Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a37e487-1995-3f2f-b62b-5ab0eecdc9b2.roa
File:                     2a37e487-1995-3f2f-b62b-5ab0eecdc9b2.roa (raw, json)
Hash identifier:          vnVQCLGsHlpN5vTUyO3RECF7COLaAKHwOugtcyx1BAA=
Subject key identifier:   D0:A8:98:11:AF:94:39:DA:FB:33:F6:57:BA:9C:89:B3:8D:CC:FD:9D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C29FC834147F8C6301198
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a37e487-1995-3f2f-b62b-5ab0eecdc9b2.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.21.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:29:fc:83:41:47:f8:c6:30:11:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=87ff279a-3cf9-443b-be95-ff2cfebc5d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:77:82:e7:e9:9f:3f:77:a3:84:e5:de:94:
                    6b:8f:01:71:56:50:0f:10:26:0d:eb:a3:61:04:c4:
                    1c:e3:71:be:1f:22:0a:43:bf:62:a3:fb:d0:bd:7f:
                    5a:d0:fa:14:65:5c:6b:b5:85:0a:42:2c:a3:c6:85:
                    51:93:59:4d:ce:11:95:9b:0b:c3:c2:b5:8b:b0:e8:
                    74:cb:3a:1b:93:e7:e1:69:24:7d:c2:a9:63:b3:db:
                    17:ac:71:b3:ac:67:17:56:52:7e:29:20:c4:3a:97:
                    87:b4:19:42:93:77:6c:28:f2:4d:fe:13:65:e3:6e:
                    b5:ce:ee:02:b1:08:c2:4c:8e:85:12:57:24:09:ac:
                    44:00:9c:0d:db:74:f7:bf:27:6d:a7:2b:9c:c7:46:
                    41:2e:99:12:8f:7c:ca:c0:6f:ed:e2:46:5e:e2:3f:
                    de:29:61:94:8a:dc:25:ce:8e:f3:1d:bf:02:13:57:
                    6e:14:e3:68:51:8f:6c:e3:38:65:a1:dc:f4:58:a5:
                    78:71:1c:38:b2:66:d1:5c:ff:af:49:5d:84:db:2b:
                    2a:98:5e:f9:ff:d0:86:7d:1c:28:ad:8c:16:ca:4b:
                    5e:00:0b:28:0f:a7:e9:e2:e6:f3:e9:9c:db:42:c1:
                    67:ca:4b:29:88:99:cb:9a:7b:72:0f:42:7d:ac:f0:
                    4a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A8:98:11:AF:94:39:DA:FB:33:F6:57:BA:9C:89:B3:8D:CC:FD:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a37e487-1995-3f2f-b62b-5ab0eecdc9b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:8d:55:43:93:a1:89:50:a5:93:7c:12:bd:64:4e:02:49:a8:
         6d:f1:2b:7c:8f:d7:f3:d0:67:74:f6:b7:f8:5e:dc:cb:20:d2:
         65:b3:c9:f4:af:3a:ff:84:24:a0:a8:24:c8:3a:0f:30:01:f8:
         44:d1:7c:6d:c5:0a:1b:31:2a:ca:08:e0:db:79:8e:f0:98:80:
         e4:a0:29:3d:3f:f2:17:de:d7:a0:88:92:f9:00:ab:05:3f:d8:
         e3:43:98:a6:8b:f7:b1:a4:4e:73:17:93:3d:e0:91:93:e5:d1:
         1a:e6:a3:95:8a:52:00:46:9c:3d:8c:2c:e6:bc:5b:9e:ab:42:
         87:1a:b1:3a:60:52:f8:25:83:01:50:2e:ae:07:2b:b8:e8:4a:
         16:b7:8c:3a:48:90:81:df:5c:7b:db:32:20:5a:22:12:38:c1:
         3a:92:26:fc:db:0f:41:62:8c:c2:b6:4b:93:10:83:3c:05:04:
         8d:a8:cd:0b:78:61:04:9d:66:e7:f7:21:20:16:c3:73:27:42:
         4f:fe:43:8d:51:aa:93:1e:e5:10:fc:26:92:40:bd:aa:8c:66:
         c0:20:cb:44:ff:bd:86:56:da:c6:c8:0e:4a:14:02:f5:de:75:
         db:00:f3:a3:b7:92:1f:fc:a0:b7:7f:96:ed:f0:79:68:1e:39:
         eb:2e:40:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:33:04 2026 by rpki-client