Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/047f3f5c-6993-3a9d-b6c5-82df281f9709.roa
File:                     047f3f5c-6993-3a9d-b6c5-82df281f9709.roa (raw, json)
Hash identifier:          AVPverOdlOJmT4VVscwc9ktvAsI+Jz24wXkgP60M7ko=
Subject key identifier:   55:A9:96:2B:3D:FB:A7:8B:99:38:15:15:95:49:28:2F:EC:47:5E:36
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0143CD16C7C003EB99200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/047f3f5c-6993-3a9d-b6c5-82df281f9709.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:14:3c:d1:6c:7c:00:3e:b9:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=4d174b66-07b5-49a0-9b97-5751ffe4419a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5c:0b:29:07:82:de:d4:5f:a7:4a:bb:53:a8:
                    2a:a0:fb:7e:a5:92:62:c4:d1:be:7a:b3:0f:35:ad:
                    8e:54:b9:cd:16:fa:9e:e9:42:bf:a5:e0:ab:73:47:
                    39:36:16:ea:d4:fa:c1:42:b9:f2:ac:98:01:ef:b4:
                    cb:b3:73:d0:56:f9:83:ad:5f:c8:c8:5c:94:23:07:
                    8a:52:8a:52:cf:f8:84:32:ea:f7:38:97:9a:42:b9:
                    d4:18:da:69:f7:fb:28:b7:a2:83:87:5c:aa:7f:66:
                    9a:c8:f9:23:8c:54:34:fd:68:d5:14:a8:1f:be:58:
                    70:1a:37:8b:e6:dd:64:46:55:b7:02:de:89:f3:d2:
                    f0:8a:02:7b:b6:14:82:00:af:65:db:4a:13:54:24:
                    7e:e3:1b:3c:a0:6e:a9:a2:5a:dc:c5:d2:15:d8:4d:
                    d1:9a:b8:ec:e8:a4:57:d4:d3:bb:26:27:f5:e5:b4:
                    fb:8d:6c:1c:f3:82:2f:31:7f:71:ed:e6:65:66:18:
                    f7:b9:30:89:86:fd:a9:75:08:66:72:29:99:bb:46:
                    31:2c:ac:f6:3c:be:1a:59:52:89:e4:b3:81:4f:26:
                    01:fc:96:48:c6:24:06:eb:b9:c8:8d:4d:64:e9:06:
                    da:8b:9b:96:26:b8:dc:6c:31:a4:70:a6:97:cf:8e:
                    d8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A9:96:2B:3D:FB:A7:8B:99:38:15:15:95:49:28:2F:EC:47:5E:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/047f3f5c-6993-3a9d-b6c5-82df281f9709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:23:6e:3c:10:bd:ae:f1:ac:86:be:70:d5:d8:b8:4f:a0:a3:
         2f:ae:88:c6:cd:a1:d5:41:c3:78:89:84:5c:72:7f:c8:0e:2d:
         19:6a:79:a5:dc:aa:a1:19:27:af:21:b2:6b:6b:66:c7:6b:fc:
         9c:19:a8:f3:4d:24:cf:ef:a7:cb:ec:e2:dd:e3:13:e4:65:0f:
         41:a2:e2:c8:c9:3f:1b:5a:37:95:7d:b0:39:7a:9d:3a:5b:4c:
         fc:b6:50:dd:df:04:d6:0b:b7:31:9c:71:a8:6a:20:7d:43:eb:
         d2:4a:4e:59:27:59:88:3a:8c:e6:72:58:27:44:4f:f1:4e:c3:
         cc:ff:23:14:c8:22:48:3b:6a:cf:af:3b:77:16:90:2f:8d:a7:
         30:a5:a3:1f:ba:72:d9:5d:f1:b6:2f:3b:d1:7e:95:49:80:3c:
         ff:3a:63:4a:f3:fc:ff:6a:65:b2:c9:d0:f5:e9:95:55:34:13:
         ea:0e:1d:b3:7c:03:93:ca:90:98:1b:6c:ed:39:76:85:8e:d7:
         aa:c3:f6:a6:d0:6c:f9:9d:fc:1c:ed:b0:6a:f4:7f:ca:22:65:
         44:42:a7:1d:db:71:5c:78:13:96:2d:60:2f:96:28:4e:53:fd:
         68:62:a0:c9:b7:30:44:83:61:34:03:1e:9c:77:9d:1f:57:72:
         f3:e8:dc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:31:31 2026 by rpki-client