Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efeee425-db4c-3497-aa9e-c12fe1cec673.roa
File:                     efeee425-db4c-3497-aa9e-c12fe1cec673.roa (raw, json)
Hash identifier:          gGOgNtF0Zo7s1eSTMqkDpMQ2YRXRjusDw5hH/daXakA=
Subject key identifier:   2E:B4:57:E5:59:9B:0E:FB:73:F3:73:FF:50:14:05:72:2F:75:04:D1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C27E096F52E4A665E4F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efeee425-db4c-3497-aa9e-c12fe1cec673.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.21.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:27:e0:96:f5:2e:4a:66:5e:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=6f307c76-aa84-4608-ab1a-d26342f0ddec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1c:4f:cc:50:53:94:88:ce:0c:a2:89:b2:ae:
                    bb:de:3f:8c:55:47:5c:a3:3d:4b:92:0f:cf:7a:84:
                    55:26:50:81:e9:27:f4:0b:92:5f:57:9c:e6:d4:a3:
                    fd:36:99:6f:3d:5a:f3:76:e1:81:49:61:c5:2a:7f:
                    d7:aa:54:6f:23:3c:1b:82:7c:14:a8:21:71:74:a2:
                    79:35:8a:66:9b:3b:6c:bd:46:aa:7c:d8:68:8e:2e:
                    15:c3:88:b1:20:a1:91:27:64:9b:8a:82:cf:31:8d:
                    3e:e4:97:9e:c2:41:7f:ff:bf:6e:ba:63:84:ba:a1:
                    73:4b:42:d0:2c:fd:65:7c:a4:27:cf:11:c2:0e:30:
                    ef:1a:6a:d9:5f:92:b5:74:92:1b:fc:53:d2:43:59:
                    45:be:3c:14:c8:88:df:3b:c1:d3:26:1f:14:df:f0:
                    15:eb:f6:4d:07:1e:c4:b0:a9:98:4c:79:79:be:35:
                    49:f3:dd:49:b1:05:f7:51:ae:86:ce:26:31:6f:46:
                    f3:d4:89:25:f5:f6:c1:e7:73:ce:be:72:97:ab:b9:
                    5c:f2:11:9f:f8:4f:cc:2b:47:60:9d:59:a2:f2:de:
                    29:03:f6:10:d2:a9:9d:9d:3b:f2:28:0d:ff:9d:de:
                    a1:b8:90:56:92:75:93:a9:55:a3:51:ce:20:6e:a6:
                    50:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B4:57:E5:59:9B:0E:FB:73:F3:73:FF:50:14:05:72:2F:75:04:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/efeee425-db4c-3497-aa9e-c12fe1cec673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:71:b8:fa:08:c2:8f:72:bb:8d:84:d4:f4:7d:db:6a:37:58:
         07:b3:02:ac:41:6a:40:cb:1e:b7:22:3d:78:4b:f6:6f:d1:0c:
         89:f0:b0:5c:15:73:bb:39:b9:56:f4:90:49:da:5c:ab:31:d2:
         39:72:4c:2d:a2:6a:da:e4:68:fd:af:ba:05:e1:97:e0:a5:eb:
         33:27:d3:29:f2:7f:28:f0:f4:52:de:0e:a7:f3:6e:52:fb:a1:
         70:e1:8b:8a:63:07:30:1b:9d:11:f3:98:31:bf:3d:59:89:5a:
         1a:97:21:0b:cd:22:d8:7f:0c:da:3c:85:ba:e6:60:4d:37:c9:
         51:88:51:24:0b:1e:80:49:36:09:ff:d1:f4:f1:82:b2:95:7b:
         e7:2d:da:21:2d:4d:67:bc:a3:29:28:a1:75:b7:a4:2e:ee:bc:
         dc:b6:8f:a6:5c:8c:7b:23:d3:0a:dc:4c:5b:e3:b5:dd:d2:b4:
         1d:80:2b:dd:3d:c5:d4:3d:d1:58:d8:04:a9:a0:6e:a0:62:e7:
         09:61:63:df:2b:f1:47:dd:4f:64:c6:3d:8a:87:16:64:61:38:
         58:94:df:38:4b:c6:8f:b1:40:4f:a3:66:0f:2d:d6:a8:b8:e9:
         ea:64:f0:d9:3f:ef:16:ea:63:ea:42:7b:29:7e:58:dc:90:7f:
         f1:69:20:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:11 2026 by rpki-client