Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcee54ac-cd02-3335-a97e-3de1e00cb503.roa
File:                     bcee54ac-cd02-3335-a97e-3de1e00cb503.roa (raw, json)
Hash identifier:          6WQ+VXsGkve/kjn4Q4AI7d531IB376tsfUJZ1k2eYrk=
Subject key identifier:   AC:8C:D9:83:C9:88:27:5A:F7:43:47:CE:69:B4:79:F6:B4:75:1B:6C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0D12A073FFD5FD52B7900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcee54ac-cd02-3335-a97e-3de1e00cb503.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.62.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:d1:2a:07:3f:fd:5f:d5:2b:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=2bc8ef22-e015-47f1-ac9e-369b1b9b09d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:c2:03:91:bc:ca:6e:0e:75:e3:a1:72:dd:
                    6a:55:40:0c:7d:ce:e9:8e:7a:a1:34:d3:23:b2:63:
                    ff:6c:91:d6:e3:9a:56:4e:23:8c:90:51:ea:25:f5:
                    4f:e6:74:df:0c:2b:ea:f4:62:39:3f:71:61:c6:a6:
                    28:5c:0a:2f:10:9e:4c:ed:78:d6:25:ef:8e:2f:87:
                    2d:69:65:88:16:00:0d:59:f0:41:95:58:76:8a:e4:
                    66:40:4d:73:cb:75:62:22:2f:01:37:8d:2a:e3:bd:
                    81:de:c6:af:50:09:94:da:90:65:1e:4a:61:40:1e:
                    58:64:80:a7:42:3d:8a:a8:2b:dd:f5:25:64:b1:28:
                    ff:0f:d5:6c:0e:c4:36:16:d4:f3:de:47:c2:71:f0:
                    dc:af:12:eb:41:8b:57:52:16:55:ce:13:2f:6d:3d:
                    79:80:87:6b:aa:67:43:5b:c6:76:9a:70:73:d8:77:
                    ca:29:a3:47:bf:3b:aa:fa:17:17:58:4d:a7:a5:73:
                    ce:4b:b0:77:7d:26:6a:7e:ae:91:15:9c:f8:fd:92:
                    4e:01:91:01:7b:07:be:d6:1d:1b:45:52:64:f8:57:
                    38:b8:90:5f:c9:aa:3a:b9:9a:3d:58:4c:7b:18:80:
                    d6:96:b9:8c:0d:d4:78:e1:38:73:26:40:7b:f3:2f:
                    24:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8C:D9:83:C9:88:27:5A:F7:43:47:CE:69:B4:79:F6:B4:75:1B:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcee54ac-cd02-3335-a97e-3de1e00cb503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:36:b2:c8:48:da:d0:24:94:be:8e:55:00:5d:22:16:93:d1:
         d1:4d:08:53:c6:45:27:b8:eb:83:10:42:8e:d7:2d:65:ae:0a:
         10:9e:28:26:fb:d8:26:47:36:1f:1c:2c:31:83:ef:7b:ac:42:
         92:2e:b1:f8:3c:78:47:2b:e6:31:1c:24:fd:bb:06:02:cc:b6:
         f8:c6:ba:dc:ac:fe:00:5a:e3:fe:b4:9f:86:a8:84:25:da:03:
         cf:9c:4a:1b:aa:4f:34:96:76:25:93:b9:29:22:a2:23:88:4c:
         6d:7a:e6:e9:02:76:f1:94:e1:e5:b5:e9:a4:8c:a8:51:d8:f0:
         b6:e3:75:65:eb:80:64:f3:cf:6b:f0:42:11:6a:33:71:db:bd:
         30:a2:c7:c5:49:6d:ed:43:e2:fc:81:6c:3a:f8:8b:68:24:cd:
         96:28:a3:fa:ea:1a:05:34:3a:3f:ad:7a:d2:24:1b:fb:3d:d4:
         1b:4f:66:23:da:81:3a:ba:ec:c3:7e:b6:13:3e:83:79:a4:a0:
         45:ce:db:3d:d1:4e:12:b0:21:f3:19:a0:0f:f9:28:59:7c:b7:
         9a:d3:f1:ae:e5:41:f1:72:f3:c8:ac:15:6b:8e:fd:79:35:f0:
         14:61:1a:e1:5c:94:e9:53:e7:97:8f:ff:aa:56:9f:dc:ac:cd:
         22:de:5c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:30 2026 by rpki-client