Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98b980e4-3346-3d68-b6a4-5f1009b7f4a9.roa
File:                     98b980e4-3346-3d68-b6a4-5f1009b7f4a9.roa (raw, json)
Hash identifier:          A2nJzRv6tIX/1uQNXt0fI6SpEaPZXjbA+ZuVH/eZuB8=
Subject key identifier:   D4:93:B9:D8:CD:FD:6D:9F:E3:0E:7E:92:F2:63:39:8E:A8:B8:CF:4F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0145540BB170DC103FF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98b980e4-3346-3d68-b6a4-5f1009b7f4a9.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:14:55:40:bb:17:0d:c1:03:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=ebb083bb-6134-4f0c-a670-baa562edb026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:24:0f:12:9e:dc:2a:b6:4c:71:e6:86:57:ee:
                    e4:04:db:01:f7:7c:63:0f:5f:18:04:e1:ae:df:45:
                    8e:fd:2e:e3:0f:ac:3c:fa:6f:b8:09:b6:af:ff:58:
                    80:db:6f:21:dd:ec:b1:a0:04:35:7a:7f:6b:45:a1:
                    d4:5f:46:04:ba:e6:61:25:9f:2b:22:d4:a2:6f:2d:
                    21:68:c9:12:9f:3a:55:84:43:81:3c:94:c8:34:5e:
                    e8:22:b9:aa:43:09:7e:c0:68:02:02:4c:c9:c9:5e:
                    f7:74:a6:3b:c4:2d:da:b3:b0:33:73:dd:e6:10:0d:
                    7d:86:c2:a3:3d:76:f3:0b:cc:79:1a:be:75:2b:c1:
                    95:56:d9:0f:de:47:c8:2a:f8:0b:03:bd:22:c5:a4:
                    98:c0:18:51:99:b0:2a:8b:47:7a:20:7c:74:6c:3e:
                    e7:fd:c8:16:51:28:3c:9b:04:1c:1f:21:38:fa:33:
                    29:e1:b4:5b:7c:3c:c8:6c:8c:5d:8b:8b:3f:e1:48:
                    aa:82:b2:10:24:cb:7f:84:53:e4:7f:82:a6:88:ff:
                    a6:cd:c5:7c:52:c7:7c:72:54:92:28:40:14:09:c0:
                    31:cc:e5:f8:70:a9:0a:ee:a4:fa:12:63:f4:59:fc:
                    ef:c3:32:9c:70:d1:44:41:d7:c9:5b:82:54:6d:88:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:93:B9:D8:CD:FD:6D:9F:E3:0E:7E:92:F2:63:39:8E:A8:B8:CF:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98b980e4-3346-3d68-b6a4-5f1009b7f4a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:83:a1:91:98:12:c0:df:b4:60:17:e1:3e:e7:83:8a:2d:35:
         fa:c9:04:76:3f:13:01:1c:c3:53:89:18:89:57:c0:14:2f:d0:
         9c:f4:5d:40:66:9b:4a:de:93:b0:ca:79:c7:e6:0a:51:ac:15:
         b8:b1:13:0c:4e:4a:3c:f9:e3:ef:ae:9d:a6:32:6c:1c:ad:5a:
         31:62:83:0c:6c:ad:59:c6:a9:30:94:47:4b:a1:f0:46:a8:00:
         53:15:34:81:9f:f0:f8:8b:89:0d:28:74:12:60:39:b7:2e:1d:
         3c:89:78:96:53:05:7a:3e:37:05:ab:dc:4c:6f:e9:de:d1:d3:
         b4:ee:60:b0:a4:f4:13:c9:86:10:21:64:4e:25:1c:32:05:b3:
         62:cc:04:6d:16:4c:a5:18:e2:7a:a7:00:ff:e4:c1:22:c9:5c:
         d6:51:6c:18:bd:51:76:fd:bf:a3:78:62:b0:8d:66:17:d4:b8:
         78:11:05:b8:d0:99:df:e3:f4:1d:9f:fb:fd:66:a2:a6:eb:2f:
         a6:4b:b6:2d:38:96:ac:49:df:de:49:6b:db:2c:7d:1f:70:e5:
         01:87:28:ff:21:01:a6:74:f0:59:bf:75:11:9d:a3:3c:af:a9:
         31:d2:31:25:d6:85:7f:60:ed:30:2e:75:7d:09:9d:ed:8a:28:
         2b:d2:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:52 2026 by rpki-client