:1d:a1:40:89:2f:86:51:7c:c3:e0:19:a6:
                    cd:47:d0:5f:51:e7:dc:9e:8a:e1:5f:b5:34:fb:5d:
                    bb:a8:7d:5b:ff:11:aa:15:86:bc:13:37:d9:12:a0:
                    20:a2:07:33:31:e0:58:81:ba:82:0c:8d:0d:ee:9c:
                    e0:bb:93:b3:05:eb:b6:9d:44:58:55:23:c9:e6:b0:
                    e7:31:19:df:45:ed:92:7f:b8:c5:95:76:b6:a9:07:
                    d6:36:b2:b4:81:1c:61:be:65:08:7c:2e:fc:6d:32:
                    94:d8:60:9a:b1:62:94:89:5a:7e:4c:22:26:92:26:
                    36:a6:f7:80:1b:0d:52:54:15:3b:f5:45:61:00:60:
                    c1:3e:d9:9b:3a:44:e6:48:ae:9c:7d:d2:e2:ff:82:
                    d9:e0:8d:98:a6:01:d3:19:93:89:a5:e0:49:86:6f:
                    43:a7:6a:78:11:6e:f2:a6:23:6e:af:02:87:81:f2:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:17:28:60:B6:0F:94:E7:AD:84:E4:35:97:7D:A4:A7:8F:11:B1:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc931694-90b2-3f7b-a8ad-f9320a37db10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:be:7b:a9:34:8b:c7:f7:bc:a6:fc:ca:71:6f:4f:49:22:30:
         8f:86:6f:48:02:90:58:67:a7:9d:5d:90:49:64:19:ea:b0:e2:
         9a:40:4f:be:a4:e8:7a:c8:46:48:a6:7e:9f:a3:57:a8:2f:90:
         48:7b:08:3c:93:5a:ed:40:d6:a7:92:ad:4f:31:a8:28:00:e3:
         7d:96:64:df:02:fd:62:df:09:4e:d8:f5:dc:93:f4:ec:0e:5a:
         70:cd:7f:ca:a9:7f:f5:cd:94:bc:cb:0c:3a:2e:b6:11:40:d3:
         ab:bd:b3:d4:a3:ca:8a:d5:5e:06:28:d8:f8:c2:49:a7:c9:79:
         21:0b:78:27:ab:f2:bd:ef:64:ad:ff:ec:01:3b:16:ee:1b:40:
         4b:e3:8e:5e:91:07:ba:76:16:2f:e5:85:9f:e6:19:48:ea:76:
         ea:f4:96:b3:9a:16:11:41:bb:2d:02:17:33:1c:65:d4:3c:ea:
         90:cd:90:ef:12:fa:7e:c0:5a:56:03:3b:8a:e3:63:e6:19:95:
         b6:e3:6a:60:8c:27:58:14:3a:21:9e:67:37:9d:33:68:b0:22:
         bb:b0:01:45:54:3c:e7:d0:78:79:7f:ee:2c:05:29:6e:38:55:
         95:27:8b:46:8c:6f:6f:cd:b5:90:14:59:4b:27:85:30:85:d7:
         ee:30:3e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:09:19 2025 by rpki-client