Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04177071-a8c0-3ad4-a205-8ef13006ec2b.roa
File:                     04177071-a8c0-3ad4-a205-8ef13006ec2b.roa (raw, json)
Hash identifier:          YuRxBC2+udGEvmVu+oDh1ZjDAESl3E6g+1DmH2+mfLI=
Subject key identifier:   83:63:A8:9A:08:62:A8:E5:F3:B4:13:D0:D6:53:5E:96:35:FF:5A:98
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C31359FB396D7ED709F60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04177071-a8c0-3ad4-a205-8ef13006ec2b.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.63.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:31:35:9f:b3:96:d7:ed:70:9f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=ca2ba2eb-afaf-4447-adcc-d3bf3153517f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:19:09:56:60:b5:d5:e5:27:70:fb:58:48:7e:
                    e1:0a:4e:43:af:c6:25:0d:1b:0a:0d:7f:cf:dc:ca:
                    7a:77:d9:75:8d:3c:ff:a9:05:4c:c3:94:ee:d0:13:
                    ff:c6:42:60:9a:7c:eb:73:8e:50:e2:78:6e:b9:fe:
                    74:74:ed:ad:5a:73:5d:87:1d:c6:37:c6:b0:ad:ad:
                    33:9b:42:48:ec:89:e2:5f:81:67:cf:74:a2:02:e2:
                    4f:b7:a4:9e:6b:09:76:c7:93:35:fd:75:76:a2:e9:
                    02:2a:5b:a6:57:78:74:4f:9f:36:0d:24:3a:49:66:
                    cf:b5:0b:66:99:ac:0b:96:58:dc:a7:74:94:af:b4:
                    df:1e:74:c2:d7:70:cd:f1:44:78:55:7e:5e:2b:bf:
                    c1:39:ba:4d:75:2f:3a:51:ef:0e:f4:a0:4d:91:ad:
                    5f:41:d5:e0:4b:c4:5a:b9:09:84:e8:e3:e8:af:83:
                    1a:d4:56:f0:9d:99:0f:70:e5:ee:ef:23:21:ec:cc:
                    d1:4b:a5:89:96:51:42:14:16:e3:a2:46:88:14:86:
                    83:25:8c:37:c7:fb:9f:d9:1c:d2:44:a2:38:fe:1c:
                    12:d9:86:3d:28:cd:e3:d5:9f:85:de:dc:d2:a8:35:
                    f0:7a:fc:d4:48:2a:b3:bd:62:b8:71:86:e7:df:9d:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:63:A8:9A:08:62:A8:E5:F3:B4:13:D0:D6:53:5E:96:35:FF:5A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04177071-a8c0-3ad4-a205-8ef13006ec2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c7:aa:ed:f0:89:32:18:66:a3:21:2c:a0:39:a0:fe:fb:4a:
         e8:02:45:15:da:75:ec:da:71:ea:c0:df:dc:38:fe:5d:ce:87:
         7f:31:f4:30:44:71:a4:f7:18:f5:7e:cf:50:96:f9:49:8d:c7:
         e8:d3:2c:9d:46:23:0e:5c:6d:08:9c:d1:cd:df:d5:97:ea:19:
         4d:ae:b5:11:ff:fd:30:75:e6:ca:ad:df:31:ad:37:3c:e8:55:
         ab:9c:4e:01:53:fc:0d:31:4a:46:c8:b8:05:ff:f8:7a:e2:ee:
         83:41:38:3a:d2:64:a8:f2:5b:0a:11:7c:44:02:6c:b8:60:1e:
         28:32:3a:f4:01:2d:0b:20:0e:ff:da:fb:58:df:80:12:73:db:
         a8:f4:e4:1d:ba:5c:b0:65:1a:13:27:4a:3e:7b:31:89:ae:dc:
         23:62:16:87:95:d8:82:58:b0:33:56:ec:1e:9d:82:a7:4f:94:
         a8:58:2b:f5:49:b7:2e:29:83:26:3d:d0:86:92:b6:d5:04:a8:
         39:76:25:4d:5a:04:d6:a7:6a:79:eb:5d:d2:3c:8f:4d:0c:12:
         8a:b2:e2:8d:de:ac:da:8e:13:74:43:ee:97:95:52:6a:bf:cf:
         fc:42:3f:70:75:72:8c:4c:3a:93:8c:6c:bc:ea:00:83:c6:fd:
         a8:1e:f5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:25:10 2026 by rpki-client