Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c363c90-f889-30a6-828c-7644782a4348.roa
File:                     0c363c90-f889-30a6-828c-7644782a4348.roa (raw, json)
Hash identifier:          5Afy9zdTboS4PFYRzhCtqNEsExaoJyZY6ryKQ/2TGjc=
Subject key identifier:   DF:F6:3D:22:29:A4:75:65:92:1B:47:8D:CD:92:8A:5B:33:CB:C3:18
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E00DCA258F5B1120AE2780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c363c90-f889-30a6-828c-7644782a4348.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:0d:ca:25:8f:5b:11:20:ae:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=cc148c95-62bb-4c6c-a2f1-4c4832edfeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:85:fc:83:68:08:4b:dc:0e:fc:0b:fa:b8:
                    b0:9a:26:13:51:03:3c:94:01:01:d4:a6:8a:38:fd:
                    e3:0c:f9:50:0e:88:a1:ee:9a:fc:c2:78:97:13:79:
                    8e:44:19:9b:f7:58:28:02:1d:92:5e:9e:01:14:aa:
                    23:c1:fd:d8:27:41:25:a7:f3:ba:54:5a:70:97:46:
                    e1:a7:21:d5:3b:24:9d:03:a7:81:f6:fc:f5:56:3b:
                    07:6a:d0:b4:8f:4d:6f:54:e4:93:08:e6:3d:9b:2e:
                    ae:0e:dc:6e:a6:8a:34:92:db:d5:5d:13:e8:34:68:
                    3d:a4:a3:b1:3e:84:3e:b3:7d:09:c8:78:8c:53:17:
                    5c:5a:2f:b9:c9:dd:14:57:c2:cf:eb:60:62:26:d0:
                    43:4d:35:10:f9:c9:be:f3:d1:60:5e:56:0a:24:90:
                    6e:33:e9:4f:ee:e5:7c:f3:b5:70:6e:79:47:71:8e:
                    21:53:60:58:24:18:d0:b0:c8:d5:d7:56:51:c7:49:
                    c1:40:71:6e:6f:80:ad:d7:25:86:39:fa:60:cf:c9:
                    e9:bb:20:c6:54:74:93:cc:5a:b4:e4:a0:b3:4b:4f:
                    8f:c5:83:ba:46:09:3f:11:25:a5:04:a5:68:47:24:
                    d5:ef:d3:f4:f8:fb:cd:05:97:05:93:63:39:d5:db:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F6:3D:22:29:A4:75:65:92:1B:47:8D:CD:92:8A:5B:33:CB:C3:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c363c90-f889-30a6-828c-7644782a4348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2b:65:a7:f9:dd:bc:3b:a2:ea:c3:73:2e:e4:1e:2e:83:0a:
         35:b6:22:4a:b0:c5:bb:4b:29:ae:17:31:42:e1:16:3e:0a:7d:
         65:3b:04:5d:73:46:02:50:6a:56:ce:3e:4c:d8:01:a7:f7:2a:
         61:07:2c:d8:44:dd:a8:ac:0c:4b:31:bc:9e:13:a1:16:20:66:
         b9:7f:37:34:4b:46:7d:58:ed:37:f7:cb:6c:44:f1:06:df:0b:
         00:ac:50:22:8c:8e:fa:7a:df:5b:fb:79:f5:2e:5a:41:d1:ff:
         0f:7f:9d:47:b8:a8:67:d1:12:e4:df:c9:23:cd:6e:3a:1d:d3:
         c9:29:17:5f:12:ed:fc:12:02:9e:1e:22:a8:a6:1c:bc:b8:28:
         ca:cd:64:5c:52:50:a3:4d:7b:61:7e:fb:10:48:9f:46:1f:2d:
         fe:53:83:bd:d7:de:07:7e:d0:d9:74:88:6a:8b:c3:dd:39:0f:
         bc:bb:54:a4:2e:aa:76:63:95:00:06:ca:d8:4c:9b:5e:19:2f:
         7a:7b:50:53:14:5d:52:0e:77:c3:99:f3:0c:e3:87:25:f7:a2:
         a6:ed:c2:5a:04:8b:ef:4c:8a:be:35:d8:1d:aa:e8:81:cf:fb:
         a9:ab:e7:e9:df:dd:b7:fc:d3:d7:b1:d1:e6:e6:a8:17:bd:e8:
         c1:17:1d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:29 2026 by rpki-client