Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05a0e720-6295-3415-ad17-c5019e95efc1.roa
File:                     05a0e720-6295-3415-ad17-c5019e95efc1.roa (raw, json)
Hash identifier:          e+UrO80+whJvm23gQNBGUGSJfXbdFHm84P83/O9f+OQ=
Subject key identifier:   AD:F7:03:A8:85:38:86:F9:D7:DD:99:99:BC:8B:86:45:1B:DD:AE:84
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4982FC05573857B617799E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05a0e720-6295-3415-ad17-c5019e95efc1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40306
IP address blocks:        184.62.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:82:fc:05:57:38:57:b6:17:79:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bfc341fa-fca7-4b21-831c-d3d36be853c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c9:f6:10:30:45:9e:a8:12:7b:ca:ed:65:e0:
                    1d:55:9c:86:69:bd:7c:a6:55:e0:fa:c8:72:a7:52:
                    09:66:7c:cd:63:9e:4a:20:8c:3c:43:29:71:4e:bb:
                    f0:d7:6d:e7:87:2e:38:db:61:5e:b3:65:f4:25:ee:
                    44:40:c4:d9:63:e7:20:c3:a6:bb:ac:88:d3:74:2e:
                    9b:b6:33:81:ff:22:b7:68:1b:ba:19:35:03:dd:75:
                    62:a6:0e:6a:29:eb:65:73:c9:bb:99:7a:d6:30:d3:
                    5a:1b:27:a4:ab:9a:f0:3f:ce:24:fc:bc:f4:59:8e:
                    f2:63:c5:3b:28:7e:a6:75:f7:a4:12:cb:c6:e1:1c:
                    23:bf:3e:8a:40:57:33:3a:e7:cc:2f:3a:27:83:26:
                    a9:9f:2c:87:00:48:43:20:e0:7b:d9:78:aa:3c:60:
                    f6:7f:1e:c5:8a:91:aa:85:02:ff:a3:9d:13:0e:20:
                    e0:04:1e:6f:8e:ce:e0:f6:9a:df:73:04:17:16:d4:
                    20:aa:60:9b:d2:0c:e6:76:20:79:26:f3:48:a6:bf:
                    26:be:76:88:2d:15:b9:19:0c:e9:09:0b:87:8d:c0:
                    08:48:5c:eb:ca:44:c3:3b:22:02:74:54:73:50:6c:
                    1d:c1:a8:79:86:0a:cd:84:f1:ee:34:1a:37:87:33:
                    4d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F7:03:A8:85:38:86:F9:D7:DD:99:99:BC:8B:86:45:1B:DD:AE:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05a0e720-6295-3415-ad17-c5019e95efc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e9:5b:a7:06:5a:20:66:29:04:ef:fb:4b:75:61:f9:75:ab:
         67:6f:37:57:48:70:5b:50:9c:a5:1e:8a:53:5b:11:66:66:8f:
         d4:fc:90:a4:c3:1b:0d:d7:41:83:5b:ed:90:40:5b:57:ac:54:
         5a:0a:ed:93:10:99:a0:70:d2:17:f3:f0:44:3a:ae:1d:25:15:
         a1:c3:92:1a:05:af:ba:5c:15:fe:8a:67:e2:c2:34:b9:27:28:
         e5:42:ac:0d:75:48:f3:7d:01:ce:fd:a2:8b:75:94:02:27:46:
         43:f0:a1:74:39:4e:44:5b:56:bd:df:07:84:29:ad:df:a4:7b:
         76:a3:53:2f:5f:c0:a1:f5:59:8c:cf:42:1d:a0:b9:41:39:d4:
         31:77:72:8c:15:e9:17:30:5f:df:41:9f:05:6d:67:12:32:80:
         89:2c:4b:45:96:34:9c:03:b9:6a:ca:53:9d:63:1e:95:2a:19:
         9f:52:25:63:c3:04:12:69:6e:ef:ec:38:4b:a3:e7:e7:b8:cb:
         27:2a:7c:9e:ad:a6:ef:c3:17:8a:c3:3a:2b:c7:21:9d:4b:e0:
         1e:69:46:7d:09:14:73:17:b0:29:bf:47:ae:72:ec:38:7e:19:
         98:0a:31:83:1a:92:96:63:e7:04:9d:95:ed:0b:de:45:4a:a4:
         9a:f7:0f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:55:48 2026 by rpki-client