Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e18b04c-3244-32f9-942a-21a6095619c0.roa
File:                     7e18b04c-3244-32f9-942a-21a6095619c0.roa (raw, json)
Hash identifier:          nzL22rlcAJaA23FU3LpxqnDtRyIvyzhfQo+al1CwWWg=
Subject key identifier:   BD:2E:FC:A6:91:DF:90:D6:25:D5:23:A5:F5:71:12:0B:30:04:EF:8D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0C72F9D8C52BEA60ABBA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e18b04c-3244-32f9-942a-21a6095619c0.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:c7:2f:9d:8c:52:be:a6:0a:bb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=648085e9-6859-4c7f-be07-daf1c43c57f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:63:a9:a3:4e:d0:01:d2:7b:6a:53:c6:0e:fa:
                    8e:95:10:1d:b3:82:c7:8f:11:f4:3c:32:f3:c1:ff:
                    ac:28:ab:cf:8d:92:1a:ad:f5:6b:13:ef:7f:a8:91:
                    43:cd:ec:25:39:67:f4:d4:f2:e2:55:49:94:51:a5:
                    c6:0e:23:fb:31:9b:a2:98:20:ad:19:a4:13:f9:be:
                    d3:4a:e5:9f:b7:44:03:04:e7:9e:95:a5:f2:72:54:
                    87:f3:6a:02:1f:d7:37:01:93:f4:88:06:9e:4a:67:
                    e1:87:d5:3a:a9:cf:61:fa:3e:5c:61:33:64:72:8e:
                    8a:fc:f8:28:59:58:81:0e:24:e2:df:40:52:c0:e5:
                    4c:6d:c9:c7:51:3e:09:ff:6e:bc:7b:1d:10:68:9f:
                    22:54:c9:f9:0d:eb:ec:9e:1a:f5:f5:a3:dd:ec:21:
                    8f:af:98:c5:91:c8:63:af:86:d8:e8:15:b7:fd:7a:
                    93:05:99:13:f4:a7:98:60:7d:c8:01:7e:fa:bc:40:
                    f7:6a:c5:b9:3f:60:11:f1:7f:60:14:54:77:e7:56:
                    76:15:7e:8f:e9:2a:59:22:68:32:1a:48:95:fe:85:
                    b5:d2:d0:74:9a:e3:85:16:cc:c4:d2:08:33:e5:79:
                    4d:6e:d2:c2:57:bf:28:15:25:2c:c8:96:f0:0e:77:
                    86:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2E:FC:A6:91:DF:90:D6:25:D5:23:A5:F5:71:12:0B:30:04:EF:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e18b04c-3244-32f9-942a-21a6095619c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:51:b3:30:ad:3a:a4:d7:cd:64:e7:4d:db:a4:7d:12:ce:63:
         f5:90:56:39:1c:d7:b9:d8:6b:bf:c3:43:c1:9f:45:ff:75:c8:
         7b:4b:bb:98:2b:37:17:85:c8:b0:61:25:1d:6c:ec:27:7a:1b:
         fa:5b:f1:3d:e4:cd:14:d8:6d:38:2c:20:8b:61:52:ed:e3:a4:
         af:aa:b2:dc:f3:f5:90:56:11:01:6e:13:a8:92:8a:16:d1:aa:
         f8:b0:61:d4:23:e0:c9:e2:61:6b:c5:c4:40:cf:11:81:7e:3b:
         e9:80:f1:ed:6f:7d:f8:24:2e:e3:b8:97:fa:be:cd:a5:3b:10:
         66:a2:ce:95:cf:42:14:8b:30:ac:e6:09:54:2e:f1:da:96:85:
         8c:74:cf:97:da:32:70:a4:9a:97:85:2b:df:1d:d8:16:99:e3:
         f8:f7:76:de:bd:71:70:d9:9d:58:6b:50:32:c7:98:0b:a3:45:
         4c:e4:4d:dd:b4:16:d6:4f:31:a1:b2:9d:b3:2e:a6:2e:aa:06:
         7d:aa:99:68:10:a5:66:2b:9d:d4:de:2c:cf:e1:e4:ed:49:7e:
         2d:b1:41:a2:9a:29:f0:77:22:9b:d3:aa:b7:20:43:26:e1:c7:
         64:dc:57:03:6f:3c:27:4d:d3:05:60:88:52:17:2a:4a:b8:19:
         97:9f:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:53:47 2026 by rpki-client