Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e098f45-cfef-3979-8466-a5b85563d21c.roa
File:                     9e098f45-cfef-3979-8466-a5b85563d21c.roa (raw, json)
Hash identifier:          dUuk3pVZP9rL5izF69JsVf9Lh0xSeK9+0ihXjFGDzYE=
Subject key identifier:   82:26:6C:59:D3:9F:BE:0D:8E:B1:D0:59:EA:99:40:26:96:02:A3:29
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BA1B623D21E32E58808A8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e098f45-cfef-3979-8466-a5b85563d21c.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.20.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:a1:b6:23:d2:1e:32:e5:88:08:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=7cfc75ed-e190-4bf9-9e8b-3e09b5ea5f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:b7:d9:43:ca:ba:c1:63:00:6d:51:d0:88:
                    b6:42:d1:cc:db:12:80:a7:c8:4e:60:0e:69:77:bb:
                    bd:06:c0:37:ac:50:7a:7f:2f:b8:8c:3e:03:ce:d8:
                    d0:8e:08:1b:26:75:cc:b2:68:fa:93:38:02:87:91:
                    7a:71:2e:b4:64:3e:cf:0e:2a:99:4a:5b:19:ce:06:
                    1e:45:01:47:ab:1e:6e:7a:df:40:97:85:c5:23:be:
                    4d:19:a9:00:fd:f7:f0:27:7f:a8:e9:59:2d:6a:9d:
                    1b:4e:1b:3b:02:be:c2:ed:80:6c:a6:ee:ff:b3:79:
                    0b:0e:2f:18:fc:eb:c4:b0:38:fa:fa:cb:43:5a:92:
                    71:d4:09:01:b4:99:83:95:8d:7c:7e:15:eb:fc:87:
                    29:28:86:15:ba:c4:70:00:3d:b5:88:ad:f3:be:15:
                    94:06:86:1f:49:d5:be:f3:5c:8e:2e:bc:35:d3:21:
                    d9:6b:12:78:fc:be:90:70:9c:96:3c:b3:e5:f4:00:
                    27:2e:b6:66:fa:a6:ad:d2:fc:c4:f2:52:56:ee:5c:
                    72:3b:81:0f:11:03:fe:64:34:f3:0e:3b:a6:51:92:
                    fa:ec:74:17:4e:b2:9d:5d:fb:fa:56:83:36:c9:74:
                    15:9d:af:91:26:8f:9a:75:77:96:67:d4:29:24:d0:
                    ed:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:26:6C:59:D3:9F:BE:0D:8E:B1:D0:59:EA:99:40:26:96:02:A3:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e098f45-cfef-3979-8466-a5b85563d21c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:05:0b:de:f5:f5:e0:62:ae:07:72:e0:1f:55:8b:bb:14:c5:
         67:1b:39:dd:5b:2a:d4:42:1f:27:76:90:6a:cf:67:9d:58:5f:
         53:1a:b3:b7:a1:18:fb:69:9e:a4:19:51:58:54:06:b1:22:18:
         58:f9:9d:25:7c:e9:0b:fc:5c:30:cc:0e:8c:b4:77:0c:77:c6:
         28:3c:df:c9:1d:18:74:24:c3:fe:69:d3:56:59:5d:6b:6e:0d:
         95:03:5f:9a:f9:fc:c0:9d:22:48:74:a8:7e:c2:93:da:8e:38:
         b5:db:7c:d1:55:11:9f:71:ae:0b:ed:37:e2:65:e6:09:98:5b:
         e1:62:b8:55:fc:6e:ec:23:f6:af:95:f3:90:39:1e:2a:7c:9b:
         2f:19:bb:4e:7a:d4:bb:47:42:b0:dc:10:a4:8f:81:31:4a:2b:
         24:c8:ec:d9:be:91:49:f4:1c:ea:9e:06:2b:44:ef:7a:50:dc:
         74:18:08:52:8d:93:cd:14:e1:5a:d5:58:e5:07:73:5c:2d:09:
         69:9c:d9:ad:e4:10:10:85:cd:13:d9:92:1e:66:d1:ef:b5:b4:
         d7:1b:35:e2:79:bc:09:96:02:ec:bb:3c:3c:52:a1:4b:8c:04:
         a3:d0:ef:9c:ac:d9:dd:8f:43:51:03:d7:bf:6c:48:30:79:6b:
         3f:9b:45:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:25:37 2026 by rpki-client