Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e140f18-5a9b-32cd-a9ce-bdb7c7f4a4c2.roa
File:                     0e140f18-5a9b-32cd-a9ce-bdb7c7f4a4c2.roa (raw, json)
Hash identifier:          mzeoL8/sKGpuX/zk0UbBeSZ8xHnnK9g3PG1llHnZ5S8=
Subject key identifier:   8B:71:47:A7:A8:73:C4:E9:4B:3B:E1:CC:78:0E:77:9B:01:84:69:3C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497BC73670A2B72F41C6EEC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e140f18-5a9b-32cd-a9ce-bdb7c7f4a4c2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        184.21.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:c7:36:70:a2:b7:2f:41:c6:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ae0d7381-4a8e-45dd-9e06-4f89e422e0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:38:9e:f8:48:e7:ce:fb:7a:04:ca:ec:cc:9d:
                    00:c6:e7:ab:ea:8d:79:dd:63:ae:63:fd:45:0f:df:
                    0d:5f:0e:ec:11:e0:85:3a:c5:42:fc:b5:0b:54:82:
                    e9:1d:fb:6b:3a:96:82:13:05:2c:eb:42:8e:cc:b2:
                    52:07:99:83:0d:bd:90:fe:f9:b3:3e:0b:f0:3a:04:
                    6f:1a:62:be:db:f6:5e:a0:b4:ef:38:ed:64:b1:3d:
                    3e:d5:4b:06:48:f6:63:15:12:ee:c6:a6:57:c1:8b:
                    df:45:60:b0:e4:8b:b6:c9:4c:1d:aa:57:a3:d6:5d:
                    14:f7:23:cc:2e:95:6a:23:55:f0:34:93:cf:9e:37:
                    a3:8b:73:4a:f1:cd:f7:20:e3:8e:c3:1d:94:aa:d1:
                    2d:50:9f:96:02:00:54:9d:f6:80:3a:37:53:72:30:
                    8a:31:8e:7f:8c:04:8f:a8:6d:ec:c7:00:cf:e5:a2:
                    0a:86:bb:b4:cb:30:87:55:ab:53:bc:60:5b:1a:db:
                    ca:27:a3:8e:28:79:fe:d9:e4:8a:32:26:3b:8d:c2:
                    9f:b3:ce:e5:79:65:66:ae:2f:2d:17:3d:56:fb:b4:
                    fd:7e:04:90:6e:b0:72:06:d5:8f:e8:2b:ca:2d:02:
                    83:8b:23:ee:e2:8f:e1:6d:41:b4:10:be:57:31:01:
                    c7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:71:47:A7:A8:73:C4:E9:4B:3B:E1:CC:78:0E:77:9B:01:84:69:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0e140f18-5a9b-32cd-a9ce-bdb7c7f4a4c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:4c:15:82:e8:19:97:d2:d5:e2:c3:d7:f9:b4:eb:50:3d:25:
         ed:8c:a2:5a:37:5a:1b:d2:36:20:15:04:ef:a1:b1:ab:28:af:
         42:42:34:5d:23:f5:45:4b:f6:59:24:46:04:6d:d3:fe:f6:aa:
         86:22:14:10:9a:c4:5b:e8:af:98:9f:78:f2:55:94:39:cd:7a:
         48:a9:41:a7:b3:6a:88:5b:ed:c3:c3:1c:29:75:f4:fe:b0:0f:
         e4:2a:b3:56:27:02:0b:85:79:ea:1d:ea:3c:3d:2e:01:8e:c7:
         f6:6c:db:b5:a9:60:9c:05:ff:2a:1b:5d:87:a6:d5:e9:53:26:
         35:1a:b0:7d:01:93:7b:4c:d9:26:37:3c:dc:59:f8:62:52:f5:
         6e:56:72:39:4b:99:64:7f:26:64:30:71:7f:00:01:21:fd:fe:
         d3:db:cf:16:b1:bd:90:c8:de:9f:ff:ba:11:1f:f2:c1:bd:00:
         be:65:29:65:ba:6e:27:04:45:85:6f:ed:8f:ec:95:45:4a:e6:
         83:1a:88:87:d4:6e:f0:a1:4d:62:63:88:bf:3e:cc:29:14:8c:
         31:83:a4:78:77:9f:7a:29:85:6f:c1:79:1d:e0:48:06:84:fe:
         d7:2d:dd:41:8a:b1:f6:27:85:ff:07:55:58:49:76:b3:87:dd:
         8f:d7:b5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:40:51 2026 by rpki-client