Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/60ce84bb-411a-3354-a9b2-94ab2a0879b1.roa
File:                     60ce84bb-411a-3354-a9b2-94ab2a0879b1.roa (raw, json)
Hash identifier:          gM3QAFv2H6JM8AYUW/FNr5d2HFoFvgekNKd67s/JxBY=
Subject key identifier:   EF:04:62:E3:16:7D:A4:BF:5D:19:57:F3:E9:A1:04:C9:2C:0E:4C:DD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E3FE358D52D6770C1E9C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/60ce84bb-411a-3354-a9b2-94ab2a0879b1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.21.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:3f:e3:58:d5:2d:67:70:c1:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=90a7b078-c9fd-4f62-bb06-6f3b72375559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:50:aa:69:0c:41:76:f9:d7:1c:95:29:d6:f2:
                    04:10:bd:a8:80:c2:02:9a:73:b4:07:57:f2:f6:b5:
                    ae:10:ec:75:a5:50:80:fe:42:c6:ed:05:94:18:6e:
                    ee:8e:31:57:39:24:5e:bc:af:07:68:b3:20:90:0d:
                    e7:85:39:7d:3b:2a:8c:67:52:fb:4b:fa:58:14:78:
                    59:c8:5e:f1:49:c2:7c:19:ec:27:f8:d8:3d:1b:40:
                    f2:22:a5:69:4d:39:52:5b:05:f1:98:60:6e:a8:8e:
                    ee:c1:59:2b:77:39:56:13:bf:48:61:5c:9a:51:d3:
                    44:bf:98:fd:0e:7d:73:00:11:73:c8:ea:1c:c6:a7:
                    9d:f9:8f:1d:55:4c:84:19:de:d2:97:4c:97:97:35:
                    87:a4:32:b5:6a:de:92:df:eb:b9:ae:4b:5b:8f:3b:
                    15:96:cf:f2:88:d2:75:1f:58:de:5d:43:3f:50:72:
                    22:77:6b:8f:bc:da:44:47:2c:54:fc:80:52:a5:7f:
                    a7:ac:8f:cb:bd:e4:15:6d:2c:6c:c9:a1:aa:d1:d1:
                    41:06:b6:12:cb:5e:ec:34:29:8c:e6:f7:b0:af:f7:
                    db:96:03:1a:78:12:7c:4a:b0:32:bd:38:48:e1:53:
                    3e:02:bc:80:7d:b0:19:5b:d0:bd:cf:ca:20:6f:7b:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:04:62:E3:16:7D:A4:BF:5D:19:57:F3:E9:A1:04:C9:2C:0E:4C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/60ce84bb-411a-3354-a9b2-94ab2a0879b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:3a:c4:a0:1a:a6:3c:12:86:66:0e:6e:dd:ed:81:fe:ca:2c:
         bc:77:5a:be:8e:b1:7e:9c:8b:67:57:ed:e4:62:aa:7e:6c:50:
         1a:0c:1c:e7:9a:4d:42:10:6a:d2:74:f0:c4:80:ad:79:6e:2f:
         6e:2f:9e:f9:2b:dc:c2:93:6b:72:8d:3b:f5:1b:8e:4d:7b:a7:
         cb:36:5d:7a:ab:a7:00:ad:be:b9:36:4a:37:4b:86:1a:35:5f:
         1a:c0:63:22:8f:cd:5a:9d:6f:3e:cd:c1:62:ef:9c:7e:51:8b:
         35:14:e5:cd:7b:d4:bc:4f:e0:a1:0a:4a:99:f6:3c:cb:ed:4b:
         75:57:f5:42:8d:24:dc:96:f3:45:10:95:55:c3:7b:7d:48:18:
         f2:45:64:ef:1c:e7:88:0b:12:d4:cf:86:d5:4c:ed:85:50:e4:
         0b:ed:a7:1f:c0:b9:14:ae:2c:9c:3e:97:d0:b2:cd:be:fb:db:
         f6:71:27:8a:b2:8d:52:30:db:55:af:9b:0c:22:55:4c:9a:18:
         5d:2e:82:d5:40:5b:39:43:2c:10:1e:8b:57:76:de:30:d2:13:
         8d:ec:23:d9:ea:de:25:af:13:97:04:de:b1:75:50:62:7d:5a:
         42:db:b9:75:99:81:dd:57:32:a0:8f:66:22:79:49:d4:8e:ca:
         bf:f0:f5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:38:20 2026 by rpki-client