Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12aa8211-effe-3720-9df0-f21a07ad81f4.roa
File:                     12aa8211-effe-3720-9df0-f21a07ad81f4.roa (raw, json)
Hash identifier:          TrJpuOWoPEoaFQzboR3iwxWmm4SMsYX8r8GuIDKreao=
Subject key identifier:   3D:56:37:2B:94:C5:95:7F:EE:E6:2A:E7:36:FD:D4:3D:62:21:24:81
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C26440EC2C3CF6AE6D4C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12aa8211-effe-3720-9df0-f21a07ad81f4.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.21.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:26:44:0e:c2:c3:cf:6a:e6:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=709c7935-cfe8-4f4e-80fb-c80b3e2852ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:90:58:45:06:4c:44:84:84:89:7d:3a:e3:
                    f7:e3:4e:1f:7e:54:8b:fd:55:cd:e9:ec:1f:67:b4:
                    c2:3c:69:4e:81:75:5d:f8:70:99:f7:08:60:f7:a4:
                    e8:7f:25:24:99:76:a4:25:09:88:70:0e:bc:55:a4:
                    e8:7e:ef:3f:c6:ae:03:ad:fa:4b:77:84:6a:62:dc:
                    9f:60:38:92:4d:df:52:9c:ad:83:ed:e6:9f:c4:7a:
                    e3:ac:fa:4e:de:a9:5e:f5:09:84:e6:e9:8b:54:0d:
                    86:48:0c:c5:60:2c:a6:7a:87:f9:7b:df:bb:07:0e:
                    a5:67:d4:39:26:ab:70:10:3a:cf:1b:ca:26:f1:7e:
                    d2:e5:0e:5a:f8:e0:14:27:f6:66:e4:4b:d4:fd:05:
                    09:74:af:2d:e5:f0:4d:aa:9c:5d:87:d9:30:06:f6:
                    06:38:49:e8:38:55:60:9c:9a:ce:7a:06:d3:72:ab:
                    2c:24:6c:91:6e:5f:d2:94:06:a5:48:c7:f5:df:ef:
                    ac:91:16:e4:cd:07:fe:da:67:e1:6d:cb:f2:a2:b8:
                    55:8e:dc:f0:40:ec:2d:cd:54:cf:5f:97:0d:b7:6a:
                    e6:2f:ca:72:19:6c:00:22:91:9f:4c:1e:da:f0:cb:
                    c2:fd:e1:ed:02:75:70:aa:ac:89:b4:cd:94:3e:04:
                    7c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:56:37:2B:94:C5:95:7F:EE:E6:2A:E7:36:FD:D4:3D:62:21:24:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12aa8211-effe-3720-9df0-f21a07ad81f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:35:c3:75:f8:71:15:9b:75:e6:13:8d:a1:21:f5:bf:74:2a:
         db:b2:34:ba:b3:32:f8:01:44:97:2e:f4:26:bb:11:5a:58:29:
         a9:33:00:b4:ec:0e:75:18:fe:bc:12:45:d7:64:42:8d:b6:ce:
         82:a8:24:9e:42:ff:a8:79:9f:e8:1b:4b:84:f4:be:39:37:c2:
         97:91:ac:01:2b:58:c3:07:d1:72:40:df:c8:bd:0b:c0:13:0c:
         b2:35:9a:fb:33:9f:3b:96:58:b6:e8:56:05:fa:9a:57:18:8b:
         23:a5:53:a5:29:44:0a:e6:b6:c7:f8:69:7c:50:ac:67:a6:b7:
         2b:21:d6:fc:c5:09:ae:63:c0:22:1d:60:ce:38:2c:ac:b8:58:
         2e:a2:c3:ff:e8:42:60:d2:ba:98:b2:1a:5a:79:74:09:2a:30:
         56:73:59:7d:0f:b3:cc:d0:45:f9:e7:68:93:4d:a0:00:12:05:
         3c:77:04:b8:93:20:9a:78:8f:be:90:5d:06:74:93:1f:3b:08:
         e3:ca:e4:e0:71:8a:75:3a:ed:f1:8e:4a:0d:49:61:a1:97:3e:
         25:85:5b:f4:fe:de:1a:9c:fc:be:b0:0c:62:d5:c6:80:8f:af:
         23:ee:6b:35:ae:f1:d2:02:76:49:29:da:a1:80:8f:c3:b4:e3:
         72:85:51:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:27:16 2026 by rpki-client