Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6df2e232-4012-387f-a541-2b1211e3a714.roa
File:                     6df2e232-4012-387f-a541-2b1211e3a714.roa (raw, json)
Hash identifier:          +9LbfLlg+CpUD3yKK+gPj24Ny5ZToAY3QVf0/7t8K40=
Subject key identifier:   DB:AD:27:97:1F:3A:9F:DF:14:C2:D4:D2:DA:1B:F5:F2:99:FC:46:5B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79FF5099E658FC4AF99C380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6df2e232-4012-387f-a541-2b1211e3a714.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.21.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:f5:09:9e:65:8f:c4:af:99:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=53b13b56-43ed-4c42-a005-e503500f31a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:db:c5:12:0a:c9:a0:6c:a6:d5:cd:fd:13:fc:
                    0e:f7:90:89:67:50:ec:d7:38:d9:23:a9:93:f1:c8:
                    42:a4:3e:90:18:33:14:99:8e:e5:5a:db:09:bb:63:
                    c4:1c:d2:79:54:8d:2e:1c:f1:42:ee:a9:b9:fe:de:
                    3c:6d:a9:86:7c:0f:79:f4:cb:eb:df:18:8e:9b:b6:
                    de:81:ad:6c:ea:cc:7a:e9:d3:f4:99:32:50:17:79:
                    fc:da:42:7a:ca:c2:78:4a:c6:f0:f8:11:64:55:84:
                    33:a9:36:90:db:5d:c9:5d:68:ae:81:7b:25:97:c3:
                    78:20:3f:45:8b:1c:a7:6e:88:b2:a9:ca:18:f4:32:
                    9b:3c:89:51:41:d1:29:89:81:01:70:5a:31:08:9b:
                    b8:eb:48:60:52:66:dc:72:a7:e6:fa:10:1c:d2:c6:
                    f9:2e:ae:56:60:57:78:7a:28:c6:2f:66:0d:02:a5:
                    95:35:ca:cf:d6:aa:1c:84:61:ff:8e:23:3f:82:86:
                    95:f7:29:18:35:1f:da:95:cd:da:43:82:98:05:40:
                    42:e9:6b:45:77:9f:69:74:d3:e8:0e:90:26:17:42:
                    37:af:b8:9c:41:8d:d7:91:88:51:80:a8:23:58:90:
                    e1:ea:71:30:0a:db:0f:3a:03:a8:43:29:27:f3:41:
                    6d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AD:27:97:1F:3A:9F:DF:14:C2:D4:D2:DA:1B:F5:F2:99:FC:46:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6df2e232-4012-387f-a541-2b1211e3a714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cc:17:86:33:61:00:19:6f:a7:7d:59:48:6a:95:d0:c0:cb:
         db:83:64:e5:24:64:2e:5e:4b:d1:36:d1:cc:21:46:5b:7b:41:
         b3:41:51:6c:ba:c5:b8:82:4a:6d:87:7e:62:a8:af:85:32:2e:
         ce:54:43:aa:4c:be:84:f4:18:18:86:05:27:0b:13:c5:fc:66:
         bd:70:5a:87:1b:c1:2b:14:cd:c8:bc:4b:4a:39:33:fe:0b:b5:
         e7:e4:4a:98:1f:42:e5:3c:b7:a9:fc:72:05:3f:e2:a7:35:01:
         c1:d9:79:0d:5e:35:8d:b4:93:d2:1d:07:ca:80:4a:e8:c4:79:
         49:0d:28:3b:ae:52:7f:51:59:b9:80:92:74:45:79:61:55:2a:
         e1:19:70:12:c0:d7:6c:3b:8c:30:6d:c1:67:ef:e9:07:52:68:
         bb:17:62:cb:06:55:37:34:ac:7e:f3:e7:41:07:1d:7e:52:63:
         e7:f4:a5:83:24:77:c1:d9:59:e6:8b:a7:8d:bc:3b:be:d2:6b:
         c7:1e:d1:a0:6a:c0:b5:44:42:fe:13:5a:4f:6b:db:ff:46:1a:
         26:f8:de:c3:d7:ec:cd:ef:98:33:b9:54:17:0d:2a:dc:f0:94:
         31:cc:13:90:05:c9:17:f3:90:ac:9c:70:67:d2:c4:c9:f3:8f:
         cb:36:7a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:38:30 2026 by rpki-client