Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c2adb7d-e729-34db-9464-0e3864ecde5c.roa
File:                     8c2adb7d-e729-34db-9464-0e3864ecde5c.roa (raw, json)
Hash identifier:          zE/X1+/GPxAcfw0t4Zo5Pg16wNpqirV4j0I09Jmq3h4=
Subject key identifier:   B6:61:B2:29:68:60:D5:1D:3F:2E:BF:03:05:65:EC:34:6E:A9:E5:D3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8410FADEB846964F232FAC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c2adb7d-e729-34db-9464-0e3864ecde5c.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     40306
IP address blocks:        184.20.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:fa:de:b8:46:96:4f:23:2f:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=f3e8a81b-c811-4686-b153-de497ad39f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6d:e5:28:55:1e:af:37:29:7a:ab:14:01:86:
                    75:66:50:6c:db:71:2d:d9:0e:be:39:dd:b4:f4:92:
                    b3:b9:b0:1b:f9:ec:79:2f:f8:b1:83:6e:6a:84:57:
                    3b:4b:52:8b:cc:18:86:09:e6:ed:96:75:d8:9e:54:
                    50:a2:5d:d5:62:86:a3:1c:3b:4b:44:f2:47:27:62:
                    72:50:39:78:dd:18:19:78:0a:f0:3a:6b:58:a5:f1:
                    81:46:0f:c3:64:2a:62:fd:1b:2f:a9:b6:93:1c:74:
                    6d:c7:c6:d5:15:2c:66:c0:e7:ab:50:df:59:c3:77:
                    27:c7:83:20:93:9c:85:f6:99:61:65:fc:cd:e2:d9:
                    18:80:8f:bd:ff:a9:94:8f:a6:c4:3c:12:a7:aa:b6:
                    2f:e9:97:40:aa:51:46:c6:f5:75:00:bc:ee:eb:06:
                    ed:7a:94:fe:dd:a2:e2:70:bb:63:00:3f:5f:95:42:
                    15:98:8c:66:cd:36:04:5e:29:c0:b5:f2:23:14:6e:
                    96:a0:41:c8:73:3b:cd:4c:fc:4a:3a:5b:a9:2e:0c:
                    e2:34:95:39:bf:b7:27:bb:35:53:38:c9:bf:d9:27:
                    cc:9e:7d:d3:49:09:d0:46:71:ff:04:ce:dc:38:56:
                    55:44:d9:bb:95:b0:40:46:85:f4:d2:84:94:2f:ff:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:61:B2:29:68:60:D5:1D:3F:2E:BF:03:05:65:EC:34:6E:A9:E5:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8c2adb7d-e729-34db-9464-0e3864ecde5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:e5:4f:45:4f:3e:bf:79:12:e4:87:42:8d:28:22:92:de:69:
         5f:f0:2c:38:2d:83:cc:c6:15:f8:0f:2b:da:97:03:94:88:de:
         e5:16:55:3f:05:69:eb:e9:aa:48:30:4b:b6:a6:1a:34:d2:90:
         8f:61:3e:70:4c:e8:29:e4:86:45:46:11:61:be:4e:1a:87:c7:
         51:a1:ec:a7:e7:2e:fe:8d:bb:9b:4f:f7:28:1e:0e:bd:d1:bc:
         bb:5b:7d:46:1d:2e:1d:53:59:0c:d7:4e:60:91:e6:57:72:a1:
         b9:71:57:e4:cc:12:23:ae:35:77:05:09:69:a1:f8:9b:03:49:
         f7:95:5d:3f:71:82:31:ff:2d:57:79:4d:01:69:67:6d:06:d8:
         78:4b:ab:45:94:fd:1e:4f:d3:98:ae:b4:e3:01:97:79:dc:d7:
         4b:d9:b4:b1:53:17:1f:ab:e3:67:eb:80:32:f5:4c:fd:78:2c:
         da:3f:35:ad:3b:dc:7e:29:f1:aa:24:fc:71:ba:44:fc:8d:aa:
         df:55:4b:2c:73:e0:37:25:f0:c9:c2:9e:e2:99:72:73:20:48:
         08:5c:35:62:b1:b6:3c:c3:bb:25:8b:95:bc:4f:67:ed:dc:18:
         55:c1:08:9b:4c:58:34:93:a2:68:69:97:e7:87:a2:16:0f:d4:
         c5:64:09:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:48:56 2025 by rpki-client