Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0442fedc-0db2-312f-bcc0-a31f7f4f5ad3.roa
File:                     0442fedc-0db2-312f-bcc0-a31f7f4f5ad3.roa (raw, json)
Hash identifier:          wFqKIXfgbVgvkye9qJrG8CltabbqvhBPY/2/oRtd/3Q=
Subject key identifier:   9B:84:FC:FF:24:E5:46:F5:67:56:AF:DD:58:7F:C3:E7:B2:FD:95:2C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E00CE6F921CD184999CDA4
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0442fedc-0db2-312f-bcc0-a31f7f4f5ad3.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.20.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:0c:e6:f9:21:cd:18:49:99:cd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=fe52cbd8-31f9-4a17-8cdc-82415fbbf0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b3:79:e3:26:ee:45:c9:49:ea:0e:b1:1d:35:
                    66:2c:f8:fa:9c:da:d2:fe:89:79:d7:f9:7f:ac:be:
                    ab:60:36:d4:2d:dd:48:b3:17:8b:06:b5:43:02:f8:
                    0e:b6:03:db:66:43:91:a7:aa:8d:a6:f1:54:09:1a:
                    17:e7:92:30:bd:4d:29:fe:bf:ab:02:d9:09:a9:64:
                    da:4c:e8:03:9c:f9:73:d6:88:86:15:84:e4:31:6e:
                    5a:06:47:b7:1c:7e:2c:85:89:85:b5:b7:46:76:77:
                    4d:ef:80:c5:3a:5e:3d:b6:11:99:5f:0c:5e:b9:70:
                    bd:4c:98:7d:80:6f:4f:08:c5:81:56:17:1e:1a:b9:
                    a6:28:cc:2b:90:75:3a:08:ba:bf:c0:ba:1e:66:0a:
                    eb:4d:be:ab:ca:46:88:fd:bf:98:46:80:1e:d2:0e:
                    17:e6:fc:6d:db:9b:a5:fa:18:0d:6a:dd:33:da:5d:
                    61:08:62:65:24:88:c0:04:f4:12:6f:17:b7:50:ba:
                    19:26:f6:b4:de:c6:db:61:8c:19:cc:0a:97:7a:d5:
                    31:4c:30:ee:82:a3:02:56:3c:09:39:dc:18:fc:9a:
                    23:88:ab:a3:78:d3:86:c2:b9:8c:a8:33:d1:55:23:
                    88:12:81:62:80:ba:62:5a:91:04:c9:32:73:27:72:
                    8d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:84:FC:FF:24:E5:46:F5:67:56:AF:DD:58:7F:C3:E7:B2:FD:95:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0442fedc-0db2-312f-bcc0-a31f7f4f5ad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ce:44:f6:24:ee:4d:35:89:97:c5:d7:fb:0c:c8:21:8e:44:
         fb:09:c5:d1:15:74:a9:53:2d:fe:4a:57:96:68:bc:63:45:06:
         db:8f:c1:64:79:cd:f0:66:5a:90:7a:72:b8:60:c9:d9:fe:a8:
         1b:cc:31:a0:d2:33:7e:fd:39:da:bf:b5:ac:d3:34:77:52:b4:
         0d:49:50:83:27:5a:5f:14:29:dc:07:67:ef:7f:a5:71:32:1d:
         f7:ac:4c:69:9a:5a:8d:3d:c1:8b:2d:84:d2:43:fb:ec:cb:8d:
         b6:63:37:83:db:fa:3e:69:7a:15:13:4e:d1:bd:30:e0:8f:88:
         05:c4:33:ca:28:dc:f3:48:37:56:76:d4:97:14:17:c3:8e:e2:
         58:d5:c2:d8:a9:1e:21:af:c5:ca:83:80:cb:ad:90:87:0b:2f:
         0e:6f:4d:b0:25:e5:e7:49:3b:a1:88:f4:10:85:68:d3:fb:fb:
         32:07:5b:e8:3a:1d:18:66:b5:e0:b0:cc:e5:c8:5a:d7:4a:da:
         4c:92:f1:f2:37:24:68:d7:55:28:9f:bb:ac:89:05:b6:85:23:
         36:e1:92:7d:e5:c0:43:5d:43:d5:2f:95:20:e6:df:72:5c:86:
         f5:d5:ad:b2:02:24:c2:a8:2c:c4:9e:30:45:9c:f1:51:54:c8:
         ee:11:a8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:30 2026 by rpki-client