Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4dce652f-b0ad-38cf-90d7-fb45a377ff5e.roa
File:                     4dce652f-b0ad-38cf-90d7-fb45a377ff5e.roa (raw, json)
Hash identifier:          dBJahEbz0+MqQ+XXcqVLPLOCq8t9vceWQep3UUXJBFI=
Subject key identifier:   93:99:D8:57:92:11:5E:23:12:C2:CB:B7:87:CF:43:31:EB:73:6C:61
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C215F4B59F5DF16DCFD00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4dce652f-b0ad-38cf-90d7-fb45a377ff5e.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.20.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:21:5f:4b:59:f5:df:16:dc:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=5a5a5529-fce6-48f0-b2b8-2226ab689cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:44:84:78:43:55:03:90:a3:52:8a:44:25:
                    c4:cb:c9:cf:8c:63:2d:e8:28:fb:f4:4a:f7:ec:4a:
                    68:bb:44:ae:32:cf:eb:ab:90:53:15:d6:ff:60:2b:
                    94:a3:c9:8b:11:75:32:25:82:f3:99:b8:55:79:4c:
                    9e:8c:49:bb:9e:c1:86:f1:c0:60:f0:b3:45:bd:24:
                    b3:56:84:c9:3d:da:96:b7:d3:9c:16:3d:e6:21:47:
                    da:4a:d5:d9:34:f3:65:9a:d9:26:cc:dc:0f:c2:d2:
                    d4:d0:c0:48:a7:48:c4:ad:46:e7:4a:04:3c:2c:09:
                    fb:45:dd:f3:b1:b9:02:5a:f5:b2:cd:9d:2e:f1:59:
                    23:17:ce:70:84:e8:f3:3d:8f:a1:e9:93:81:db:1a:
                    8e:f7:36:37:86:ae:7b:6d:34:9c:e9:0f:da:4d:32:
                    5c:ca:98:c9:51:52:eb:29:43:89:2b:c2:8a:ea:6e:
                    ce:45:34:ce:40:67:65:35:8b:17:bb:ed:de:c5:18:
                    eb:b0:49:87:7c:08:e0:18:af:39:56:30:d9:b5:57:
                    cc:08:1f:b8:30:af:42:8c:3e:6d:59:89:85:cc:34:
                    e6:a5:34:fd:1c:5c:ab:c7:db:79:9a:b8:9e:7f:87:
                    a8:2e:3f:d6:88:25:e6:f4:e7:a1:30:a1:2c:30:04:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:99:D8:57:92:11:5E:23:12:C2:CB:B7:87:CF:43:31:EB:73:6C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4dce652f-b0ad-38cf-90d7-fb45a377ff5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b8:c5:33:57:3c:90:06:db:07:9c:59:02:32:94:63:e4:dd:
         cc:0c:fa:10:94:50:13:ad:65:c7:1f:c0:cb:24:6b:4d:b2:f0:
         df:c0:88:fd:7c:ee:a0:13:97:44:e8:2b:5f:57:5b:87:a6:42:
         86:56:9d:53:1d:02:b8:aa:48:a5:36:a2:65:43:58:6a:35:15:
         2d:35:6e:36:67:78:98:80:cf:e4:32:19:a9:91:f7:a6:30:92:
         af:4a:2a:cd:15:b8:05:5d:6a:ed:47:dd:ed:d1:48:90:63:73:
         18:43:e6:8d:f3:99:80:74:41:55:62:88:47:4e:31:b7:07:99:
         f5:19:fe:92:e3:65:d2:36:e0:e6:35:9d:69:43:8d:c6:6e:e3:
         dc:21:55:bf:6e:8a:dc:a8:8b:15:0a:9f:29:18:49:6e:c4:d2:
         a9:e2:a3:b2:27:83:b7:6c:34:c1:59:05:7f:91:19:0d:47:f2:
         ee:1d:29:17:f4:a6:ac:0b:8c:e6:2e:76:b7:aa:31:e6:ae:dc:
         20:78:eb:6b:73:05:f5:a6:bf:42:fc:0f:f9:6d:a8:09:39:d5:
         06:7b:d0:6e:96:69:2f:ad:67:f6:5b:6a:f1:20:48:d0:dc:ac:
         17:87:4c:f9:c1:8a:f6:83:6f:47:02:24:0c:af:9f:a3:5f:0c:
         b4:c0:82:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:21:46 2026 by rpki-client