Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ababc651-0b00-32aa-bae0-c0b1713b6a22.roa
File:                     ababc651-0b00-32aa-bae0-c0b1713b6a22.roa (raw, json)
Hash identifier:          3kntcouFGC7FcXfKfkoA8taZFaSz4JlrFkckreicJRs=
Subject key identifier:   82:42:06:13:65:01:91:A3:4E:E5:81:E0:CA:B9:DB:33:64:A3:B8:EF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E34FC15CCFF7376685500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ababc651-0b00-32aa-bae0-c0b1713b6a22.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.20.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:34:fc:15:cc:ff:73:76:68:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=53a5bdde-2d0d-461f-adfe-d52a6e825d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:67:0c:02:76:b1:2d:7d:18:c1:87:fd:3a:15:
                    b3:15:2c:ae:ec:e3:b5:74:1d:57:e8:15:47:46:87:
                    ca:7e:7a:4f:d8:a4:33:49:56:31:7e:e2:d9:90:5b:
                    64:8d:9e:6f:5b:53:7b:67:a6:5e:d1:14:2f:ec:e9:
                    7c:d3:13:a9:8e:9e:0d:6c:16:98:09:b4:56:d0:77:
                    98:14:aa:92:25:9a:85:47:09:31:91:be:11:25:fc:
                    8c:01:74:6c:ce:85:de:fd:85:e3:74:6e:4d:99:00:
                    46:cd:a3:26:df:83:06:c1:3c:29:cb:ae:0e:cb:50:
                    fb:64:a7:71:af:ed:b4:03:bd:ca:6a:ca:6d:be:e4:
                    14:e5:e4:00:ff:b3:6e:d4:db:b2:a7:03:14:38:90:
                    95:fd:90:3e:a3:8d:0f:f9:03:64:33:62:4f:3c:a5:
                    e0:65:9d:ca:a3:3c:f1:ce:c7:e9:89:e3:12:ea:aa:
                    99:4b:1a:be:82:94:1a:f6:1e:87:74:dc:f3:ef:3d:
                    22:15:1f:23:db:71:9d:4c:c7:b8:02:35:02:f7:0a:
                    ea:75:88:a0:d8:b8:31:cb:a4:f1:70:6f:26:d9:af:
                    92:c6:c8:ad:99:2c:19:13:73:67:ea:cb:3c:0b:7a:
                    59:fd:9e:16:c4:6b:34:16:b1:0b:3d:c6:37:3c:be:
                    b4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:42:06:13:65:01:91:A3:4E:E5:81:E0:CA:B9:DB:33:64:A3:B8:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ababc651-0b00-32aa-bae0-c0b1713b6a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:12:3a:c9:ad:41:85:4c:ed:c9:e8:78:70:25:70:6a:20:60:
         35:44:f3:3e:f0:fd:c9:1e:24:c6:99:be:0a:39:72:b3:ab:1a:
         82:24:23:9f:6c:46:4b:44:d5:96:17:35:7e:d6:ea:7e:65:4a:
         c9:20:3f:54:51:c3:66:21:34:c9:47:95:f7:82:5f:67:ba:f3:
         e2:1f:a9:de:84:6e:2e:5b:ad:2e:92:ae:1a:c6:4e:60:68:1d:
         e1:67:5c:84:45:be:0d:04:7e:1b:13:cc:72:2e:1c:29:fa:83:
         54:28:38:e1:f7:42:82:76:86:d4:4c:9c:46:82:ed:26:d6:e5:
         50:4a:5e:ec:21:70:b3:ed:1f:39:70:a4:8b:96:b8:90:bd:56:
         94:84:83:10:1c:fd:ad:87:f3:2b:20:f7:bc:2b:d3:a5:c3:5e:
         a2:6b:db:04:7d:a1:56:e5:5a:7e:6d:8e:52:23:26:2a:78:37:
         5b:e0:b2:01:e7:26:d4:e4:cf:1a:22:42:f8:75:9a:0c:a5:4c:
         85:62:74:97:e8:c9:82:63:92:e4:a5:7d:be:ca:f9:4d:a3:57:
         5b:b5:9f:1e:cd:16:9b:1b:cf:13:3d:28:1b:f9:43:b6:d0:d6:
         46:eb:e0:fe:53:ee:9a:17:8c:1b:06:8e:c5:9a:41:93:97:70:
         ba:39:e7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:06:27 2026 by rpki-client