Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72ca9e24-f801-3cc0-8457-a5f51798585f.roa
File:                     72ca9e24-f801-3cc0-8457-a5f51798585f.roa (raw, json)
Hash identifier:          eZVnrf5k5ncbUCZInAE38vbM0YJD43HHlvBR6sLOsj4=
Subject key identifier:   E1:44:19:C1:10:DA:EE:67:3C:6C:5C:6E:F3:DE:9A:1A:70:3B:EB:65
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E6F667C01FBF92EA2AA80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72ca9e24-f801-3cc0-8457-a5f51798585f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.63.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:6f:66:7c:01:fb:f9:2e:a2:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f73d68fd-c659-4ca8-89f8-218f44ce9c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:75:10:9f:0a:8b:34:10:63:4a:62:84:3a:
                    5d:5a:fb:53:8f:d6:9b:38:f7:97:6d:c3:b3:ec:f5:
                    a3:84:90:a2:8a:87:d8:dd:0b:8a:72:6b:a1:89:c7:
                    03:d3:7a:e1:62:a5:2c:8d:e1:1c:8e:9d:30:17:e5:
                    62:a5:a7:6e:c6:a1:5f:44:24:d5:0a:66:11:78:88:
                    25:05:0e:8f:6c:ba:b5:b5:0c:8e:65:61:28:f9:67:
                    15:fa:54:b0:36:22:58:43:a6:9e:7e:b8:c1:89:df:
                    1e:dd:41:98:ec:97:36:40:73:52:35:1a:c4:84:50:
                    e4:3a:a3:37:88:46:b0:9a:14:5a:2e:76:7a:f2:f5:
                    3c:e5:d1:40:03:5b:d2:de:c1:f0:93:24:78:3b:9a:
                    27:1c:9a:e4:7a:50:b1:97:ce:06:fa:19:5e:50:5d:
                    4b:44:d3:2e:00:20:35:8e:84:05:39:0e:56:e6:ff:
                    6e:3e:89:82:65:32:56:6a:21:37:54:13:58:1c:97:
                    f9:4f:24:bf:8d:58:74:8d:eb:76:3e:90:db:e8:4e:
                    95:6c:11:86:ac:2e:16:c8:35:95:80:42:b4:ed:98:
                    38:32:ff:63:3f:7d:bc:96:19:f4:a7:65:2a:b1:e8:
                    6e:8c:0e:8f:64:24:71:8e:20:d8:5d:14:c9:f8:a7:
                    a2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:44:19:C1:10:DA:EE:67:3C:6C:5C:6E:F3:DE:9A:1A:70:3B:EB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72ca9e24-f801-3cc0-8457-a5f51798585f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:3a:1f:1c:cc:e1:d5:bb:be:b5:54:b8:3e:8b:5e:70:74:5d:
         e9:77:c2:1f:8a:58:b8:a1:94:5a:5b:65:b6:81:01:61:28:51:
         65:dc:47:f4:f6:f8:37:17:90:db:f4:b6:ce:5f:f9:f4:09:4f:
         ad:31:a9:be:fe:23:c5:b7:a5:d9:3b:06:a9:22:63:96:7a:bc:
         7b:7d:aa:e8:da:75:16:5a:ee:72:9d:49:68:dd:02:dc:36:0d:
         5b:84:f3:fb:78:96:a3:3d:bb:c0:44:11:73:63:f4:64:aa:76:
         65:44:f5:48:00:ad:48:7d:a7:1e:1a:82:ef:c4:84:f6:30:37:
         4f:1b:28:0a:c6:69:ef:8c:fb:65:74:79:95:00:18:4c:ed:95:
         52:12:fd:35:5b:bf:a6:24:e1:5d:55:b0:41:eb:01:eb:ac:4a:
         94:27:a7:c8:41:0e:48:ab:d7:4c:97:7a:fd:c5:e5:6e:1a:ce:
         3d:c5:97:46:73:c6:9c:f0:94:3f:24:7f:43:66:45:97:61:9e:
         61:47:0d:d9:e0:bb:34:06:77:f5:49:92:33:de:13:b9:7e:07:
         d0:17:38:4b:fc:cd:95:1d:51:aa:d2:ae:3c:a6:eb:3f:73:ec:
         bd:fb:ae:02:e1:1b:a3:ab:a5:03:25:57:71:85:5a:bd:27:1f:
         ff:41:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:18:39 2026 by rpki-client