Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df8cf2a9-de5b-39b5-99d8-32c3e86496eb.roa
File:                     df8cf2a9-de5b-39b5-99d8-32c3e86496eb.roa (raw, json)
Hash identifier:          VCHgmkjtFMWhfEaBqpSoTL94D41thN9HEWjGY5Djleo=
Subject key identifier:   6D:49:94:18:38:3A:CB:2E:04:97:36:EA:B6:D9:CF:D8:00:87:0C:18
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E63C1FC7502328E6DF440
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df8cf2a9-de5b-39b5-99d8-32c3e86496eb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.62.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:63:c1:fc:75:02:32:8e:6d:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b845a941-6df9-4833-87e9-986a6b7b50c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:30:3b:61:90:14:30:af:4e:3d:dd:c3:57:
                    ab:dc:f7:37:af:43:f5:10:a7:27:7b:23:73:ab:2d:
                    ba:ac:ad:d9:80:a9:e8:48:b7:5f:5a:83:53:08:85:
                    21:87:8f:62:54:ad:01:de:c3:26:7d:bc:47:55:ce:
                    fb:d2:12:77:ee:24:ee:f4:9c:dd:d0:54:58:b1:0c:
                    48:c8:5f:b1:69:7e:d2:bc:ac:ee:2a:60:60:ad:93:
                    c4:08:d8:0e:30:96:d9:ec:eb:f9:6d:f8:e0:de:82:
                    c4:6c:33:e8:0b:76:15:90:17:9b:41:d9:aa:05:3c:
                    ee:e8:68:95:7f:78:ab:fc:af:82:1e:72:d7:1f:1d:
                    82:b7:8f:4c:e5:51:67:15:d5:5e:47:26:8b:1e:35:
                    e2:99:8f:b7:92:59:13:7d:ac:a5:bb:a0:cd:d5:31:
                    77:02:9d:2b:41:25:0f:6b:ec:f3:0b:03:e3:fb:d8:
                    cf:42:0e:bd:80:07:19:a7:a2:31:45:89:31:d9:51:
                    09:bf:9f:3c:b3:7f:c5:3a:66:26:d0:13:e8:b1:32:
                    12:5a:a5:c4:49:c2:03:5c:29:f5:75:72:0e:e4:7c:
                    c6:56:41:e0:bd:26:3b:a0:2e:25:16:55:24:f5:7f:
                    46:12:80:6e:8b:31:9d:13:fe:f7:43:76:95:df:b3:
                    9a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:49:94:18:38:3A:CB:2E:04:97:36:EA:B6:D9:CF:D8:00:87:0C:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df8cf2a9-de5b-39b5-99d8-32c3e86496eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:4e:ed:fe:69:40:e3:52:30:3c:19:5e:17:07:e6:d1:6c:32:
         fe:6f:cf:92:d3:36:49:b6:a8:2c:36:25:f0:9f:bf:78:e4:c3:
         1d:a0:ed:ef:10:f7:44:80:ff:c4:9d:d0:b1:a2:df:8a:c5:92:
         7b:18:be:f5:de:6d:99:7b:69:60:8c:fc:d7:f2:70:dc:67:db:
         1c:ec:6b:d3:a5:99:c3:3c:6c:0c:46:a3:b2:1d:7e:35:b7:03:
         04:fd:d5:8c:6d:67:e6:8d:0a:53:95:57:f5:d2:f3:cf:9f:32:
         d6:e7:83:84:a4:16:90:0e:80:1e:9d:99:fb:83:42:7b:50:38:
         c3:d7:29:2d:48:4f:10:d9:d3:4e:e4:68:73:1f:b2:ee:ab:2d:
         d6:d2:64:e1:f3:9c:5b:6c:1c:c5:23:34:90:78:f4:64:3c:b6:
         26:4f:43:64:96:24:80:b5:44:ac:ab:f8:05:c7:97:24:62:3d:
         74:32:55:5e:12:b6:6d:33:67:6c:a9:dc:bf:47:66:11:5f:5e:
         0b:14:b1:a9:e3:79:a4:e8:d7:c6:08:02:4d:b0:3f:4b:ed:4f:
         12:da:4a:96:57:7d:f9:1d:e7:2e:9f:e7:f8:d4:ea:64:9b:e9:
         ac:b4:29:ea:05:13:13:e8:70:6a:ca:f9:aa:3c:87:c5:a3:3c:
         d3:bd:ad:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:14:54 2026 by rpki-client