Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5e8357a-253f-3e60-abc7-d02483080732.roa
File:                     c5e8357a-253f-3e60-abc7-d02483080732.roa (raw, json)
Hash identifier:          /efAKJSLm3CyZqojVnPDfSqf9UZ3Tri4ehOk3SDlEMk=
Subject key identifier:   32:0A:21:99:AB:CB:93:D2:A8:87:E2:66:FA:E4:ED:FE:47:F3:9B:FB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0BCFA2AAB538A61CD2300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5e8357a-253f-3e60-abc7-d02483080732.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.20.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:bc:fa:2a:ab:53:8a:61:cd:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=01a8cc4d-df37-45a2-a578-dccdcd755142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:54:42:b6:7b:98:e0:73:5d:2f:d8:d4:4a:f9:
                    76:a4:04:5d:a2:f6:7e:1e:a3:24:d0:ed:cb:e0:a6:
                    1a:a0:9f:11:3b:98:46:12:ad:e6:ca:36:ce:3f:34:
                    4f:7b:e8:9c:e3:64:5e:c8:99:2e:4d:cc:9e:42:92:
                    aa:22:c5:c0:52:3b:95:e2:bb:86:09:9c:67:fc:df:
                    d0:a1:fb:e4:1b:ed:e8:58:c3:d8:40:f4:6b:d5:bb:
                    65:06:11:90:6b:da:53:63:b4:e6:61:b6:69:25:28:
                    41:ee:06:ee:32:d0:a7:ee:04:4b:97:4f:ce:d9:ae:
                    43:2a:9c:3f:ec:87:86:f2:67:7c:ff:6b:31:9c:b8:
                    35:87:85:72:cd:0b:92:be:b0:2b:fa:ea:5a:fe:fe:
                    10:fd:6f:1f:91:5c:92:8c:0d:ff:61:7d:e2:dd:06:
                    38:b2:96:df:23:3d:19:d8:a7:40:2f:93:8f:ef:fd:
                    b3:65:49:8b:9c:36:55:4e:b6:77:c5:93:ed:d5:9f:
                    5c:af:1f:38:50:3c:37:71:07:b4:53:f6:01:fd:cb:
                    47:d6:00:61:31:3b:a8:31:ab:83:2a:ce:75:12:58:
                    be:26:e3:e4:7c:08:8c:ec:ee:eb:c7:7f:3b:d7:75:
                    0c:64:5d:04:ca:d4:d9:14:5b:ae:0d:5a:1d:49:f0:
                    14:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0A:21:99:AB:CB:93:D2:A8:87:E2:66:FA:E4:ED:FE:47:F3:9B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c5e8357a-253f-3e60-abc7-d02483080732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:19:5a:5a:8a:e8:0b:d8:ba:70:ef:0f:c1:58:ca:d3:62:2b:
         89:b8:ac:83:c8:2d:2d:6e:ee:97:00:9b:2e:46:85:95:e8:8a:
         54:4c:74:55:59:0e:40:b6:8a:63:c0:b9:d3:d0:71:ff:c3:5c:
         79:00:a8:c7:2f:c0:31:b7:3e:24:95:c9:41:a9:45:47:5a:82:
         f0:d1:f9:2b:a3:34:1f:a1:20:80:0f:09:18:a2:a1:7a:cf:7f:
         a7:67:92:0c:35:33:75:4e:85:36:b9:25:b6:42:7f:0c:e4:f3:
         07:fa:b6:60:ac:b5:18:cc:fd:08:72:27:91:23:ae:dd:61:96:
         7c:99:1b:44:08:06:db:0a:d4:f2:2e:e5:59:a6:2c:8f:57:18:
         98:db:c2:28:6e:14:ee:97:9f:4b:b9:7d:0f:8d:16:74:7a:97:
         cc:80:bd:8d:b5:bc:7e:3f:29:31:3a:2c:73:b8:69:1e:64:b9:
         dc:9f:b0:73:d4:fe:85:ba:cf:1b:f8:26:a0:26:1e:fb:ad:f8:
         9e:9b:b2:88:31:aa:58:8e:ad:0d:8a:d2:09:f7:6e:ef:6a:8d:
         42:6b:e1:f3:70:9f:df:67:16:e8:9e:7e:ea:d7:85:92:ed:4a:
         70:2a:d3:bd:fd:bb:1c:e1:c9:ca:4b:3d:aa:b9:57:7e:69:51:
         cc:96:ec:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:32:08 2026 by rpki-client