Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f91cf59-785f-3324-a733-3b79f8b0a8bf.roa
File:                     1f91cf59-785f-3324-a733-3b79f8b0a8bf.roa (raw, json)
Hash identifier:          G5gIm65gpw3XbSQqeouF5fZ2TaSn3RposgBZsjBBv5I=
Subject key identifier:   1D:61:FB:3E:3F:23:E0:F6:12:DB:EF:E1:D3:88:9A:27:9B:61:A3:8F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983F9619011D2CEAFF60900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f91cf59-785f-3324-a733-3b79f8b0a8bf.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        184.20.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:f9:61:90:11:d2:ce:af:f6:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=07d6d2ea-f119-46c4-bf7b-ef9d9213d359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:5a:8b:f0:82:ea:bd:2f:79:26:5f:07:f5:
                    7e:74:d1:8c:ba:e9:e6:67:87:8e:04:ae:88:e0:7f:
                    d3:9e:67:fa:87:f9:84:0d:90:1b:5a:d2:aa:02:09:
                    9e:1e:c0:b0:d7:da:ad:08:7c:93:b5:fb:7c:f7:e6:
                    20:08:45:5e:ad:22:4c:74:3f:3e:bf:57:3f:78:53:
                    2b:ce:ee:c5:b0:ff:2a:00:48:a9:60:1d:38:59:9b:
                    86:c5:78:77:2e:be:2e:b1:74:d6:75:7e:27:73:fc:
                    bb:77:4c:e0:40:93:60:38:da:63:66:af:e4:42:e7:
                    c5:1a:00:fe:b6:d7:e4:ed:a8:35:19:45:8c:d4:e9:
                    bc:8a:ed:bc:21:d7:60:b5:87:7a:32:43:01:1f:3c:
                    17:d6:b0:cc:0f:8c:40:be:a6:b6:d6:d3:c6:57:73:
                    40:75:3f:e1:7d:81:ec:0d:81:d1:dc:02:05:e0:63:
                    d3:16:56:84:fd:da:cd:28:4d:a0:e1:1c:41:08:32:
                    72:5d:bb:aa:68:0f:fd:88:01:f9:59:79:4f:76:f0:
                    be:c9:20:34:7b:5c:91:6f:ad:10:04:d0:38:2d:1b:
                    cc:ad:38:a0:25:99:ae:43:e7:8b:10:3c:28:dc:3f:
                    99:db:b6:01:2e:6f:f5:1d:1d:f4:a9:6e:10:f8:59:
                    32:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:61:FB:3E:3F:23:E0:F6:12:DB:EF:E1:D3:88:9A:27:9B:61:A3:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f91cf59-785f-3324-a733-3b79f8b0a8bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b8:7f:1d:37:86:9b:fb:69:2a:1c:0d:aa:63:7d:fc:c6:0f:
         f2:15:bf:dd:28:64:29:29:fa:f0:76:4a:32:6f:a8:43:c1:f0:
         28:ad:81:4c:1d:6c:db:97:c0:17:55:13:72:22:27:63:9f:52:
         cc:8e:2c:fa:0c:fb:31:b6:a0:91:73:96:65:e6:50:c1:04:c9:
         1b:de:8f:24:a8:45:c8:24:ab:e7:a6:03:a8:d4:af:40:20:13:
         51:5a:22:17:d9:fe:03:65:5c:fa:4f:18:b1:b2:30:02:de:f6:
         e3:99:b2:33:11:d9:63:34:13:46:dd:e5:1a:42:1b:f3:54:b1:
         01:7e:5c:9b:38:92:05:1a:13:51:59:3b:8b:cf:c8:d7:9f:11:
         ff:ee:83:7b:bb:ce:4c:f6:61:10:f6:f4:6d:f5:a7:78:2f:80:
         e0:44:ee:c2:a1:45:08:a3:c9:ba:8e:56:53:af:de:92:95:dd:
         3d:54:f5:84:49:43:64:e2:8f:e5:33:9a:0e:86:4c:47:1a:af:
         05:d8:d2:94:3d:85:94:2b:ae:b6:5e:b9:23:b6:4d:5c:5d:0d:
         22:9a:7f:e1:93:25:ef:92:99:b6:2a:1b:ff:ab:b0:3b:a8:f5:
         95:ef:21:b0:83:d8:ec:c4:4e:1e:3c:9c:ae:24:7e:e1:c6:1b:
         9a:bb:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:42:55 2026 by rpki-client