Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a610f696-8cef-351e-bd23-12e9b0ccd480.roa
File:                     a610f696-8cef-351e-bd23-12e9b0ccd480.roa (raw, json)
Hash identifier:          Eu0XaRVPruULL3DDClBbYE9XXnQCKezf7QKk+bHqsxk=
Subject key identifier:   7D:F7:F5:FC:CA:7E:C0:DA:55:07:5C:C7:B1:E9:4B:04:C4:25:B6:4D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E012A7E2DB8C10F7DFE380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a610f696-8cef-351e-bd23-12e9b0ccd480.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:12:a7:e2:db:8c:10:f7:df:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=dc67455a-90c5-4a7f-99e2-1efdd5815900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:85:2b:3d:3c:8d:b8:92:c6:ac:81:1a:cd:ec:
                    b5:8c:61:57:3c:03:50:19:a8:19:7f:b1:28:1e:98:
                    ae:78:1d:35:25:36:7d:ba:76:36:e5:c1:c0:52:5c:
                    55:3d:72:f7:8b:bf:12:c3:a8:fc:5c:62:ac:7e:a0:
                    8c:ad:cc:db:4b:43:d2:d6:e8:31:d5:8e:bb:98:fd:
                    12:be:cf:c1:46:ba:af:cf:c9:32:1f:c5:03:df:2f:
                    a0:5e:5b:94:5b:6a:b9:19:dd:0c:70:14:b6:61:54:
                    8c:65:9c:03:db:e9:6b:0f:c9:59:ed:57:3b:f6:4a:
                    58:0a:d6:8b:89:fd:53:6c:a1:d9:33:77:78:fc:4f:
                    cf:f1:ef:99:91:1e:96:17:1d:16:3f:02:40:19:54:
                    2b:11:a6:2a:e2:0e:bf:39:48:ce:48:bb:3f:60:e9:
                    96:d4:da:50:85:1b:ea:e1:84:1c:cd:2a:0c:29:c6:
                    8a:f6:67:ed:58:e1:f2:42:e4:41:1a:38:fd:98:bc:
                    c4:87:6c:84:13:c8:8d:39:18:b5:bf:d7:63:3c:41:
                    98:ff:ed:fb:64:d4:51:2d:7c:5d:1a:3f:e9:e2:f5:
                    ae:00:1d:68:7a:92:64:f8:7c:f5:8b:19:f0:67:3d:
                    e4:44:dc:36:86:7d:d6:3b:5f:07:c8:38:a6:4e:40:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F7:F5:FC:CA:7E:C0:DA:55:07:5C:C7:B1:E9:4B:04:C4:25:B6:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a610f696-8cef-351e-bd23-12e9b0ccd480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f6:1f:82:d9:a5:c1:a4:9e:07:ad:9d:84:78:ab:f4:ef:ad:
         30:d7:fa:8a:f2:f1:d2:be:0c:c1:2c:94:14:a0:8b:92:f0:28:
         e1:f7:55:1f:72:93:bd:e9:86:38:49:e9:15:51:e1:37:09:46:
         57:17:e3:38:24:7b:04:2d:00:13:d1:8e:e2:40:1c:c6:ca:e4:
         b4:76:c7:de:63:3d:4f:10:a0:de:02:f7:ce:be:3c:cd:a6:2c:
         dc:56:94:e1:b2:e4:71:e9:c3:a6:81:f2:b5:e4:83:2a:6c:50:
         21:12:c9:91:cf:21:a9:32:cd:bf:8b:39:cc:dc:e1:49:27:b4:
         3d:64:49:60:8f:a2:84:7e:55:99:8d:62:d9:6c:76:8e:e3:9b:
         66:78:57:62:1f:ae:7c:ee:12:f2:a2:7d:6a:22:16:94:1e:6e:
         ea:52:e8:ca:e8:ff:fc:2c:2a:75:41:9c:80:f9:96:a4:6c:33:
         aa:1f:9b:61:12:c3:36:35:c7:15:e3:a2:1e:9f:81:5a:6f:20:
         c7:86:83:e3:77:c9:93:a2:a1:ea:b6:62:32:f0:9a:e2:f9:f9:
         97:ca:ed:b9:8d:c8:a6:03:ad:92:11:da:db:dc:1e:95:bb:40:
         2a:88:b9:ac:d4:b4:c5:a3:a1:74:cf:c7:03:41:ba:ab:3b:c3:
         e8:d1:e6:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4BKn4tuMEPff44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZGM2NzQ1NWEtOTBjNS00YTdmLTk5ZTItMWVmZGQ1ODE1OTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoUrPTyNuJLGrIEazey1jGFXPANQGagZf7Eo
HpiueB01JTZ9unY25cHAUlxVPXL3i78Sw6j8XGKsfqCMrczbS0PS1ugx1Y67mP0S
vs/BRrqvz8kyH8UD3y+gXluUW2q5Gd0McBS2YVSMZZwD2+lrD8lZ7Vc79kpYCtaL
if1TbKHZM3d4/E/P8e+ZkR6WFx0WPwJAGVQrEaYq4g6/OUjOSLs/YOmW1NpQhRvq
4YQczSoMKcaK9mftWOHyQuRBGjj9mLzEh2yEE8iNORi1v9djPEGY/+37ZNRRLXxd
Gj/p4vWuAB1oepJk+Hz1ixnwZz3kRNw2hn3WO18HyDimTkA3EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH339fzKfsDaVQdcx7HpSwTEJbZNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTYxMGY2OTYtOGNlZi0z
NTFlLWJkMjMtMTJlOWIwY2NkNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIP2H4LZpcGkngetnYR4q/TvrTDX+ory8dK+DMEslBSgi5LwKOH3VR9y
k73phjhJ6RVR4TcJRlcX4zgkewQtABPRjuJAHMbK5LR2x95jPU8QoN4C986+PM2m
LNxWlOGy5HHpw6aB8rXkgypsUCESyZHPIakyzb+LOczc4UkntD1kSWCPooR+VZmN
Ytlsdo7jm2Z4V2IfrnzuEvKifWoiFpQebupS6Mro//wsKnVBnID5lqRsM6ofm2ES
wzY1xxXjoh6fgVpvIMeGg+N3yZOioeq2YjLwmuL5+ZfK7bmNyKYDrZIR2tvcHpW7
QCqIuazUtMWjoXTPxwNBuqs7w+jR5vs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:51 2026 by rpki-client