Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0568538f-faf4-3c0c-9100-e598c23a9e88.roa
File:                     0568538f-faf4-3c0c-9100-e598c23a9e88.roa (raw, json)
Hash identifier:          IvVlLI92ROW3thXlyYasGcg200k/YbwMNHm2S5bcdE0=
Subject key identifier:   30:16:37:34:DA:E0:66:5D:2E:60:F5:44:1E:AB:2C:D7:6D:E7:3C:6D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79FF9DFBEEC615886E67950
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0568538f-faf4-3c0c-9100-e598c23a9e88.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.21.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:f9:df:be:ec:61:58:86:e6:79:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=04fc15b8-26fe-4711-9652-6769d6788c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:66:e2:7f:8f:d0:1d:8f:87:62:e0:e6:2a:
                    de:88:2e:9f:86:ff:3c:93:30:05:1d:ba:c4:97:5f:
                    db:2c:f5:61:28:8e:f1:ce:c3:5f:6d:80:45:58:33:
                    df:f0:91:17:cf:e4:6f:10:b9:6a:84:a2:f2:d6:c4:
                    e1:14:9e:d7:14:d0:83:b3:6c:6f:8c:d4:00:14:86:
                    f4:0e:55:e5:0b:5f:91:fd:56:73:f2:d3:85:c1:03:
                    dd:6b:08:65:21:96:57:89:81:4c:23:9d:3c:0d:29:
                    5f:82:6b:d9:85:f1:41:fe:e5:45:03:52:2c:17:67:
                    e6:d8:eb:81:cb:93:78:46:88:a2:17:15:07:b0:e7:
                    b2:f1:4a:4a:1e:56:1c:a8:d6:51:3c:66:42:97:74:
                    99:25:6c:4e:0f:0e:2c:50:7d:6c:36:d7:9b:4e:cd:
                    50:44:20:af:47:14:70:fc:8f:5f:0c:76:c4:0d:94:
                    b9:81:ef:bc:6a:bd:75:5e:1f:b6:40:ce:34:2c:8b:
                    25:10:72:f7:37:4a:7b:ce:00:dd:bd:b4:12:20:5d:
                    3f:5d:1d:bc:0f:cb:a6:ba:13:d2:49:2c:4f:7f:3e:
                    68:59:02:e2:42:06:8a:a7:48:11:0e:d9:15:48:93:
                    a3:5f:94:0d:df:25:86:08:b5:ee:96:7f:8a:3c:38:
                    a8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:16:37:34:DA:E0:66:5D:2E:60:F5:44:1E:AB:2C:D7:6D:E7:3C:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0568538f-faf4-3c0c-9100-e598c23a9e88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:3e:f3:26:3a:26:bd:d6:d6:0b:f3:34:76:19:39:d3:69:3c:
         b4:b5:77:ba:f9:bf:75:0d:96:d0:63:a6:cd:b4:a4:ab:31:2d:
         24:de:2b:00:3e:ce:06:bc:1f:cd:1e:36:36:38:01:f2:26:43:
         5a:79:05:e1:8b:78:ae:30:1e:a5:aa:1f:44:6a:ee:16:95:4e:
         b5:98:f6:dd:76:1a:bb:13:dc:f3:c4:1d:9b:b1:ab:6d:24:89:
         52:be:53:08:b3:7b:34:55:52:60:66:73:c3:af:54:78:37:be:
         d4:2d:99:c6:6a:21:bd:55:fb:f7:2f:1f:07:97:c3:10:94:5e:
         2f:1a:b9:06:c4:d5:a8:47:de:cb:9b:3e:78:8a:1c:fc:89:e7:
         9b:ac:77:2d:cc:bf:5c:c2:5d:aa:5f:a9:1c:21:bc:8d:1e:ce:
         fc:20:92:43:3e:ba:78:9b:f5:1f:c0:d3:41:e5:eb:f1:9e:d1:
         74:06:ef:27:a1:8e:65:73:f5:71:71:40:a1:3f:84:48:6f:fd:
         86:80:66:0a:6e:92:6c:a9:f3:4d:91:9f:f4:b4:ab:39:0e:a3:
         90:75:35:a7:27:c0:ed:1c:fa:f6:09:b8:6a:89:46:94:a0:1f:
         84:6c:a3:38:d3:83:f3:31:47:22:7a:a5:8d:cb:f4:a7:36:55:
         c8:38:4f:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nn/nfvuxhWIbmeVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDRmYzE1YjgtMjZmZS00NzExLTk2NTItNjc2OWQ2Nzg4YzU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYxm4n+P0B2Ph2Lg5ireiC6fhv88kzAFHbrE
l1/bLPVhKI7xzsNfbYBFWDPf8JEXz+RvELlqhKLy1sThFJ7XFNCDs2xvjNQAFIb0
DlXlC1+R/VZz8tOFwQPdawhlIZZXiYFMI508DSlfgmvZhfFB/uVFA1IsF2fm2OuB
y5N4RoiiFxUHsOey8UpKHlYcqNZRPGZCl3SZJWxODw4sUH1sNtebTs1QRCCvRxRw
/I9fDHbEDZS5ge+8ar11Xh+2QM40LIslEHL3N0p7zgDdvbQSIF0/XR28D8umuhPS
SSxPfz5oWQLiQgaKp0gRDtkVSJOjX5QN3yWGCLXuln+KPDioGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDAWNzTa4GZdLmD1RB6rLNdt5zxtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDU2ODUzOGYtZmFmNC0z
YzBjLTkxMDAtZTU5OGMyM2E5ZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM8+8yY6Jr3W1gvzNHYZOdNpPLS1d7r5v3UNltBjps20pKsxLSTeKwA+
zga8H80eNjY4AfImQ1p5BeGLeK4wHqWqH0Rq7haVTrWY9t12GrsT3PPEHZuxq20k
iVK+UwizezRVUmBmc8OvVHg3vtQtmcZqIb1V+/cvHweXwxCUXi8auQbE1ahH3sub
PniKHPyJ55usdy3Mv1zCXapfqRwhvI0ezvwgkkM+unib9R/A00Hl6/Ge0XQG7yeh
jmVz9XFxQKE/hEhv/YaAZgpukmyp802Rn/S0qzkOo5B1NacnwO0c+vYJuGqJRpSg
H4RsozjTg/MxRyJ6pY3L9Kc2Vcg4Twk=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:41:37 2026 by rpki-client