Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5484cce4-10ff-3825-a2d1-7e43165b0b77.roa
File:                     5484cce4-10ff-3825-a2d1-7e43165b0b77.roa (raw, json)
Hash identifier:          odHbIX0Z6HPaSSW4l2GaUtOkhzhfPDY7SAVJVC7eW0s=
Subject key identifier:   58:F6:66:3D:75:5F:F1:11:49:39:7D:5C:C5:CA:55:6A:8E:DB:FC:43
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C2C142365CAE45EEC6000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5484cce4-10ff-3825-a2d1-7e43165b0b77.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.62.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:2c:14:23:65:ca:e4:5e:ec:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=f56e2124-177d-4170-afea-394402ac998a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:4b:23:ad:40:30:1c:3b:7b:ea:0a:84:a6:
                    7b:42:07:97:66:5c:55:dd:83:98:61:12:92:c2:09:
                    25:40:41:46:63:91:72:49:83:c4:4c:1d:0b:7f:df:
                    6f:e8:7c:3c:7d:36:67:2c:2d:e3:cc:c8:e7:53:a0:
                    6d:31:b2:da:67:60:b5:3c:01:0c:34:d3:c4:9a:ed:
                    ef:a2:76:d3:34:41:ef:2a:fa:b1:71:47:8c:bf:3d:
                    01:58:50:62:09:db:78:0a:e3:65:f9:af:e7:c8:1f:
                    10:bb:74:a0:65:18:66:48:ce:3b:97:2e:41:e9:ba:
                    51:9a:cb:13:f0:32:95:37:0a:7f:08:3c:34:69:b3:
                    87:71:ef:ef:f1:43:4b:ec:22:b4:c8:ef:73:e7:45:
                    0c:db:1b:70:74:5e:78:6f:b2:a4:a8:34:f6:af:18:
                    10:7e:93:20:cf:07:35:61:f9:f5:f7:5c:83:13:d5:
                    86:00:42:b3:07:fc:b7:24:ad:f4:88:ac:df:15:66:
                    29:7d:d9:de:a4:19:15:05:6c:cd:f4:76:53:70:fe:
                    a3:2a:6b:17:17:34:18:ae:fe:80:cb:65:67:fe:47:
                    69:ed:74:09:26:69:79:c8:9c:39:8a:03:79:0d:55:
                    e4:8d:98:67:7d:1a:1b:25:66:7a:c4:83:d9:cf:40:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F6:66:3D:75:5F:F1:11:49:39:7D:5C:C5:CA:55:6A:8E:DB:FC:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5484cce4-10ff-3825-a2d1-7e43165b0b77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:51:9a:3b:83:da:f5:60:81:b0:a8:cf:d8:32:94:e6:79:42:
         d8:f6:ed:99:c7:5c:a4:e9:61:58:b2:3b:5e:c2:d3:7b:fd:aa:
         2d:50:45:18:3b:d6:f4:18:08:85:81:d0:f0:09:a7:c0:65:d8:
         be:2e:e4:ee:06:65:99:6e:70:02:25:e1:bd:01:16:d8:23:e5:
         11:b6:50:f2:9c:0a:8e:2d:ea:1a:71:83:2b:ed:f0:d1:15:54:
         f4:6a:f8:b6:79:c6:78:d2:2d:f0:84:63:2c:06:5f:18:ac:a6:
         62:93:5b:35:a1:d7:d3:77:4e:87:64:45:b8:c6:91:87:5d:a4:
         89:95:a0:1f:5f:00:bb:a4:4d:d9:04:0d:ba:2e:5e:df:24:1a:
         6b:9f:e2:67:7e:e1:fa:8f:f7:84:0a:c1:f2:03:ae:7f:46:34:
         3a:a5:06:1e:6a:7c:b3:7f:67:56:73:1f:cc:0f:8c:c1:81:58:
         a0:54:57:e0:1d:3a:c9:ed:85:44:31:f9:9c:9d:05:b1:b7:01:
         b1:25:1e:00:c6:4c:d8:8c:df:07:73:f9:2c:94:2e:4e:88:59:
         55:98:ac:f9:56:57:3a:94:d0:07:0a:6e:50:5f:03:cb:ea:93:
         ee:ab:a6:20:cb:4e:2e:8d:cc:49:d5:2e:72:01:5f:c8:cb:ee:
         93:57:4e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:24:27 2026 by rpki-client