Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e7f3a23-54e0-3354-a6fa-d50ef31dbedd.roa
File:                     1e7f3a23-54e0-3354-a6fa-d50ef31dbedd.roa (raw, json)
Hash identifier:          UNPEWXf6ph69OwKZaH3k3/maj9LbCBoyyJxL1reAmug=
Subject key identifier:   FF:D7:11:AB:25:C4:06:7C:AA:B7:60:BB:A0:98:E9:CA:59:0C:93:BF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E013C5974907BFD17BD900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e7f3a23-54e0-3354-a6fa-d50ef31dbedd.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:13:c5:97:49:07:bf:d1:7b:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=bc840b10-2480-40cd-8169-43efa9bd428d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c8:dd:04:97:57:c5:c8:e0:e5:0b:81:09:d3:
                    61:85:8d:b4:61:1a:b9:b6:80:63:00:a6:56:09:96:
                    fd:59:e5:b8:59:78:59:63:47:34:47:7b:62:6a:dc:
                    d0:08:2d:a5:81:b8:2c:ee:df:77:0b:0a:33:be:25:
                    6f:1f:22:d1:f1:60:ba:91:64:3b:df:12:43:ba:93:
                    d5:9d:91:d8:58:db:94:d8:95:ad:15:fd:39:ab:b6:
                    79:0f:a8:16:86:c0:6c:e4:92:7f:c2:c0:45:b9:2f:
                    c8:88:54:fe:37:8d:cc:8f:72:50:a9:a1:4a:4e:46:
                    69:2c:0d:3e:f3:a1:36:22:63:4b:bb:71:b5:70:83:
                    7e:81:ab:cc:dd:de:c1:4d:01:6f:3e:05:55:6c:ce:
                    ba:2a:7a:4e:bd:01:a6:96:d8:16:69:ee:ef:9f:85:
                    79:fe:5e:a7:18:3f:fe:d5:81:17:83:4d:10:05:98:
                    58:0c:4a:6f:55:22:d6:33:57:8b:c3:cc:5f:a4:f4:
                    37:89:42:ac:e3:1e:5e:df:14:c2:38:91:82:66:f2:
                    09:e9:10:e5:5d:15:0b:62:bb:09:05:8b:a6:77:d2:
                    b0:b7:41:07:2b:c5:de:c2:d6:ad:3d:4f:48:ac:88:
                    b0:45:5c:19:09:2e:bf:5b:62:e4:dc:2b:bd:19:1e:
                    14:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D7:11:AB:25:C4:06:7C:AA:B7:60:BB:A0:98:E9:CA:59:0C:93:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e7f3a23-54e0-3354-a6fa-d50ef31dbedd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c6:31:1c:19:97:a6:fe:9b:26:3f:0c:a7:54:e7:f1:16:66:
         48:4b:6d:be:50:73:b6:a0:54:7d:af:50:a0:e4:d6:57:61:75:
         5f:e9:0c:c6:a7:19:f5:a5:e3:b5:4f:e3:9f:4b:4f:cf:84:8d:
         c1:ae:c1:5e:1a:a0:f8:07:74:26:c3:86:ca:16:31:96:42:a3:
         73:06:4c:42:ac:db:cb:d8:c4:80:a0:65:b2:ab:10:b0:5b:cb:
         0c:16:47:96:83:ae:b0:3c:8d:ad:da:b3:78:5b:80:d4:bc:6d:
         3b:5a:75:57:73:10:8c:e7:01:5a:8a:fc:6c:24:fb:84:69:17:
         eb:59:3b:0f:cc:95:10:95:64:7f:9e:d7:2c:34:d4:43:7b:2a:
         22:83:cf:43:6e:9b:e7:28:97:6f:49:d1:d1:a7:fd:a7:49:f9:
         c7:ae:5a:7f:7d:26:3e:53:cd:36:fb:73:94:08:b4:b9:98:8b:
         af:67:ab:80:5a:ab:77:54:fb:49:88:4d:1e:ff:80:be:fe:dc:
         71:9b:f0:3b:09:60:4f:1a:31:80:32:46:f9:e7:da:0f:67:14:
         ac:2f:36:28:7d:12:05:c1:c5:a3:ad:09:07:8e:6d:2e:f3:ce:
         bf:e2:47:04:3c:4c:41:ea:b7:b4:8c:0f:30:80:5e:58:9d:ac:
         58:d6:53:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:20:35 2026 by rpki-client