Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90c691ec-8f9f-3e18-aed6-f442d4215f0f.roa
File:                     90c691ec-8f9f-3e18-aed6-f442d4215f0f.roa (raw, json)
Hash identifier:          O86MtuzNS+1IfBsoEBPhbH6Z1dFF5XZhlUJaV2bJnbc=
Subject key identifier:   74:F9:7D:13:EE:03:A5:7C:E3:56:94:16:28:63:A0:99:46:E4:02:8A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E454AC7290D118970CD40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90c691ec-8f9f-3e18-aed6-f442d4215f0f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.21.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:45:4a:c7:29:0d:11:89:70:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e42a4f61-a3f6-49f8-89e2-0df06a7dfc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:c5:b7:a1:47:9c:d4:31:43:f8:6a:81:48:
                    73:e2:23:e4:3c:6b:b6:59:5b:20:ea:7d:2b:8d:26:
                    46:b8:92:f1:7b:e6:a6:24:49:de:36:ae:9d:b3:68:
                    01:54:ce:78:7e:a6:5a:3b:55:17:74:df:f5:1e:e7:
                    f9:a2:95:f8:f1:ea:1b:b5:fb:26:d8:da:2b:d0:75:
                    60:61:12:88:65:57:1b:f1:ec:d0:74:dd:f2:23:be:
                    ae:cb:34:8b:99:a0:eb:58:13:7a:82:7c:56:5a:4a:
                    2c:4a:9f:8c:af:bb:36:f7:de:4b:88:f3:cd:f7:ff:
                    11:b4:04:c3:a4:e4:9f:1c:48:ed:ae:79:f5:91:35:
                    b7:12:99:bb:a4:06:c2:14:bf:89:00:00:d8:df:1a:
                    3f:e2:2f:9e:2f:df:02:6f:b0:5a:14:4e:5c:45:3e:
                    08:83:12:39:90:83:b0:ae:28:67:92:23:3f:16:0a:
                    a3:36:35:cb:85:19:be:e7:e8:6c:d7:51:6e:86:f8:
                    21:64:dd:1d:b3:56:a0:5c:2b:bb:3b:1c:31:03:95:
                    b8:88:13:22:ae:ae:ec:ae:56:ad:d9:9c:ba:68:a7:
                    9f:ef:8a:e1:62:96:d0:0c:5a:e3:42:77:66:04:38:
                    43:85:24:c9:18:e8:4e:98:0a:53:63:6d:da:50:51:
                    a3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F9:7D:13:EE:03:A5:7C:E3:56:94:16:28:63:A0:99:46:E4:02:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90c691ec-8f9f-3e18-aed6-f442d4215f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8c:40:dc:fd:4f:01:8e:bd:5d:fa:0b:32:a0:2d:c7:8a:4c:
         dd:60:58:c6:d7:e7:05:05:aa:79:de:e5:93:54:ee:c3:7b:bc:
         99:33:f1:b5:5f:2c:05:68:12:05:32:1d:25:f4:0c:71:6f:e9:
         98:1d:36:00:a8:01:57:30:87:b4:ef:64:1b:3e:34:86:57:ca:
         7e:6b:27:ca:29:e0:89:54:3c:1a:cd:fe:99:53:fc:13:73:f2:
         f2:cc:4e:bb:43:58:84:97:af:4a:67:04:3a:1e:c7:c7:ed:9a:
         08:6f:a9:1b:d5:8e:b4:f1:0d:d7:c0:f9:65:76:95:82:4e:fb:
         61:a1:26:8b:08:34:19:cf:db:70:f0:87:a6:64:d7:cf:64:c3:
         19:c3:3b:8e:6c:a1:58:ca:ec:8e:71:51:d5:66:bc:e9:31:cf:
         8e:82:75:72:d2:00:35:07:91:1f:ab:a5:d1:60:40:94:9b:18:
         3f:5d:d1:ec:f8:c9:d8:0e:69:a0:26:5d:c0:00:b7:61:1b:0f:
         c2:69:43:1d:c1:a2:c4:e3:cb:0e:63:bb:af:b1:b9:a2:c1:48:
         35:c9:e1:f1:77:ab:b9:99:bb:de:1f:30:00:33:0f:07:f2:9c:
         8b:bc:27:2d:0d:85:c7:14:d8:64:b9:45:85:30:c1:15:e2:0e:
         8f:6c:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:43:16 2026 by rpki-client