Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e8bdba9-164d-3429-bfd9-281ca8f731b9.roa
File:                     7e8bdba9-164d-3429-bfd9-281ca8f731b9.roa (raw, json)
Hash identifier:          8eOWiJrRlcxqYoyb0L+4EvVVrNb1HPzjKjLMcai4a/U=
Subject key identifier:   E7:8C:1C:ED:C9:36:A5:F4:6E:A4:36:04:AA:D5:37:F3:66:0B:BB:54
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49842E1B54473C4ADA0DFE40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e8bdba9-164d-3429-bfd9-281ca8f731b9.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        184.63.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:2e:1b:54:47:3c:4a:da:0d:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5d6cd3fb-99b6-4c60-b82f-c576e572f3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:1e:72:b8:d8:f0:19:34:b6:23:16:b1:10:
                    75:f2:59:84:40:07:20:28:a9:9b:de:7b:3b:bb:0d:
                    d4:af:80:79:82:15:7f:cb:b4:1b:3b:48:35:c4:5e:
                    86:3e:f0:e9:b6:e0:c4:29:85:88:b3:5a:01:e0:5b:
                    88:47:27:a6:4a:2a:95:77:fd:39:ba:6e:88:9d:08:
                    1d:66:4b:24:c6:69:6b:fa:86:54:26:39:88:9f:9a:
                    9d:5e:35:e6:29:c2:d7:e4:72:7c:a3:8f:66:b3:50:
                    d7:1c:13:da:a7:7b:18:ca:fd:6f:5a:f2:90:02:c4:
                    fa:84:cc:33:92:29:b0:fb:08:49:e7:d0:6b:e9:7d:
                    7a:47:a4:04:0b:43:bf:04:b8:e7:f5:35:b7:d4:1a:
                    b1:28:1b:eb:3f:15:92:82:cd:9f:e0:12:79:0d:63:
                    2f:63:7e:bf:d4:1e:ed:a9:1a:a0:b8:af:9b:70:6e:
                    2c:b1:68:a2:65:77:9f:58:d7:3e:73:67:36:1d:8d:
                    55:16:09:65:1f:c0:9d:f5:a1:8b:12:95:b5:ab:26:
                    49:59:ca:a5:8e:62:45:31:30:82:a8:d4:c2:b4:51:
                    34:ba:a5:bc:b8:cf:7e:1c:9a:11:03:32:8a:3c:7f:
                    60:dd:94:76:55:fe:21:82:b8:6a:1a:03:83:5c:a9:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8C:1C:ED:C9:36:A5:F4:6E:A4:36:04:AA:D5:37:F3:66:0B:BB:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e8bdba9-164d-3429-bfd9-281ca8f731b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:fe:9a:4c:6b:8b:15:e0:eb:6a:6e:e5:32:b5:47:8d:7b:4b:
         0d:45:54:13:47:10:81:e4:97:c8:95:47:3d:a2:27:11:cf:72:
         c9:ee:36:8f:4e:48:16:53:80:3f:07:bd:3e:7e:4e:e4:69:b8:
         75:68:0a:ef:bd:85:b1:1b:ab:f9:1e:0f:bd:8d:2e:00:02:07:
         3f:06:85:39:23:45:d5:ab:80:d8:21:f5:7d:c5:7d:98:51:b5:
         76:fb:e8:38:77:7f:96:e9:3a:ea:e3:3a:f2:50:08:73:a3:aa:
         34:27:dc:ce:03:51:84:e5:c5:66:75:91:ed:19:90:c6:1a:71:
         a8:6d:43:a7:e6:a6:8b:ae:10:6a:ea:f2:6b:84:e6:37:76:64:
         c0:ca:5d:16:c5:00:b1:21:08:bd:64:40:54:27:e8:8a:65:db:
         77:4b:29:cb:29:c1:d0:c3:1b:34:21:87:e9:c1:43:1b:3e:de:
         7b:3a:38:a5:fd:9f:3b:1e:7b:ba:67:d6:8b:87:6e:95:a5:18:
         37:30:0f:45:b5:41:7c:ba:b8:ae:86:e0:43:ee:ab:76:83:9f:
         e9:4e:eb:9c:f2:9a:d0:93:8d:c8:92:83:1e:97:54:f7:29:17:
         12:c5:88:00:e1:9b:35:e7:42:9f:6f:6e:07:e5:e4:9d:77:31:
         3c:55:a5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:08:56 2026 by rpki-client