Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6b5fef9-682a-300f-adf4-954624a915eb.roa
File:                     a6b5fef9-682a-300f-adf4-954624a915eb.roa (raw, json)
Hash identifier:          Srwc6qfQrCxhmkv4n5BOPVhJTHP7YtvbuDs8BisjCVM=
Subject key identifier:   08:77:1E:EA:46:5E:E0:BC:1D:CC:54:92:76:D1:C8:05:E9:C5:C3:E1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983FA080030263387C7D400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6b5fef9-682a-300f-adf4-954624a915eb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        184.20.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:fa:08:00:30:26:33:87:c7:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d9bbd13b-2382-4688-bb98-816c78b830bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:8b:f8:4d:c1:9a:26:0f:72:92:36:ed:43:
                    5d:25:5d:33:82:7b:94:13:ec:25:d8:29:f5:db:7a:
                    e3:91:c4:c1:41:7c:18:53:d1:49:47:45:e4:ff:bd:
                    f1:31:9b:a7:55:90:2b:1c:df:1a:1e:5f:5b:6e:1c:
                    c7:69:04:5a:22:9e:a8:9d:99:f2:9a:d0:41:27:eb:
                    fa:da:d3:89:da:db:ea:c8:f7:5b:f0:35:46:34:3f:
                    c0:14:5d:0a:ba:09:99:be:cc:6f:b0:90:95:d9:f1:
                    4b:a7:4a:29:96:1c:e5:08:7b:dc:48:97:e4:ee:c6:
                    00:4d:3e:c5:24:99:6b:c0:59:6f:be:5c:ab:aa:19:
                    ef:ed:c7:e6:54:64:f7:f4:5b:16:b1:60:91:7b:4b:
                    75:04:4f:fa:57:d2:d6:a1:03:df:31:85:6a:7c:80:
                    63:06:68:d7:48:c5:83:b2:0a:e6:b4:95:85:07:0c:
                    fe:33:ee:a4:4d:d5:de:3c:ce:08:80:3c:c0:a9:2b:
                    91:ab:a2:4b:28:39:77:0d:5f:c6:e8:2a:3b:e2:1a:
                    b8:49:66:f6:13:b5:01:4a:0a:09:5b:80:12:ad:cf:
                    66:f8:90:1b:de:26:3b:33:a5:f6:82:4e:27:08:b7:
                    4a:59:4d:0f:5d:39:15:da:3c:35:54:bb:90:3b:7d:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:77:1E:EA:46:5E:E0:BC:1D:CC:54:92:76:D1:C8:05:E9:C5:C3:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6b5fef9-682a-300f-adf4-954624a915eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:1d:87:9c:c3:cb:0a:bc:91:dc:09:70:56:62:26:35:5d:d6:
         9b:ee:9f:cb:47:a2:7c:51:d3:9f:c1:53:2b:9e:55:e6:ec:11:
         da:dc:63:05:1e:e6:b2:6a:74:72:f0:89:cb:9d:0f:2f:da:1e:
         13:cf:f4:61:4d:16:7a:bc:d4:14:af:22:a5:d2:23:27:6b:e3:
         40:24:12:4a:84:69:7d:d4:8c:f4:7c:5f:20:f8:6b:a9:0e:27:
         56:2b:e8:c5:2d:98:6d:ea:ae:31:da:2d:ba:2a:86:41:98:89:
         c0:1b:c7:8b:e4:9e:e1:6c:b7:ce:49:1d:9c:d0:fc:11:aa:d5:
         00:c4:20:7c:10:71:83:00:da:6a:54:39:14:6b:21:15:1e:f7:
         26:eb:bb:99:63:13:57:a6:28:5b:05:62:24:81:d7:22:bf:88:
         df:a8:41:21:36:ad:4a:4b:1a:f3:ad:92:95:58:26:a8:d8:be:
         b0:d0:cb:3b:7d:c7:57:b7:2b:04:5c:1e:2e:45:e5:96:f2:8c:
         1b:51:04:37:86:99:db:f1:00:c1:78:64:ae:68:90:5f:83:21:
         7d:e5:7d:cd:c4:e8:e4:44:d5:d2:06:fd:8a:77:ae:f3:ef:6d:
         89:a5:3d:57:be:c7:74:96:63:44:e9:79:85:18:ed:75:b1:8b:
         19:c1:f2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:31:40 2026 by rpki-client