Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e140f18-5a9b-32cd-a9ce-bdb7c7f4a4c2.roa
File:                     0e140f18-5a9b-32cd-a9ce-bdb7c7f4a4c2.roa (raw, json)
Hash identifier:          dF2u3LskQ1CvBCk9Vg+DzAH8mc9KdCPl6Kfxvs0hIuw=
Subject key identifier:   4A:C7:86:2F:CB:07:B0:67:E9:42:9F:05:01:28:70:CE:A7:C3:A4:B4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0119E4283BD363000BA80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e140f18-5a9b-32cd-a9ce-bdb7c7f4a4c2.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:11:9e:42:83:bd:36:30:00:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=5922ee98-0afa-45d2-88a9-f486daa1f2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:54:07:96:6c:63:e1:86:8a:33:ef:8f:75:72:
                    d2:b2:13:a6:f0:9a:93:e1:eb:cb:99:75:39:bf:a9:
                    ea:d6:4c:32:1b:4d:ae:ce:7d:0e:f1:72:92:ba:ea:
                    36:33:b8:10:f7:cc:ed:08:b2:9a:aa:f6:91:4c:f3:
                    9c:7e:16:f8:37:58:f3:ca:c6:b9:24:12:c8:1f:38:
                    2f:56:9c:50:12:e0:91:da:56:5b:6b:ef:9c:ea:c5:
                    41:e0:58:a1:fa:04:f4:99:cd:44:ab:91:2c:0f:62:
                    ab:6e:0f:91:b2:da:23:11:eb:b8:e3:b3:1e:3f:1c:
                    8a:bf:04:68:18:8e:7a:7f:39:1d:80:61:2d:6c:2b:
                    10:02:15:14:71:73:07:d6:7e:39:c3:32:9c:ff:ff:
                    c2:64:d9:1e:fe:c0:9c:6a:9d:12:82:d4:87:22:4a:
                    03:b1:d6:32:b0:02:60:32:d2:34:95:c2:4d:9f:00:
                    4c:db:60:80:60:f8:82:fd:f9:80:e5:2a:87:6a:b7:
                    ff:49:5b:fd:20:36:0f:ea:6a:96:f6:24:d7:c1:40:
                    36:95:e1:a3:3e:b7:98:cd:c8:84:12:43:04:57:b0:
                    42:e5:94:fe:9b:d8:fc:2f:d1:b4:0c:a6:42:a1:18:
                    eb:54:9e:92:cd:16:2e:a1:8f:dc:59:98:0e:71:a4:
                    34:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C7:86:2F:CB:07:B0:67:E9:42:9F:05:01:28:70:CE:A7:C3:A4:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e140f18-5a9b-32cd-a9ce-bdb7c7f4a4c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3a:df:e3:71:ae:49:af:1e:1d:f8:59:8b:e7:75:7e:34:3b:
         bb:6d:2b:06:41:73:b0:c0:ee:ff:a9:aa:05:f4:4a:35:2d:bc:
         ad:fc:40:63:87:2c:0c:6f:ef:57:e6:5f:ef:6c:2d:01:55:82:
         d3:9e:43:e2:c7:34:ef:1e:d5:34:97:74:45:35:39:18:5d:85:
         de:a0:53:de:9a:d8:e2:8c:f3:fa:66:25:b7:7f:a9:21:ce:d5:
         04:7c:c1:71:2a:e1:80:6f:d4:9c:86:c7:8b:d8:2a:62:ae:6e:
         7d:5e:ac:b2:24:ac:d3:20:e5:84:53:cc:76:53:d3:c0:7e:9b:
         60:4a:60:1e:f2:4b:b4:41:2b:d8:ee:f9:41:99:40:32:2f:90:
         8e:38:83:2d:4a:21:1b:75:fd:2c:4e:05:6e:58:aa:ff:d6:0f:
         1a:90:a4:b0:87:97:43:d6:17:3d:26:a9:66:0f:be:15:7d:bf:
         c7:4d:c1:bf:23:5b:53:4b:70:73:a5:6c:b2:e1:bb:07:22:a6:
         1d:55:bd:08:3f:66:4c:5b:8b:cb:94:66:91:a6:53:69:f6:ea:
         7a:87:fa:f1:41:c3:80:ad:50:4d:b3:2d:9f:ec:af:66:c6:3f:
         4b:4c:37:fa:c8:82:c2:b9:aa:78:a5:88:3a:2c:cc:4c:d3:21:
         2c:17:cf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:35:34 2026 by rpki-client