Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09a7982b-1226-3652-a842-4fc534a45d47.roa
File:                     09a7982b-1226-3652-a842-4fc534a45d47.roa (raw, json)
Hash identifier:          a2v/Xc2YGuGhnWz/NXVxddT+ccrNL+ZqceYjzxjNCrg=
Subject key identifier:   F4:3B:EE:B0:BA:4F:A9:BF:12:51:25:34:52:93:82:B1:FC:3C:0C:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAAA418406737A0F91AC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09a7982b-1226-3652-a842-4fc534a45d47.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        184.62.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:aa:41:84:06:73:7a:0f:91:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a0fd526f-95c3-4b38-ae03-43e619a3ed77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:3a:f2:6a:2d:61:be:21:cc:07:53:ed:bf:
                    0a:79:83:66:d6:c8:95:25:ff:2d:1b:b8:44:4e:9a:
                    b4:ae:d2:aa:aa:a8:d4:db:6f:1a:b9:95:4a:63:4d:
                    2d:71:84:41:f7:ea:72:de:0f:e6:6d:17:5f:ee:29:
                    19:95:96:15:f8:bd:b1:0f:a7:30:5b:4c:83:ab:3e:
                    17:7a:5a:f5:c0:e6:a0:07:5c:9b:1c:ed:62:8d:90:
                    8a:1d:9c:b7:a0:1a:d7:e4:e8:fc:2a:f0:94:54:16:
                    6e:57:91:33:6a:9c:2e:53:40:24:04:c1:80:5e:52:
                    74:0a:cf:e8:73:7d:cb:02:cc:97:5a:19:7b:f5:1f:
                    00:8d:42:47:67:f2:61:66:84:26:bf:d9:bb:52:2e:
                    93:96:dd:e7:b7:50:da:45:40:ad:64:aa:dc:82:d5:
                    72:23:bb:d9:f2:b4:19:6e:58:8c:bd:00:5c:65:e6:
                    55:da:f5:13:17:08:c0:96:05:fc:33:4c:71:56:82:
                    58:e1:0d:70:9d:37:5a:17:5c:24:bf:df:01:04:a6:
                    b8:2f:27:3b:53:04:ef:e7:b7:fe:db:ae:e4:77:f7:
                    2f:31:d1:b3:a3:2e:40:3c:b0:94:bb:22:25:9b:20:
                    56:54:a5:10:a6:1b:57:52:e5:c9:e8:f1:1b:a6:64:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3B:EE:B0:BA:4F:A9:BF:12:51:25:34:52:93:82:B1:FC:3C:0C:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/09a7982b-1226-3652-a842-4fc534a45d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:12:ea:c0:02:a5:59:d4:e7:0f:01:37:40:09:04:88:14:f7:
         3a:f1:57:31:70:c7:47:6c:65:82:e4:01:1a:a1:07:f7:7e:da:
         2c:1c:49:50:b7:3f:6d:6b:70:2a:38:f2:1c:65:3a:80:cb:89:
         f9:eb:3d:50:6c:22:94:f8:30:6d:6e:fb:c7:10:55:7d:c7:c1:
         d5:3e:cb:47:72:83:e0:15:56:fb:7c:d4:d7:69:d9:63:81:38:
         d6:d1:4f:74:5f:4b:b9:80:f5:16:3b:f1:33:6b:99:1b:03:fb:
         b3:58:7c:82:80:df:8b:3b:7c:07:f2:db:c1:48:66:a3:82:3e:
         9c:90:48:8e:20:c7:11:f4:92:b7:07:db:ff:49:c9:52:69:d5:
         d0:8f:f9:28:87:c3:1e:26:d0:80:62:66:b6:85:1e:0f:ed:5b:
         5d:27:42:fa:eb:a3:ad:4e:b8:11:4f:da:2b:e5:7d:7c:f1:ad:
         76:0d:ce:8b:be:16:59:c2:0d:b4:15:fe:0b:55:63:84:d0:a2:
         f7:2c:49:7c:59:4b:4f:ab:84:15:af:39:e8:53:ee:da:e5:14:
         70:52:a7:fe:82:6b:8a:d1:c5:c7:28:3f:8b:7d:5c:ce:b1:4d:
         55:7a:bb:00:4d:af:b6:0d:d7:41:76:76:92:b4:f3:73:28:6d:
         af:a2:90:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:44:40 2025 by rpki-client