Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33b2edf3-d232-34b2-9eb0-5ec1cfb6058c.roa
File:                     33b2edf3-d232-34b2-9eb0-5ec1cfb6058c.roa (raw, json)
Hash identifier:          zYlFa2ZcU5pSzzywhQl+wwCh8iHRAYoJHdka8fAj278=
Subject key identifier:   85:B9:D1:32:EB:25:AE:D9:58:C3:69:0B:10:05:D9:E1:20:29:E4:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0221854ACEF324B7D9A20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33b2edf3-d232-34b2-9eb0-5ec1cfb6058c.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.63.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:22:18:54:ac:ef:32:4b:7d:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=54a2840e-7ab0-4121-9072-7e5087efb90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fb:f9:e7:44:76:98:21:ed:4e:fb:32:a7:a2:
                    4a:48:8a:51:d6:97:64:dd:2d:27:8b:73:d5:31:37:
                    16:75:9c:ec:ea:9b:5c:fd:d2:c6:1f:f0:2d:50:aa:
                    b4:35:03:ca:45:98:b4:8c:ff:f9:78:ea:15:42:ec:
                    8c:8c:a4:bc:29:6e:63:5e:e0:ac:a2:08:40:ed:29:
                    7c:8f:10:29:2c:4d:86:bf:a5:3a:a4:ce:87:b9:b6:
                    3f:92:0d:a8:33:cf:10:d2:ea:09:33:7c:ee:08:7c:
                    51:38:a9:7c:6e:f8:a1:d3:f6:7c:76:7c:02:8c:14:
                    21:50:b3:0a:b8:27:b8:7e:6a:6a:64:23:fa:3d:6e:
                    d7:f5:d9:63:2c:4a:55:ea:75:b9:15:40:f9:85:a9:
                    31:fc:d8:87:da:d8:64:fc:d6:af:f0:68:2b:73:ac:
                    cb:f9:5f:da:bc:63:5d:19:0c:60:35:50:78:6b:3d:
                    46:65:f0:2f:20:b7:fe:a5:54:f5:f0:34:0d:bb:90:
                    f4:13:16:82:ae:0a:99:8f:f5:63:d5:20:e8:6a:72:
                    c6:63:a7:e2:5d:9d:1d:65:48:f7:be:de:80:59:a9:
                    44:82:40:5b:e3:ae:2b:4b:7e:4a:31:15:fc:24:34:
                    b2:1e:6b:c6:2f:1e:3b:07:7c:25:c5:6b:25:80:09:
                    eb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B9:D1:32:EB:25:AE:D9:58:C3:69:0B:10:05:D9:E1:20:29:E4:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33b2edf3-d232-34b2-9eb0-5ec1cfb6058c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:b0:57:6d:46:fd:bc:64:87:6f:10:0b:c0:01:0f:d4:81:b6:
         70:2b:bb:7f:f2:37:15:f7:b2:5a:af:7c:7b:1f:f3:9c:cd:d0:
         97:fa:af:e5:14:d9:cc:c8:8d:94:3e:3c:78:f7:18:16:39:50:
         f2:b3:49:30:af:35:79:9c:40:2f:bf:da:63:59:ea:11:0e:2d:
         fe:cf:f6:07:3e:4c:36:4d:f4:c1:40:4f:2b:28:c2:0c:22:0c:
         37:11:21:b2:58:8b:be:60:17:08:41:12:82:4b:db:92:7b:47:
         fb:7e:b6:59:81:a8:1b:c7:37:13:86:ec:47:b5:68:50:12:21:
         b6:9e:e9:03:bc:7f:20:76:6c:78:6f:f5:7b:4e:9d:2e:63:1d:
         b2:6b:18:1d:a5:ca:91:e9:a6:37:bd:31:7a:c5:7c:3f:f9:7a:
         f1:08:ef:31:17:38:a7:19:b6:ab:45:2b:49:24:f4:05:ce:ff:
         c8:81:71:20:c1:cb:68:fb:42:52:12:6f:f0:0f:4e:c6:6a:83:
         6f:c0:53:44:87:6f:72:fc:ad:2d:fa:48:7a:33:77:a1:05:9a:
         07:36:b6:0b:83:e9:0a:6d:34:0a:ac:94:5b:a1:29:f0:4f:29:
         3b:4a:ed:24:cc:df:56:b8:c3:72:f1:62:37:f2:bf:ae:0d:7e:
         2f:db:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:28:26 2026 by rpki-client