Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ed2979b-493b-3b0c-81aa-6f485ebeff4f.roa
File:                     6ed2979b-493b-3b0c-81aa-6f485ebeff4f.roa (raw, json)
Hash identifier:          g7x0IG7K8AWm6MUa2xHxPqX10FjlAKOOjsV8fbkb03c=
Subject key identifier:   8A:A7:44:83:91:35:67:42:4D:41:B0:00:B1:1A:71:D1:85:9D:1A:C8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E01E3CA8E85356A41EB800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ed2979b-493b-3b0c-81aa-6f485ebeff4f.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.63.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:1e:3c:a8:e8:53:56:a4:1e:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b821ba42-8c4c-4f6f-90e1-b4c345bf509b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:36:02:3e:62:a2:14:fa:90:97:c3:56:b5:
                    cb:07:c2:7f:d6:8e:97:58:fb:c5:21:c5:6d:5a:6c:
                    75:48:89:09:36:5a:37:44:de:72:52:c7:fd:23:7d:
                    30:b1:e2:1b:c0:e5:10:b1:f2:ae:49:55:9a:f9:3e:
                    96:34:5b:c5:28:d7:19:ca:20:31:11:d8:6e:a8:82:
                    b7:bf:a6:3e:9c:5f:58:d1:4c:8d:6c:be:8f:19:62:
                    ec:f8:23:87:79:c9:53:28:68:ec:28:98:96:29:01:
                    78:3d:35:7f:3e:be:c0:6d:16:a3:b7:98:61:cd:5e:
                    6e:57:63:11:ac:51:bc:45:8b:a6:86:43:43:4f:19:
                    5a:53:7d:1f:13:88:bc:16:17:be:66:7e:d6:9e:bd:
                    fc:03:3f:3a:8f:43:d8:e8:1f:a7:c5:99:52:f5:7d:
                    bf:64:5d:89:9a:a8:c0:56:a0:83:a8:8f:39:cc:8c:
                    d8:77:8e:06:ad:22:87:a5:66:c5:7c:7e:a2:af:5a:
                    5f:c8:f9:43:3d:10:aa:28:45:8d:3b:bd:c7:0d:50:
                    71:0b:47:87:09:76:c6:f9:73:81:7c:6d:6a:31:d8:
                    d2:40:a8:20:7f:a0:2d:c1:3d:54:b1:f1:2a:4d:1e:
                    d7:b1:80:e7:b4:48:4e:4e:fd:d1:c4:e5:a1:0e:5a:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A7:44:83:91:35:67:42:4D:41:B0:00:B1:1A:71:D1:85:9D:1A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ed2979b-493b-3b0c-81aa-6f485ebeff4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:e2:40:02:7b:42:14:ed:34:2d:d4:90:3f:e9:65:11:dc:73:
         12:4c:8d:d8:be:25:7a:ac:81:f0:95:f2:2b:0b:1e:c8:f3:ec:
         f0:4a:92:40:52:af:5f:49:c8:3d:8b:12:3f:f7:5c:bb:f0:6e:
         7c:4b:4b:33:c9:24:9d:5e:a1:d0:65:43:4d:08:7e:a0:93:db:
         1c:30:27:91:5a:17:d6:b9:f7:09:47:ae:13:3b:25:4f:85:4b:
         eb:73:01:48:56:ea:d1:7b:e7:87:f5:2e:8a:35:38:18:11:1c:
         14:f9:e0:11:a9:0a:b6:03:4a:05:c8:2d:da:94:f3:b3:ac:24:
         0b:3b:97:7e:7e:0c:90:06:4f:5c:bd:21:62:82:f6:6f:51:62:
         d7:d7:89:87:d2:a4:55:31:51:39:63:18:4d:ca:b0:29:8f:23:
         f9:2e:a4:e5:98:01:18:5c:ba:df:c1:41:4a:68:eb:0f:58:dd:
         fd:c6:c2:59:9d:b3:d0:f3:bf:94:23:39:32:67:05:0b:42:14:
         67:c8:62:05:cb:75:f3:5f:22:0d:db:67:e9:9c:7e:a5:2c:df:
         7b:43:50:1d:c3:fe:df:19:34:c3:99:9e:2c:cf:3b:5d:8c:3c:
         2a:7a:5a:da:8d:9a:a0:da:6f:dd:60:f6:e2:f1:cc:85:f2:a3:
         82:17:fc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:27:44 2026 by rpki-client