Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daa10777-c684-32fe-9f6e-447d88b5dcff.roa
File:                     daa10777-c684-32fe-9f6e-447d88b5dcff.roa (raw, json)
Hash identifier:          /l5EhvI9bWDNT1JCdi29X50StK+bqXDP4hQ/lhicO90=
Subject key identifier:   7D:15:4F:C3:19:F9:92:3C:4E:E3:6B:D8:71:BD:28:D5:66:29:44:01
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0C421604DB94382C58E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daa10777-c684-32fe-9f6e-447d88b5dcff.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:c4:21:60:4d:b9:43:82:c5:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=ef6be66d-aece-40b1-856f-8c2780825c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:9c:da:e2:99:9a:b7:96:db:dc:40:bc:69:
                    7c:46:53:ba:a1:2f:9b:71:c9:55:c8:45:23:86:a7:
                    5b:11:42:4c:d7:b5:27:d8:bf:9a:3f:ae:77:f0:f6:
                    b4:9a:36:4b:c9:f4:62:03:08:be:7d:b3:1d:2e:97:
                    64:98:bf:b5:91:66:64:04:92:61:10:2a:05:3e:6c:
                    4c:f4:db:00:a1:61:d0:20:93:87:3a:24:e5:03:1e:
                    c7:01:1a:0f:76:37:7b:18:7f:47:60:1f:ec:43:d4:
                    91:3c:5b:27:fa:05:ac:4a:9b:83:d6:0e:82:00:da:
                    5d:db:e2:83:3c:59:58:7d:21:31:ee:5d:4e:2e:f6:
                    3d:46:25:7b:a1:f0:c8:95:1a:68:34:71:bc:a9:80:
                    17:e1:a8:0b:2f:e6:c5:96:25:c8:8d:bd:98:4c:67:
                    f7:4e:ef:5f:2b:ae:2e:88:95:e8:b9:8d:40:01:a4:
                    54:fa:72:be:ab:48:24:c7:06:46:86:65:d0:75:44:
                    0a:42:63:a8:d6:eb:21:6b:32:38:69:53:98:e3:ba:
                    f1:cb:51:f6:34:41:03:fa:c3:7a:83:1d:d1:6a:c7:
                    7f:8c:85:f1:17:7d:e0:07:b2:fd:4f:a4:22:a3:7f:
                    99:b0:5a:97:d3:c5:af:91:97:74:5a:25:d4:34:d5:
                    11:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:15:4F:C3:19:F9:92:3C:4E:E3:6B:D8:71:BD:28:D5:66:29:44:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daa10777-c684-32fe-9f6e-447d88b5dcff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:df:ae:57:87:53:8a:39:24:8f:0a:0f:7e:9b:a4:e6:bc:ea:
         86:34:f0:ba:7e:56:84:9f:64:77:8d:86:dc:c1:f5:12:40:d3:
         97:01:f5:f6:67:40:58:68:a4:8d:e4:52:28:ee:8e:30:04:6a:
         3b:5c:2e:01:b0:94:07:05:29:07:c0:95:ce:24:d9:76:d5:99:
         68:4c:d0:f4:0a:dd:56:ca:7c:cf:e6:69:9b:73:57:bd:8b:2b:
         a9:0d:d4:59:58:6c:87:8f:85:78:70:d8:36:f9:a2:2f:82:2f:
         48:60:a0:ba:4e:df:bb:64:6e:96:a5:b1:c5:00:77:ae:2d:60:
         3c:4d:f1:28:15:de:b7:aa:8d:56:76:96:3d:42:66:a1:a0:03:
         81:e7:82:cc:7f:d2:4a:64:7a:57:fb:6b:41:de:6b:35:9a:e0:
         73:ff:07:dd:62:51:22:74:02:ea:ee:93:c6:d8:12:bc:0f:2d:
         c6:16:e4:84:b7:7e:2e:38:98:f5:ce:b4:b7:b4:14:83:f0:59:
         7c:c3:f9:dc:55:c3:20:38:04:05:35:c8:e5:ce:de:5f:83:14:
         aa:0e:26:ab:88:8f:b0:a1:ac:84:68:c8:dd:5b:4b:6c:5b:f9:
         70:56:57:79:8a:26:76:96:4f:ad:84:51:47:a8:e7:fe:9f:33:
         f9:a9:54:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:44:04 2026 by rpki-client