Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7984e2ec-1f6e-3167-8853-604f99ef2f2a.roa
File:                     7984e2ec-1f6e-3167-8853-604f99ef2f2a.roa (raw, json)
Hash identifier:          1v8RxazqtBghcyVY9IwY1DT3uREB3q9vMjtjNc/y/uA=
Subject key identifier:   86:94:CB:C9:F3:91:49:15:3B:4D:39:E4:36:C6:82:CF:F6:43:E6:99
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E00FF290B46188446EA300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7984e2ec-1f6e-3167-8853-604f99ef2f2a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:0f:f2:90:b4:61:88:44:6e:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=dcc08381-3b7c-445e-9152-bc4bf5552aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b9:ac:0a:7c:3b:87:21:a9:26:94:ff:52:1b:
                    5b:c6:99:46:ff:f5:98:1d:8c:1a:a7:13:aa:d5:ea:
                    d7:9a:37:43:1e:34:90:79:cb:3f:d4:3e:78:13:fd:
                    a1:71:6c:6f:65:e1:d7:e4:ef:d3:e9:ad:68:08:23:
                    bb:60:15:40:37:75:bb:88:ee:02:9a:03:bd:ce:9e:
                    58:81:f3:8c:a7:48:18:cf:34:61:99:56:ad:14:e9:
                    8b:7d:e0:95:0c:db:13:f1:1f:d5:4f:5e:6e:4f:49:
                    ce:78:f9:ca:40:b7:af:fc:0e:9c:fd:c5:63:48:ff:
                    e3:7f:02:a2:ff:15:ff:9c:96:ce:05:be:4d:22:1e:
                    b9:84:07:87:d0:f1:e5:a2:54:98:1c:6d:de:b1:48:
                    b4:04:ff:7e:d8:b1:d8:2b:ab:ac:99:a8:dd:7c:6e:
                    e7:f5:1b:3a:6e:ac:55:d7:ec:4e:d3:96:70:b0:ab:
                    8e:ad:4c:e7:c5:4d:48:be:37:51:97:19:72:2a:5d:
                    30:a3:78:fd:ac:57:83:cb:f5:78:57:a9:fb:2f:58:
                    74:f2:99:92:81:7d:81:a3:0b:3f:bb:b6:b0:68:87:
                    af:8f:e6:83:dd:91:f5:52:13:2f:46:e7:69:e8:47:
                    34:6c:79:49:7d:65:8d:75:c9:7d:58:c2:54:71:c9:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:94:CB:C9:F3:91:49:15:3B:4D:39:E4:36:C6:82:CF:F6:43:E6:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7984e2ec-1f6e-3167-8853-604f99ef2f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:12:7b:7a:f7:96:a7:0a:ea:aa:bf:9b:a8:36:2a:4a:cc:23:
         95:3b:c3:ec:ab:53:58:ad:6e:b0:96:f7:6b:21:9b:f8:b2:29:
         9a:bb:22:72:4a:90:e4:08:d7:e0:fc:02:5f:b0:c8:f4:e6:92:
         1c:90:de:7a:b7:93:5f:f4:da:43:0d:a7:81:49:3e:68:c6:28:
         07:f3:14:4b:31:21:81:ae:c4:58:87:8e:80:85:9f:30:01:ed:
         0d:c7:00:e3:fb:81:67:f9:f0:d9:73:0e:91:5d:25:8e:13:da:
         ce:bd:b7:dc:c5:7d:cb:13:93:62:f7:dd:4e:99:e4:53:12:2d:
         83:89:d7:cd:87:89:ee:86:89:13:87:0e:62:de:07:5b:5a:9a:
         36:ff:a0:87:21:0a:98:8a:08:7d:09:9b:bf:0a:01:56:de:13:
         13:f3:dd:6a:65:05:a4:23:10:17:6a:78:70:f5:a6:ea:4f:81:
         d4:ba:42:fb:ae:fb:8d:9d:9f:85:1e:3b:71:b4:93:71:86:2f:
         53:0a:7d:a2:da:e9:8b:fc:29:e8:7f:78:19:42:77:06:11:5f:
         c4:e9:25:95:89:bc:a5:68:b6:b6:a1:66:9d:16:aa:5e:91:0f:
         ff:b1:8a:82:3e:7f:da:4c:69:b1:6d:bc:84:c5:1a:4f:31:ee:
         ec:b6:1b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:08 2026 by rpki-client