Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f518b024-9988-3bde-99ba-c559c049c8f4.roa
File:                     f518b024-9988-3bde-99ba-c559c049c8f4.roa (raw, json)
Hash identifier:          RfZYAw1bsqmFem+vhVfV31VcAu7hLzGJPmS9Ragxwms=
Subject key identifier:   16:D7:EF:A0:86:4B:A6:3C:45:3D:BD:76:08:FB:EB:B0:A0:22:A0:EB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E40D636DEEEDBA0EA3000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f518b024-9988-3bde-99ba-c559c049c8f4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.21.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:40:d6:36:de:ee:db:a0:ea:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=82dab14e-a10c-4579-9a0b-0b6645bced69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0f:a5:12:20:9d:93:0c:90:87:f2:5a:8a:4f:
                    44:fe:2c:17:b4:af:83:53:49:d0:99:d6:b9:cb:8f:
                    d6:84:ea:b1:e9:70:f5:e4:60:4d:77:e6:d7:e3:cf:
                    42:56:3e:1a:12:c0:73:45:73:d3:7a:b8:28:b8:c5:
                    f2:08:6f:6a:5b:a2:83:95:b7:85:08:ef:ad:8f:84:
                    1a:51:3d:b8:39:7e:2e:ac:d8:c6:5c:b6:e1:28:b9:
                    2a:6c:39:69:25:98:1b:69:28:4f:f0:0a:2e:22:f5:
                    c3:23:b9:e6:0f:0d:e5:18:11:fa:6a:95:e8:9a:bb:
                    0c:5c:3e:d2:9a:49:76:d9:d0:4e:36:fa:31:3b:c9:
                    7f:b6:ef:ab:a2:35:e7:e0:f1:c9:97:b2:72:13:a0:
                    0a:ec:c4:e5:9a:55:30:a4:21:0c:6c:a3:7a:45:7e:
                    96:aa:79:b4:10:90:2f:57:f6:3a:2c:33:e7:7c:52:
                    32:2b:95:fd:18:0b:70:31:f8:4d:3e:e7:8a:dd:1a:
                    c7:3e:ce:9d:1b:67:71:9e:fc:03:fa:84:b9:b3:05:
                    bc:1f:18:7a:25:e0:4f:2f:07:71:23:f1:51:b8:75:
                    c2:a0:05:96:e0:e7:c1:ff:83:0f:d0:c7:90:fe:a2:
                    08:0d:a9:a2:53:8f:76:58:77:6e:40:53:14:fe:6e:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D7:EF:A0:86:4B:A6:3C:45:3D:BD:76:08:FB:EB:B0:A0:22:A0:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f518b024-9988-3bde-99ba-c559c049c8f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:fd:ba:56:b9:f1:73:94:03:99:87:e4:83:4a:f4:fb:85:d5:
         9a:dd:c9:0c:b5:e4:c8:d0:56:9c:06:8e:ed:78:f6:ce:59:0c:
         b9:fa:db:9b:cc:81:68:c1:3d:ac:b4:a8:65:96:1c:7a:8c:85:
         b6:d0:15:7e:2d:7c:95:a9:53:10:97:be:14:be:2d:90:63:2b:
         64:7e:c4:46:bf:7d:39:06:e1:92:8e:4d:ff:e9:34:c5:a6:01:
         27:19:9b:cf:40:c4:5f:03:ae:00:eb:3f:ce:f4:24:84:ae:40:
         54:f3:49:34:07:f8:c0:81:e3:5b:53:0e:c6:13:c4:b2:80:4b:
         73:48:ee:1d:5d:2f:b4:b5:79:b0:5a:7e:a4:82:d1:32:14:19:
         53:4e:04:8c:d4:dc:d4:5a:66:63:54:ab:d5:3d:c3:bb:78:2b:
         e9:8b:3e:c3:86:58:97:41:22:fe:ea:37:84:df:69:78:6e:1d:
         80:06:9c:ff:9f:ec:94:9f:8e:86:aa:74:ff:ac:d5:22:c6:ca:
         a2:ce:8c:4b:55:78:57:96:d0:8b:76:83:ad:58:b1:da:47:4d:
         fd:e6:c1:c5:22:03:3d:92:ac:a4:41:cb:88:d7:91:a4:93:d9:
         a2:f9:b5:36:48:a1:a4:29:db:ad:58:ac:47:ef:6f:97:80:ad:
         a8:5f:70:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:05:34 2026 by rpki-client