Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8af5a33a-d62b-326f-9346-aaa6207253dd.roa
File:                     8af5a33a-d62b-326f-9346-aaa6207253dd.roa (raw, json)
Hash identifier:          IV/WTiTVX+FS5MdaqIOnrtY+ArtX3+RMTO0Qw0jfVjA=
Subject key identifier:   DA:B8:C0:F3:3D:0B:ED:91:04:D7:C4:A2:9D:DC:E8:FF:9C:53:32:BD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E774C823398232D8E7B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8af5a33a-d62b-326f-9346-aaa6207253dd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.63.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:77:4c:82:33:98:23:2d:8e:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8b91ad29-bd71-4221-99e6-4d0d03f29c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:69:93:46:08:e6:ce:2c:8a:3e:f2:4d:cb:
                    f4:37:5b:eb:81:0a:cd:c7:40:ca:4f:01:84:06:18:
                    94:a3:a1:4a:73:a2:5a:13:d8:a9:52:8d:21:0e:43:
                    23:ef:8e:e2:d5:e7:31:b8:94:a9:d3:e8:ff:9d:43:
                    94:bd:a9:89:4d:a4:b2:d6:85:e9:2d:3d:7a:ec:88:
                    ce:59:be:d4:9c:84:3a:ee:f9:1c:00:cb:1e:50:fa:
                    5d:db:29:3e:5c:f5:42:cd:6f:35:94:c8:3d:60:26:
                    59:74:50:79:2c:3f:29:b7:9d:cf:16:5f:a7:ca:ec:
                    85:25:0c:30:e1:4c:f4:59:1d:ab:17:dd:91:94:d8:
                    13:a1:56:05:6e:e7:97:45:f4:30:f5:0b:dd:75:31:
                    b0:e8:a9:d3:4f:53:bc:6b:32:c6:75:e1:2c:f4:70:
                    5f:93:3f:e6:88:73:29:bc:3b:b9:39:4f:2f:fc:38:
                    ca:8c:4e:db:cc:45:13:50:d2:ca:e0:9e:f6:6a:a9:
                    54:70:d7:36:ab:c2:74:81:0c:15:fb:82:1f:85:0d:
                    b5:26:4d:05:89:0c:10:6d:7f:f9:e0:e3:a1:0b:5d:
                    50:07:27:ad:f7:4d:a2:b2:fe:53:33:1a:9d:c1:26:
                    08:ed:a6:ac:5a:b3:74:1a:e8:0f:32:64:58:89:1d:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B8:C0:F3:3D:0B:ED:91:04:D7:C4:A2:9D:DC:E8:FF:9C:53:32:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8af5a33a-d62b-326f-9346-aaa6207253dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c5:87:dc:8c:07:65:5b:cb:95:fd:02:db:fc:8f:02:fa:ec:
         b7:27:9b:13:8f:37:5b:d0:6a:6c:08:c3:50:49:9c:8b:9f:c4:
         15:2f:9e:70:c1:16:e9:68:ba:ca:ab:40:98:33:4b:18:33:5b:
         4c:5b:61:c3:94:88:53:4b:f6:52:88:78:9e:be:ad:a8:16:fd:
         4b:63:a1:0e:ab:98:3a:8d:4e:fa:3d:34:99:12:15:66:1d:e9:
         c6:91:7d:3c:fe:6b:72:3f:4f:ac:f3:b4:95:05:0b:fe:cc:26:
         19:6a:ee:dd:6b:80:f4:57:0d:b7:01:4d:b6:59:98:3c:f5:a5:
         01:55:1d:65:89:84:69:c4:f0:ed:12:fe:b4:c5:3c:16:72:62:
         fb:c5:e7:c7:a2:46:67:c9:ed:dd:f6:50:ee:a2:71:46:b9:12:
         0b:01:8c:b3:c0:72:7e:15:29:0a:02:5b:c5:a5:8e:b5:60:a1:
         91:8f:42:ca:ce:e0:5f:39:85:ee:76:6f:00:d8:c1:c6:30:40:
         a0:51:59:c4:06:13:2c:5d:0a:26:c8:81:66:6f:6c:24:e5:00:
         5e:15:d9:21:ff:e7:f7:b1:5d:6d:5b:c6:ea:f5:e5:5b:36:01:
         f0:91:6e:59:9d:74:01:bc:bb:b6:67:ca:a4:72:93:31:b1:2e:
         7b:4b:52:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:12:57 2026 by rpki-client