Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2467165-6937-38e5-895e-14ae6b8550bb.roa
File:                     a2467165-6937-38e5-895e-14ae6b8550bb.roa (raw, json)
Hash identifier:          3eTyPrnkA8HyQaoWXZ33gTpasNjhdoKXZslM4XgeCt4=
Subject key identifier:   F9:07:A8:18:46:6F:9C:0F:87:F6:6B:0A:E6:61:DD:94:0C:A2:6C:17
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E023A63DE828A1465E8C40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2467165-6937-38e5-895e-14ae6b8550bb.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.63.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:23:a6:3d:e8:28:a1:46:5e:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=a5e3bbb6-1271-462a-af14-4344f5e51055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:32:ff:31:8e:4d:ed:e3:44:2d:66:74:24:
                    0e:17:8a:34:79:05:2c:45:f1:d7:4f:a7:72:bf:a1:
                    cb:54:29:fa:3e:f2:83:2f:66:02:c0:72:3f:cb:83:
                    41:45:80:35:f2:ce:00:55:68:1b:e6:63:e9:dc:f9:
                    4a:b6:6a:7b:da:52:a8:b3:01:bb:f4:c6:f1:29:38:
                    36:f4:16:a2:78:c6:01:94:fe:34:1e:a9:24:dc:4b:
                    35:24:69:43:bd:9b:5e:ea:a1:ca:28:74:15:b1:30:
                    97:25:fc:fd:0d:01:c7:9f:d1:2e:81:74:76:85:c7:
                    0e:3d:ac:4c:67:41:80:d4:72:0b:7b:23:57:15:92:
                    1c:11:2b:04:f6:a0:1f:9e:c5:65:90:2e:d4:94:e1:
                    db:c9:e4:71:ef:a9:40:eb:cb:50:db:57:0f:b6:03:
                    23:da:e7:40:99:da:23:e8:91:b7:ff:1c:75:f9:2f:
                    06:d2:7f:2e:10:70:5d:fe:92:bb:47:0a:52:32:09:
                    3f:30:d6:35:7f:84:14:b5:29:47:24:72:fc:9c:c6:
                    91:45:52:36:2c:d7:7c:ac:59:d4:7c:17:cd:f7:fc:
                    87:da:13:42:53:3c:01:6b:24:07:b0:eb:15:55:63:
                    e0:7c:f5:96:6d:33:97:c8:e9:f8:37:51:ef:e7:a1:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:07:A8:18:46:6F:9C:0F:87:F6:6B:0A:E6:61:DD:94:0C:A2:6C:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2467165-6937-38e5-895e-14ae6b8550bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:de:96:14:60:a7:e4:63:ee:e7:bd:e1:bf:b4:1b:21:d7:18:
         3e:77:33:5c:96:a0:e7:e8:29:27:8f:33:45:58:ea:d9:e0:68:
         34:3e:0a:06:96:59:36:b5:3e:bb:ea:9e:b2:d6:a1:b0:60:ae:
         3c:a4:fa:c5:bb:ce:49:b9:99:d1:13:22:5e:5c:1d:25:25:ea:
         f2:c5:3a:87:1f:f0:1f:38:8f:e4:b3:a2:ff:db:02:df:ba:9c:
         1b:2f:57:d6:34:7d:16:21:1b:c2:43:46:4a:d0:db:f8:3f:18:
         c7:0f:ee:45:d1:94:55:47:38:60:42:6f:4c:1d:a7:fa:32:da:
         a0:1a:e7:3b:b3:ba:08:6c:e7:b8:7a:21:d4:a7:b9:e3:ac:d7:
         29:a1:c6:1a:d0:81:31:d2:b8:77:e4:00:51:d1:a1:cd:79:7c:
         46:84:18:26:a1:d0:dc:49:b8:cb:19:1d:d6:ee:e5:d1:8e:9a:
         09:ee:70:88:af:8b:e3:21:4a:74:3f:4f:82:b2:ba:39:98:3b:
         5f:28:3f:20:c6:ec:14:32:2c:05:f0:98:6a:3a:35:50:0c:9c:
         de:95:16:88:2c:09:c9:6a:e2:cf:f4:a5:44:47:fb:8f:a1:ea:
         5a:bc:12:77:c7:6f:e3:28:cb:f2:f2:a7:e4:de:bc:d7:05:3d:
         61:bd:66:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:44:51 2026 by rpki-client