Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b5f99b30-4603-35ae-ad98-204811afee7d.roa
File:                     b5f99b30-4603-35ae-ad98-204811afee7d.roa (raw, json)
Hash identifier:          c04F7irPKVVch1n5x2Ck3ZOn0ZRE2CedZ8eCMb2nL5w=
Subject key identifier:   99:25:D2:AC:13:8F:78:49:1C:B7:C7:61:21:EC:95:AB:29:53:E1:23
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0C125906C6EF2017912C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b5f99b30-4603-35ae-ad98-204811afee7d.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.20.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:c1:25:90:6c:6e:f2:01:79:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b1935534-c430-4ea9-8c12-1291e3937366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d9:18:44:f7:08:75:b1:67:29:92:c8:2c:e5:
                    e5:d9:62:07:2a:4e:60:52:c6:41:d6:d2:a9:a2:42:
                    ba:a2:c4:a1:03:3f:88:0b:05:05:fe:66:61:81:b7:
                    53:a4:f7:c3:1b:55:67:76:65:7f:01:b7:57:c0:92:
                    64:61:6c:ce:ae:69:b2:d2:ec:1e:e3:14:0b:c6:80:
                    69:30:9a:d3:05:b0:cc:92:94:c0:09:9f:8e:c0:b0:
                    ad:bb:1e:d4:30:c6:f4:7f:05:ce:9b:c6:60:e0:ff:
                    0c:68:eb:4e:3c:26:62:62:8d:7d:c2:99:70:3b:47:
                    9c:b9:31:fe:a9:96:2b:d9:9e:a8:15:46:43:6a:9e:
                    17:95:5c:c0:2f:f7:31:a4:91:a7:03:7e:86:9f:a3:
                    6b:55:8e:a0:03:3c:98:be:3e:75:c6:4d:63:1a:d1:
                    5d:dc:81:da:25:26:23:e1:44:dd:99:7e:43:d0:66:
                    f8:78:84:ef:6e:c2:b4:96:8d:bf:b9:23:5e:49:70:
                    36:e3:cf:7e:96:af:f0:4d:b2:74:fe:bc:ce:10:4c:
                    3b:a6:b0:97:04:7f:a6:71:64:a1:ba:c9:d8:f4:ae:
                    c1:e4:01:7c:8f:df:a1:97:df:c5:a7:83:a1:cd:2e:
                    9f:7f:61:52:df:b2:cc:1e:e3:1a:65:de:95:8e:a7:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:25:D2:AC:13:8F:78:49:1C:B7:C7:61:21:EC:95:AB:29:53:E1:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b5f99b30-4603-35ae-ad98-204811afee7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:4c:9d:2b:b7:f1:3a:79:dc:fe:a9:4f:71:02:f8:a2:ab:b3:
         86:14:eb:60:b5:e4:a7:91:8b:a9:53:63:66:ae:e6:49:e7:e6:
         22:2f:ee:9d:a6:c6:93:97:23:61:72:a3:b6:be:05:60:ce:6b:
         0a:4e:f3:2e:20:e8:84:bd:58:36:3c:4e:e8:c2:d0:d0:cd:b7:
         5b:0d:44:46:0b:81:9a:a2:f0:f8:c9:6c:b1:94:c9:5e:cc:98:
         ca:01:1c:ff:79:24:92:83:84:62:ee:dd:9b:33:f8:6e:d2:aa:
         3c:4f:98:7f:76:67:7c:09:9c:a9:c9:b8:97:d5:d0:57:47:93:
         87:9b:aa:65:b8:41:2a:e3:9a:8f:04:32:19:f6:44:7d:08:49:
         de:99:59:59:1f:dd:e5:05:c3:19:d5:68:e6:66:0e:11:ad:ca:
         76:1f:e7:0c:b1:ad:32:e1:81:9e:2f:c1:63:12:d5:d6:85:eb:
         b0:ad:c7:0b:98:ab:77:15:1c:a6:6a:05:f2:a5:22:54:2f:11:
         8e:1c:3a:bb:d0:52:0e:b7:46:3b:10:7a:11:77:a6:dc:de:56:
         7e:da:88:0f:45:8a:be:e9:72:c3:8f:66:af:36:8f:6d:ba:99:
         c1:0c:6e:5c:dd:fe:79:d9:0d:b8:13:de:1b:e0:e9:64:a7:60:
         8f:c8:db:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:04 2026 by rpki-client