Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6376ba69-cff9-3ed2-bbe8-a178f5e8c410.roa
File:                     6376ba69-cff9-3ed2-bbe8-a178f5e8c410.roa (raw, json)
Hash identifier:          PwnIxYbbU96CK4LlOzUJu3+Ngd4p0NLFgayovpXuzI8=
Subject key identifier:   34:7B:BD:83:83:98:4B:AD:53:4D:20:8B:CA:FD:A7:50:D4:7A:54:2D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497BD1AAC8C327F403535E20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6376ba69-cff9-3ed2-bbe8-a178f5e8c410.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        184.62.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:d1:aa:c8:c3:27:f4:03:53:5e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2465c9fe-2bb8-4bd2-8f58-305f3fa0453e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f3:73:91:bb:b7:a9:a2:0d:56:b1:35:f2:1d:
                    33:a1:b3:2d:a6:63:f9:9b:eb:19:f1:53:1a:a0:aa:
                    76:9c:33:4a:22:0f:97:05:23:c2:79:d6:50:62:7f:
                    aa:71:14:bb:1a:e0:40:c4:24:f9:79:18:ad:e7:e3:
                    aa:82:4d:14:98:ba:5a:96:1b:8c:75:9e:ae:a4:19:
                    f7:50:ab:10:6b:f0:28:4d:d4:60:6e:2a:6c:62:8c:
                    b7:a0:80:c4:8a:df:e0:e9:bb:8f:11:c5:b0:ca:75:
                    06:d1:f5:89:24:b2:4f:ab:5f:70:f5:03:c5:4d:78:
                    12:39:7f:86:96:f7:44:6d:b7:93:bf:eb:93:19:43:
                    06:37:be:55:30:91:dd:9b:7a:84:c5:63:85:ba:4b:
                    29:51:cd:d9:c2:41:22:16:1c:6e:9b:6f:a0:20:84:
                    f8:08:ae:c9:9e:44:ad:b0:55:27:e4:cb:41:aa:ed:
                    eb:fc:c2:37:fb:f6:81:25:a1:41:cd:a4:06:aa:56:
                    de:50:8a:a9:eb:80:7a:aa:31:3e:14:05:b3:73:5b:
                    95:c9:a8:b8:5d:cf:8e:57:73:88:bc:91:15:79:b4:
                    bb:6d:21:9e:d2:da:cd:ee:8d:0e:2a:16:e8:0e:1d:
                    a5:1e:c9:d2:44:4e:1d:ad:98:7c:cc:71:92:44:cd:
                    6d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7B:BD:83:83:98:4B:AD:53:4D:20:8B:CA:FD:A7:50:D4:7A:54:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6376ba69-cff9-3ed2-bbe8-a178f5e8c410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:35:41:6c:ef:6a:4c:ac:9f:48:fc:19:a7:a3:b5:11:b0:f2:
         de:df:f3:f0:42:b9:a5:38:16:51:33:de:36:c1:19:bb:27:70:
         67:f5:c1:f1:e4:6d:e8:41:28:57:ef:2a:87:aa:ac:a2:44:f4:
         39:07:2c:8e:b6:cc:05:cf:63:22:37:6d:65:c4:fd:72:10:4a:
         6e:40:86:fb:af:a0:b0:3a:94:38:bb:a2:d5:74:a0:82:c2:5a:
         12:c4:50:31:04:44:24:2e:55:90:f1:31:b5:cb:fb:63:45:cd:
         2a:9d:e3:ba:40:27:7e:1b:4b:d9:ec:20:f8:84:5a:9e:42:05:
         17:7b:35:96:11:be:f3:e0:53:34:b4:0e:cb:51:11:4c:dc:8c:
         5f:9f:3e:3a:79:9f:97:1b:cd:61:11:a6:92:5c:37:9c:81:6a:
         e9:9b:c9:e7:71:d7:26:3c:24:74:79:44:76:41:c1:12:7e:b7:
         bd:6c:09:da:ff:8b:65:4e:6c:51:93:e7:c7:4e:54:a6:87:83:
         9c:16:3d:91:ff:aa:44:60:5a:40:a8:4e:67:0d:b1:3f:75:46:
         42:23:e2:08:8f:53:81:69:64:3b:1c:dd:b6:d9:7c:c7:23:3b:
         a6:6e:fd:26:39:e3:ec:4a:3d:92:4d:69:a1:c9:9f:92:01:4e:
         d7:aa:48:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:06:59 2026 by rpki-client