Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da8b6bfa-174c-340e-b0fa-c7c05131a8a3.roa
File:                     da8b6bfa-174c-340e-b0fa-c7c05131a8a3.roa (raw, json)
Hash identifier:          DHEJKnWY9Oljhg9zRr84VgD02Q0gLOUzj858RCkmwsY=
Subject key identifier:   57:7F:6A:17:F7:44:8F:81:E1:04:4F:B5:79:A9:F1:A7:22:92:3D:15
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BA51531441A693F96E680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da8b6bfa-174c-340e-b0fa-c7c05131a8a3.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.21.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:a5:15:31:44:1a:69:3f:96:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=ec382462-021f-4572-a9c9-e20fe663ead5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:71:6d:3e:ec:4c:a1:f1:04:9f:a2:14:9b:41:
                    9a:af:60:69:d4:b1:bf:ad:54:81:44:17:f3:06:0d:
                    95:cc:57:e0:50:fa:a0:0f:6f:41:54:70:da:a0:3f:
                    1c:b6:12:e6:f2:02:72:4f:88:6b:3a:50:17:71:57:
                    9a:f1:17:0f:20:e1:12:62:54:9c:8e:06:ea:b1:52:
                    73:d3:57:e1:48:b1:64:c3:20:d4:03:ed:98:a6:ea:
                    19:33:6e:9c:d1:12:05:69:5e:b4:61:03:b0:74:b7:
                    81:f2:4d:49:e3:e5:0a:04:2c:c8:bc:d9:2f:d2:bd:
                    99:42:b0:a7:1c:00:2f:70:3c:29:dc:65:d9:bc:aa:
                    73:ca:2b:19:38:df:34:7b:6f:5c:bd:60:fd:53:f2:
                    a6:2d:d4:df:5e:54:0c:08:08:a4:21:a0:72:4e:99:
                    bb:30:d3:19:3d:ad:cf:32:71:62:98:85:e9:70:0e:
                    b8:cc:55:a9:77:7f:35:ea:82:1e:00:58:f4:71:c8:
                    e1:54:48:79:23:5c:9b:ce:07:92:23:36:26:5b:aa:
                    98:94:f5:87:23:ce:43:4e:79:ef:6e:26:a9:76:71:
                    d0:92:ce:03:cd:d1:23:e1:8b:da:3e:39:28:eb:c1:
                    e5:b3:3d:06:44:51:60:df:8b:92:ca:76:ed:e5:e6:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7F:6A:17:F7:44:8F:81:E1:04:4F:B5:79:A9:F1:A7:22:92:3D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da8b6bfa-174c-340e-b0fa-c7c05131a8a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:76:98:0d:ef:7e:92:c1:0b:9e:98:07:5e:61:34:48:e1:ae:
         df:93:be:d4:ce:87:e0:fa:3a:49:0b:42:78:9a:26:b4:78:ad:
         17:e9:c1:b3:6e:39:11:29:20:19:31:77:4d:54:44:ce:e7:0f:
         2e:9d:8e:f9:85:8e:30:b9:0f:7b:47:47:7c:37:2d:98:27:99:
         fa:40:03:77:18:31:18:30:e4:35:72:12:65:27:b5:d9:30:74:
         1e:4c:30:8e:9b:d1:99:d6:55:fc:df:fb:71:82:f3:44:e8:b0:
         e3:8c:25:59:f7:3f:c9:d1:01:59:60:6b:d1:17:dd:59:5c:83:
         53:a9:79:94:25:f6:21:e3:d2:c7:64:e3:37:c0:51:c2:ca:67:
         9f:75:64:12:94:44:58:00:d2:c9:b4:9c:e5:96:ba:e9:5b:5e:
         c6:dd:c1:ab:41:03:36:ce:cc:83:74:b0:fe:e4:1d:ef:ea:07:
         1f:c7:66:f4:d7:3b:11:12:42:21:b2:7c:49:6e:88:46:f3:cb:
         7f:62:a4:4f:87:44:ee:16:4d:f6:df:62:58:ff:f8:cb:80:ac:
         db:b7:5d:66:a8:20:4e:9c:f7:a3:7e:27:d1:a1:2b:a3:20:99:
         36:d3:db:05:b2:aa:7c:a7:a5:1c:69:0c:cd:d1:da:7d:e6:78:
         08:3f:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:43:24 2026 by rpki-client