Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/551280a1-5e8c-31a7-b8b7-d3a716f334b6.roa
File:                     551280a1-5e8c-31a7-b8b7-d3a716f334b6.roa (raw, json)
Hash identifier:          yVXYI1ASl8xr+7fsjCLE/BRHnQwfrAnCiTRVX5tLK9Y=
Subject key identifier:   E4:D0:DC:78:3A:00:3A:3F:DC:21:65:A7:89:02:66:56:2B:4B:D2:A3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497BC5891EB06577DC3ED280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/551280a1-5e8c-31a7-b8b7-d3a716f334b6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        184.21.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:c5:89:1e:b0:65:77:dc:3e:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fa7ddcfd-5b71-44f4-8679-691594a79966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:eb:6d:b8:15:03:1c:e1:e6:f1:10:4f:23:15:
                    48:c0:c2:62:a1:7d:86:f8:1a:7e:6d:b2:a8:bd:78:
                    6c:b7:fb:d6:c7:37:e3:b2:a2:cc:52:9f:5c:65:31:
                    48:0d:07:a2:14:69:62:31:87:38:66:e3:03:79:bf:
                    5c:c4:c3:51:19:aa:9f:5c:94:02:05:ff:5b:2e:65:
                    fa:a3:fe:9f:0b:04:0f:d8:cc:a7:ac:23:ea:f0:82:
                    47:81:e6:64:4a:24:ff:fb:c4:ae:d0:bd:45:6c:af:
                    fe:3a:d6:0f:46:71:d1:4f:9e:63:b0:9a:0e:d3:25:
                    3c:46:ef:43:71:47:08:9f:97:36:77:08:f7:95:32:
                    35:b4:45:73:26:25:ea:1c:ea:fe:2d:3b:06:69:67:
                    53:00:e7:a7:79:e2:f5:07:7a:cc:62:ed:0f:f3:74:
                    c9:ba:fe:7b:d0:63:e8:6b:01:c1:bb:0b:7e:88:9e:
                    97:e0:ea:ee:73:66:cf:18:f9:a0:8d:c2:97:54:e4:
                    3c:6c:ea:bc:85:da:50:a9:bb:1b:a3:a7:64:5f:88:
                    94:33:52:2e:6b:eb:7e:7b:34:da:c7:e9:4a:90:2e:
                    2b:a8:53:22:55:9a:e0:5c:74:de:19:5f:ca:f0:b0:
                    fc:7c:f7:a1:c7:20:6b:98:47:05:e1:5d:5e:3a:23:
                    9d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D0:DC:78:3A:00:3A:3F:DC:21:65:A7:89:02:66:56:2B:4B:D2:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/551280a1-5e8c-31a7-b8b7-d3a716f334b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:62:6e:3d:45:ca:25:39:1a:09:8c:02:9b:bd:08:75:91:c1:
         db:00:db:58:5d:00:69:76:a0:4c:07:a7:ef:7d:91:f6:37:ee:
         12:96:35:5e:7c:2c:6b:23:a9:aa:d9:7f:dd:a3:b8:d9:5a:e4:
         76:66:7c:4a:8e:94:bb:c4:4f:88:75:f3:26:c0:68:70:ce:a1:
         d0:eb:6e:44:a2:b8:e1:b9:55:95:07:47:91:87:7e:ef:d5:40:
         11:05:a6:d2:56:39:ae:4d:b4:3d:f9:90:2e:4f:f5:b1:7f:69:
         e0:9a:48:69:b0:16:b9:79:7d:d3:06:23:98:d6:49:42:e9:a6:
         1f:a8:d8:15:d7:d9:96:aa:54:d5:d6:99:66:c5:2e:0e:e1:06:
         cc:e4:bc:77:f7:ed:fa:ee:38:7b:e0:6b:9e:4b:67:2d:96:46:
         8e:1b:e2:7a:ef:f6:b4:56:90:8b:53:4f:7b:d6:1d:d0:99:a2:
         d1:65:4f:77:67:d2:ed:b7:5f:5e:05:71:4e:26:ea:f3:14:50:
         90:58:2c:b4:40:2d:b2:19:3d:aa:cc:a3:2f:e0:f0:42:9f:fe:
         05:21:14:ac:63:2a:02:d8:ad:04:3a:a5:35:a8:ea:4e:14:d5:
         57:28:64:6e:3b:28:f2:30:73:6b:e4:e0:76:3e:70:54:37:68:
         2d:04:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 10:24:11 2026 by rpki-client