Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/950ca961-092c-353b-b80e-8216fb4da2f8.roa
File:                     950ca961-092c-353b-b80e-8216fb4da2f8.roa (raw, json)
Hash identifier:          G6LjRQ5aXCH5iJwQa5w3C00shZeeL/eZ4CC8Ia5vmyw=
Subject key identifier:   2E:46:47:63:7B:DF:63:8D:0B:DE:1B:33:03:ED:A8:43:1E:A0:73:7D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0C1320071D5B11AF1B998
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/950ca961-092c-353b-b80e-8216fb4da2f8.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.20.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:c1:32:00:71:d5:b1:1a:f1:b9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b1404be5-1c93-474f-9ea9-6e1faa04ab05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f9:5c:f0:b6:18:f3:ba:65:47:e8:4a:6a:d0:
                    e9:24:9f:51:7d:63:18:91:30:e1:08:5c:77:f7:b3:
                    8c:bc:fd:5f:b4:45:13:68:26:11:5b:80:19:8a:c5:
                    da:60:36:66:db:3a:4d:0d:a8:8b:e8:45:78:49:cc:
                    da:58:cc:50:1b:11:5c:3a:0d:41:bb:d6:d5:0c:0d:
                    d5:29:73:d3:7f:5f:b6:c9:57:c0:3c:64:b1:ff:0d:
                    6a:63:43:f8:ff:b7:b7:d6:95:87:e9:ce:c7:ea:7f:
                    d3:76:ec:37:46:28:e6:80:8a:ba:a5:7e:8f:5d:30:
                    92:e8:0f:fa:94:8e:0f:5f:3f:94:60:1d:d7:f8:42:
                    17:e7:fc:8f:93:d6:92:b6:bc:12:2f:c6:b3:61:21:
                    80:d5:c7:4d:87:79:58:54:b1:55:cb:09:73:88:23:
                    fd:d6:eb:77:e7:6d:19:b7:8f:67:87:83:2a:76:6d:
                    f6:25:b6:60:61:12:d2:05:ed:64:ae:46:65:9a:09:
                    ac:ee:a6:42:d0:b1:10:8b:82:48:0c:3d:6c:83:68:
                    3f:ff:81:b5:51:ce:4e:6d:4c:5b:96:51:6e:7c:c5:
                    8a:74:3a:41:af:a4:23:f6:65:ae:6d:30:03:a8:1b:
                    21:8a:a6:a0:38:d0:4f:3a:52:93:91:f6:0f:9c:a0:
                    db:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:46:47:63:7B:DF:63:8D:0B:DE:1B:33:03:ED:A8:43:1E:A0:73:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/950ca961-092c-353b-b80e-8216fb4da2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:2c:ce:99:09:aa:c8:08:ac:35:eb:4c:80:85:2e:b8:24:af:
         f6:a0:b4:2c:bb:73:07:71:d5:cd:de:3a:1d:65:e0:b7:aa:e8:
         30:57:d1:37:a8:0a:20:96:fc:71:2e:d9:8e:9d:28:5b:d4:18:
         9b:fc:b2:71:45:59:ea:3c:dc:13:75:8f:8d:98:59:44:43:4e:
         15:ad:c2:c2:e0:f8:74:1f:84:4a:6e:e0:9a:a6:bf:4f:61:00:
         61:ed:3a:21:42:25:24:4e:76:b5:a1:30:ad:70:59:22:f7:3c:
         fd:d4:dc:74:44:11:8c:be:f8:fd:c6:ec:08:74:c4:e0:a6:d1:
         a4:53:c4:45:83:09:52:e1:7e:90:43:10:4c:53:f8:d8:c2:4a:
         b6:82:5a:38:1c:98:42:5c:9b:75:0a:6a:c9:92:41:a2:db:0e:
         ad:10:fa:c5:7c:9e:c6:5c:49:8f:05:e3:eb:ca:75:c6:39:4c:
         a3:02:3a:a2:9c:50:fe:5a:94:e1:3f:80:3f:24:e7:e9:82:5d:
         4f:00:1c:68:45:43:29:1e:3f:a8:0b:d2:b6:3a:20:e3:6d:21:
         e7:af:07:43:eb:e5:fb:2a:e6:ef:40:80:86:82:5a:18:89:ab:
         3a:e2:07:40:f3:52:47:ed:54:21:d0:39:91:dd:b9:3c:c3:d8:
         e4:a2:76:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:03 2026 by rpki-client