Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08035b7d-b8f9-3c1b-8007-9a0823390cda.roa
File:                     08035b7d-b8f9-3c1b-8007-9a0823390cda.roa (raw, json)
Hash identifier:          Huwudnx6uuWDs1oeKEFdvzcA6Ya4r2o07+uTfFadMMQ=
Subject key identifier:   B3:58:50:AA:DC:E0:C5:13:73:D9:F0:34:39:E7:AD:B0:00:73:1A:3A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0C8DD0047C9EBBE613800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08035b7d-b8f9-3c1b-8007-9a0823390cda.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:c8:dd:00:47:c9:eb:be:61:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=f5d9bfaa-53b3-457d-ac00-1023746c7e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b2:fb:6a:3d:80:35:4d:2f:25:39:13:40:2a:
                    2f:49:59:6d:18:f5:ca:41:8a:3d:d7:dc:2c:66:da:
                    91:ff:1c:da:7b:64:2e:0e:53:4d:5b:99:ba:f2:5d:
                    89:fe:77:6b:4a:b4:7d:29:db:8f:dd:61:93:5b:ab:
                    85:38:3c:ae:12:68:c3:5e:82:ff:49:0f:50:fa:26:
                    65:b9:df:58:5f:63:6c:77:f9:b2:1c:83:d3:20:6b:
                    10:54:9a:25:49:0f:b7:3b:93:80:35:c8:56:9a:2e:
                    19:f1:04:df:b4:c4:15:7d:19:5b:03:a9:82:8b:42:
                    7a:ff:2b:9e:ca:60:46:3a:86:7b:36:2e:d9:e8:2b:
                    ce:54:3b:13:9d:3c:7e:f9:ad:70:77:65:09:f3:64:
                    8a:ae:ca:09:da:72:2f:37:02:a3:17:68:a1:6b:4b:
                    dd:84:dc:40:11:be:2f:9f:ca:b7:cc:f9:88:5d:4d:
                    f7:1e:47:2d:f0:4c:2d:27:25:eb:22:6c:31:64:c4:
                    23:3b:89:5c:b1:25:01:39:22:d8:9b:fc:18:bd:83:
                    f9:09:a6:a4:32:db:a7:4b:62:37:44:9b:d3:b6:ad:
                    67:de:91:6c:58:ef:50:5a:69:32:df:c8:f0:75:e6:
                    7f:68:57:e1:41:e0:fb:c7:9d:55:4b:3a:0b:eb:10:
                    6f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:58:50:AA:DC:E0:C5:13:73:D9:F0:34:39:E7:AD:B0:00:73:1A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08035b7d-b8f9-3c1b-8007-9a0823390cda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f1:00:3d:4e:01:d2:3a:82:57:2f:31:df:e2:c0:67:f3:23:
         c2:b9:b2:09:fa:97:ad:71:0c:df:10:ea:ac:53:31:c4:8a:15:
         54:84:46:95:d6:ef:14:05:04:26:42:3d:a1:31:ae:2f:e1:d1:
         f9:dc:5a:4d:81:8b:54:26:07:d3:55:a0:bc:c5:4a:15:20:e4:
         68:72:53:4f:74:8c:71:ff:9c:13:ea:a7:db:20:f8:2f:2c:2b:
         25:43:ad:87:2c:4b:79:35:8f:af:4f:ce:27:3b:00:04:e8:b6:
         09:2b:9c:d4:e4:fb:5c:6e:4c:88:1c:2d:84:25:80:06:06:5c:
         86:1c:27:c3:75:10:79:c7:9d:46:10:43:f4:0c:f1:99:e5:bd:
         ce:5f:97:c0:df:4b:fc:53:b1:f8:8a:3d:f5:09:ed:ad:67:69:
         30:7b:3a:58:f1:24:57:3a:f5:69:2d:fe:fe:c3:bf:34:50:d7:
         7e:f7:25:08:18:ca:ca:36:51:1f:86:e2:f2:94:73:a0:92:af:
         db:cb:71:56:57:06:a9:ab:47:85:0f:95:44:be:8c:18:52:c8:
         e4:26:69:6c:60:37:52:3c:e4:25:90:5b:37:75:22:7f:4e:82:
         e0:f5:ab:7e:98:40:3c:2e:d1:6e:46:d7:97:af:76:04:b5:91:
         46:77:15:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:41 2026 by rpki-client