Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7fd7311b-7d62-3cce-b784-f910bbc2150b.roa
File:                     7fd7311b-7d62-3cce-b784-f910bbc2150b.roa (raw, json)
Hash identifier:          l38FzT4w8f4r7YkgGLDw14yR0diEdNEHXMt7fCtzZIE=
Subject key identifier:   0D:20:78:71:B3:75:8E:85:61:5A:6F:C4:B9:F6:6F:71:3F:FD:E7:C1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497BC82FCF3467190C1AEFC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7fd7311b-7d62-3cce-b784-f910bbc2150b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        184.21.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:c8:2f:cf:34:67:19:0c:1a:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6433f337-4487-4339-bbf5-9ec07e3f26ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:51:21:a0:71:8d:1d:dd:eb:37:98:de:62:0a:
                    04:1c:ae:b3:7e:f7:01:0b:6e:7d:3d:9b:df:f0:d7:
                    ee:ea:db:3b:4a:1a:1f:a1:4d:a6:60:2d:ad:e0:68:
                    40:cb:14:56:94:28:d0:d1:a6:ec:8a:30:b9:b2:38:
                    18:48:39:be:31:4b:75:8d:49:d6:91:19:cf:73:12:
                    a8:14:99:94:16:61:f8:47:e1:85:82:25:19:e4:ac:
                    90:52:97:99:9b:04:46:4a:a6:be:6d:59:3b:6b:9c:
                    82:fa:13:0a:8f:57:02:61:50:dc:5e:1a:84:20:f5:
                    c2:71:53:1c:b1:f0:5a:7e:7e:3e:51:20:d4:47:eb:
                    92:64:22:25:1a:ae:2b:16:0e:f1:0a:7c:ab:b9:ad:
                    9b:ec:4c:f8:1e:71:09:bc:8b:1d:0c:cb:30:db:24:
                    91:da:37:dc:e7:ca:7e:0d:41:3f:39:8a:bb:a4:d4:
                    14:5f:91:37:1f:9c:8b:fb:6f:e3:5f:f5:a7:ff:7e:
                    e9:e0:64:66:1c:2d:fd:df:f6:77:99:d6:c6:ff:29:
                    77:c8:59:6f:e2:45:24:fe:92:4a:5e:e3:98:af:82:
                    59:a7:3b:d0:5b:67:11:22:c7:11:e2:ff:50:f7:ab:
                    a8:53:8f:35:d7:6c:31:7e:8c:50:22:6a:4d:de:ef:
                    75:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:20:78:71:B3:75:8E:85:61:5A:6F:C4:B9:F6:6F:71:3F:FD:E7:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7fd7311b-7d62-3cce-b784-f910bbc2150b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d1:81:a5:b2:78:b9:31:8a:50:14:5d:61:c5:d8:da:d5:b5:
         71:c8:ad:d1:47:1e:ae:7c:bb:d4:0f:81:44:b2:1d:75:62:ef:
         fb:1a:48:6d:6e:e6:11:49:20:6b:7c:fc:9a:bd:50:97:d1:08:
         07:b7:91:bb:2f:72:a6:f0:52:7b:aa:1b:76:35:28:f7:09:80:
         c9:a9:fb:4d:77:51:ea:8a:5d:5a:df:89:ef:04:2e:2d:ba:f5:
         b4:67:d0:8d:a6:cd:61:5b:75:2c:ee:d8:36:cd:21:8d:d4:ba:
         35:ca:52:32:fe:d0:93:d0:c2:c7:ed:5b:34:7a:30:11:7d:fb:
         dc:17:ff:a5:63:3f:97:12:81:e2:de:29:de:4b:bd:a3:05:d5:
         30:77:e9:7a:3b:06:18:c8:09:79:6e:ed:ae:0d:9a:1e:8d:52:
         84:26:87:1a:78:56:bc:20:2c:c3:c4:fe:94:0b:a6:84:4d:66:
         56:e7:43:89:2d:69:89:b1:11:6f:4b:6c:ae:8b:13:45:44:6d:
         b1:39:b5:b3:78:a3:ef:ed:79:e2:4b:9b:71:07:72:d0:53:dd:
         ba:c3:66:53:d0:3b:81:d6:93:64:3a:49:9e:2b:58:3e:5d:cb:
         14:33:bf:93:0e:0f:73:eb:f9:83:70:71:44:6d:6c:52:d2:90:
         fd:0d:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:04:54 2026 by rpki-client