Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36fe5e57-4469-31fa-938c-133d25642ae9.roa
File:                     36fe5e57-4469-31fa-938c-133d25642ae9.roa (raw, json)
Hash identifier:          UBuQHtsRIqHLv0hmS+Gw0eJAUg4KAbfcQX99K3mf/iU=
Subject key identifier:   3E:6B:8B:C4:16:56:6E:23:01:58:99:E1:F1:FF:EC:4F:7B:BF:2C:25
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0C8AD40E2B575BF04A040
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36fe5e57-4469-31fa-938c-133d25642ae9.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:c8:ad:40:e2:b5:75:bf:04:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=94c1a4d5-f18d-4c80-8283-0b761e233f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:31:6a:42:0b:f5:dc:ad:11:b1:4e:81:44:
                    7a:4e:db:92:68:9a:67:eb:0d:43:1e:1c:9d:2d:5f:
                    3c:57:1e:d4:a3:25:78:52:8a:7f:78:ae:43:a5:c4:
                    ba:e0:26:4b:8c:9a:af:29:8a:49:e6:1b:37:0c:99:
                    65:44:0b:b4:84:81:6a:ef:60:f0:97:ab:97:8a:85:
                    51:25:7c:e8:21:e2:5c:f3:8d:5c:34:ce:ac:6f:59:
                    d1:d3:bb:cc:bf:ec:7f:58:c1:f9:a7:c5:00:4f:60:
                    08:5b:ea:bd:31:74:c7:e3:36:ed:cf:f8:54:09:3e:
                    1f:13:3f:fd:3c:0c:2d:6f:4e:1a:2d:d8:73:f8:71:
                    06:5a:b6:36:c3:2c:13:35:d7:39:70:45:99:02:67:
                    5f:ba:6c:cd:fa:80:d3:d9:e7:e1:c1:f5:af:ad:66:
                    77:1c:e5:63:e4:89:89:ec:cd:a8:19:b1:65:63:3e:
                    55:7f:48:7c:19:e8:61:7a:e3:89:59:0c:2a:fc:a1:
                    5c:fa:e1:33:90:46:5b:32:67:6c:01:cb:de:09:b1:
                    8a:e6:b5:7c:9c:ba:1c:bd:44:e1:fb:fc:f3:07:30:
                    ea:14:1c:31:c2:e7:a2:36:cf:4e:68:25:0c:b9:13:
                    c5:1c:f7:4c:67:0e:77:7f:bb:3b:61:7e:ac:74:01:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6B:8B:C4:16:56:6E:23:01:58:99:E1:F1:FF:EC:4F:7B:BF:2C:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36fe5e57-4469-31fa-938c-133d25642ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:db:b0:cb:b4:db:31:19:ed:e7:9d:71:ca:92:a5:8e:98:23:
         60:33:99:57:d5:dd:d9:bb:b3:9d:c0:cb:34:d0:29:b5:52:12:
         1d:e2:66:ab:f0:2d:c8:16:14:d2:fe:7d:96:4c:20:3e:e6:47:
         a3:c8:74:e3:52:7e:ed:d0:f5:81:52:cd:e6:5e:6a:ed:42:b1:
         f6:be:85:3f:cc:e3:37:15:df:d5:b9:3e:9f:40:80:10:ed:be:
         93:ef:98:04:7e:51:94:6c:09:c5:60:0a:06:1a:98:13:cf:10:
         b7:77:95:ab:08:d5:02:80:54:18:09:c2:6a:df:a8:71:ff:19:
         55:75:29:5c:36:6e:7d:04:c8:d4:47:e8:7d:9e:c1:5b:56:c5:
         e3:f5:db:d4:b5:30:c0:b1:8e:d8:59:9f:99:e9:ab:94:fc:d2:
         af:82:62:87:54:70:44:d9:c6:d4:9f:65:e6:26:a9:bb:68:d7:
         8b:5c:22:11:7f:41:8f:cc:06:1e:3b:92:72:29:c0:df:5d:62:
         06:14:b7:9f:8c:68:73:13:e8:b8:5b:b2:95:06:d0:01:f1:f3:
         f5:18:58:9b:61:ed:44:78:d1:52:d2:de:37:70:cc:5f:87:23:
         7e:51:0c:84:70:c0:70:14:86:ee:ed:13:22:52:9c:95:fb:31:
         12:0f:f3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:19:42 2026 by rpki-client