Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75496b95-93a4-3c6e-af48-1728080bc8eb.roa
File:                     75496b95-93a4-3c6e-af48-1728080bc8eb.roa (raw, json)
Hash identifier:          RRNbRXiWhthzimGO/KGtDasL9j+1xvKD9ZKgk2PjG0g=
Subject key identifier:   75:78:4F:15:BE:DA:62:51:B6:D6:DF:48:04:17:8E:65:2F:86:83:9C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C27A9D5BF5A8A021D7720
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75496b95-93a4-3c6e-af48-1728080bc8eb.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.21.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:27:a9:d5:bf:5a:8a:02:1d:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=b6a9093b-798f-4e53-9ec9-776c85fff2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:66:59:08:c1:81:65:15:7b:db:c4:52:bb:70:
                    2f:e5:b7:41:fc:d3:f8:47:b9:b6:44:5c:c9:48:ec:
                    14:ba:8c:b4:02:45:f6:14:b4:7e:8f:fd:ba:d0:72:
                    62:2b:8d:77:17:a5:97:f2:39:86:bf:c6:43:af:06:
                    55:ea:0b:ee:56:45:df:6c:17:1f:06:b3:61:ef:d8:
                    b3:f5:50:fa:3b:b6:78:48:32:74:18:cf:f5:27:f4:
                    82:6f:c5:8f:bc:18:a5:43:ec:3a:be:65:39:2f:8b:
                    28:1f:bd:5f:2b:3e:1d:a4:22:2d:96:c5:dd:27:25:
                    62:73:4c:4a:11:a6:7b:67:f9:c0:51:df:52:55:17:
                    50:38:d1:30:fb:6e:4e:10:65:b5:30:0e:ee:f8:b7:
                    2a:ca:50:e6:5f:5b:11:e9:af:97:0a:ae:a4:f4:10:
                    61:a4:b3:af:17:3a:11:1b:38:4b:41:c2:65:cb:1f:
                    ba:ce:05:6d:10:75:b6:35:d6:25:6f:7c:51:ca:73:
                    f9:86:be:a0:63:3e:28:ad:ec:b3:0c:e0:17:1a:3c:
                    10:5b:dc:68:d7:1e:b6:60:ae:ab:78:0d:70:8f:37:
                    dd:4c:0a:17:8c:a4:f2:f7:ad:0e:4a:ef:8e:aa:64:
                    e9:79:07:c8:2c:dc:a4:6c:e3:77:4f:2f:68:79:d2:
                    25:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:78:4F:15:BE:DA:62:51:B6:D6:DF:48:04:17:8E:65:2F:86:83:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/75496b95-93a4-3c6e-af48-1728080bc8eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:e5:4f:f4:ea:0c:0d:36:79:83:3d:3a:e8:5a:6a:2c:47:80:
         04:39:14:df:1b:d4:9a:40:99:8c:c2:97:cf:96:97:a9:db:ce:
         32:26:62:26:ba:88:c9:cd:3f:bc:9b:99:0b:b7:34:4a:7a:ee:
         db:47:69:41:67:0a:bf:90:ce:ac:b4:61:9b:12:18:30:7f:6f:
         7d:3f:90:72:08:f8:97:d5:69:70:b9:8e:4c:39:46:45:6c:c9:
         5c:1a:50:45:10:b4:a6:4d:fb:e0:0a:5d:1d:d4:08:a3:4d:4f:
         ff:04:c8:ba:78:d3:ea:f5:66:3a:2d:9a:73:07:c1:ee:e1:b3:
         32:f1:ff:bc:c2:17:0d:f4:4b:9f:fb:d6:b6:7e:43:d4:9f:08:
         21:4c:be:a9:6d:f2:5f:b6:a3:98:f0:e0:c9:17:e7:c6:1a:05:
         cd:23:6e:b6:03:94:5c:2c:e0:76:28:57:8b:ca:82:ab:9d:a2:
         28:16:61:91:67:48:09:6d:e2:97:27:e5:c9:a9:94:0a:02:d0:
         14:f1:dd:4b:72:7f:b2:0a:d0:4e:27:f2:48:2f:d5:69:01:3f:
         75:d3:0b:ad:95:2a:ba:cb:aa:53:99:d1:df:b2:1c:ee:82:7e:
         db:00:fd:a2:22:1f:c5:30:3b:2f:43:92:56:ca:5f:e7:c9:e8:
         9c:0c:35:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:34:19 2026 by rpki-client