Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/017e899d-8a77-3d0d-b429-3aab67df3c23.roa
File:                     017e899d-8a77-3d0d-b429-3aab67df3c23.roa (raw, json)
Hash identifier:          jxfXHTinRXVus6OewBQ8U/K8sU0zZUKouingW6L//Ho=
Subject key identifier:   74:8E:28:C5:BA:96:DF:D0:2E:6E:DB:EB:E9:35:D6:AD:2C:B7:F1:DC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0093A6DD6B3AF060E31B8
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/017e899d-8a77-3d0d-b429-3aab67df3c23.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.20.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:09:3a:6d:d6:b3:af:06:0e:31:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=f8057332-a7bc-40b7-9505-5844db0e689e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:c1:c9:48:44:4e:6d:3e:1f:61:cc:99:d3:
                    bd:c8:76:13:c1:fc:70:07:70:ff:b0:d3:05:47:ab:
                    e7:24:ac:f5:f0:59:d0:f8:cb:12:fa:f2:79:14:de:
                    e5:0e:69:6c:bb:2d:51:f3:19:9b:57:2c:a4:79:3c:
                    45:bd:d5:02:90:71:49:98:5e:55:3c:7e:6d:7c:d7:
                    0e:0b:70:22:80:ff:95:d3:a2:d7:9e:57:0c:51:2b:
                    be:61:b5:e8:31:6c:4c:1c:4a:0d:a2:04:e3:ea:9f:
                    a9:b1:0b:9b:14:48:66:12:66:9f:aa:47:4a:96:25:
                    15:a4:67:0b:2a:2c:1d:d6:d5:14:d7:7e:7c:51:50:
                    9b:8f:71:42:ed:c8:f8:e2:d9:30:3c:89:b2:05:3f:
                    b6:31:48:99:0f:bf:4a:07:5e:57:80:66:2e:ee:6f:
                    91:4d:49:c8:c1:42:c3:de:a9:70:55:21:24:68:1c:
                    d6:cc:73:bf:0d:d2:70:7b:87:76:71:46:e5:d6:f5:
                    05:b9:96:f0:6a:97:ca:f6:e1:0e:71:2e:24:ff:07:
                    1d:b7:4d:7d:25:62:69:52:76:2b:f7:ae:72:e3:96:
                    08:07:7b:70:ed:ca:9b:d0:2e:6a:d9:a9:cb:29:fd:
                    21:2c:7d:d4:14:9b:a8:ad:f3:06:d6:c0:79:17:19:
                    1a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8E:28:C5:BA:96:DF:D0:2E:6E:DB:EB:E9:35:D6:AD:2C:B7:F1:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/017e899d-8a77-3d0d-b429-3aab67df3c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:d6:97:c8:a8:ac:89:7b:3d:9e:cd:f3:44:4b:b9:17:70:6a:
         7e:e6:3f:12:5c:e5:44:bc:62:61:66:d7:ca:f6:98:6c:b3:63:
         f1:db:fb:fc:a9:64:28:b4:ec:77:7b:30:cb:82:70:5b:23:c6:
         1d:c8:fd:ac:d2:3d:b5:b3:0b:1d:85:ea:4f:e0:c0:39:4f:d8:
         be:b4:9e:99:ae:9a:b6:ed:ed:55:ac:be:5b:7d:ba:9f:53:00:
         bb:83:a1:cb:43:83:6b:f3:2c:60:6c:1a:47:46:e6:57:0c:13:
         cf:ae:a0:1f:a9:40:00:17:8c:c3:46:62:11:80:03:5f:d3:d8:
         0d:7d:ce:99:cb:a9:d1:38:cb:00:98:a4:61:6c:95:b5:62:7e:
         f1:b9:24:5a:af:69:b7:3d:09:39:b2:7f:6d:b5:4e:24:02:35:
         49:61:e1:91:d6:5e:57:f0:d6:c4:68:6f:a4:b2:73:b1:8a:06:
         77:41:1f:4c:ad:ff:74:3b:10:b5:9b:c9:b0:17:21:b4:2e:5c:
         2e:ef:bc:e7:24:0a:cf:d8:75:a4:99:08:0c:35:ac:34:63:20:
         c4:d6:4e:1b:63:1a:ed:a7:bf:c4:4e:5b:f3:b5:48:e7:62:5a:
         69:4d:9f:82:92:8d:3d:bf:49:fc:6c:c7:9d:46:9e:98:41:2a:
         30:ad:73:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:55:49 2026 by rpki-client