Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a16c66d-da47-33dd-94c1-c0373c32bd20.roa
File:                     2a16c66d-da47-33dd-94c1-c0373c32bd20.roa (raw, json)
Hash identifier:          B79h+AlpcJ+ToHSddX/7DdSwlhJH64RsSS9F3Y+jDGc=
Subject key identifier:   37:E1:EA:F6:04:26:E8:FA:FA:7D:45:0A:D8:14:96:B3:56:A1:C3:17
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0D1D3257B9A81C4D65780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a16c66d-da47-33dd-94c1-c0373c32bd20.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.62.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:d1:d3:25:7b:9a:81:c4:d6:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=5a17ae2e-d69a-493f-9f8d-7cac7fe13461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:39:91:f1:49:4c:13:f7:25:09:af:5f:b4:71:
                    02:33:f2:bf:d3:26:00:7c:0c:ba:04:ee:e4:4b:14:
                    b5:49:e6:e3:02:6d:5a:44:b1:a5:9d:c1:3b:df:e7:
                    83:76:49:0d:30:d4:3a:be:7a:5a:5f:03:d3:e5:4a:
                    97:1a:98:1f:63:ac:c5:97:b9:a7:16:d9:76:ef:41:
                    db:5c:0f:a1:a9:87:54:e2:fd:42:38:0d:7d:2f:9b:
                    d1:17:f1:3e:60:ba:5f:48:41:49:b0:a6:f1:e0:3a:
                    3b:89:b3:f0:c2:ce:9a:e0:4b:21:bb:0c:7b:f4:fb:
                    52:00:c1:fc:c4:b4:83:c0:18:1d:76:eb:55:cc:72:
                    19:de:0a:d5:a5:27:ab:21:13:63:49:c0:90:42:0f:
                    e6:8e:6d:e3:ad:6e:10:b9:08:f3:f7:de:9f:74:b4:
                    6d:c2:98:64:2b:35:63:f7:5c:2d:53:8d:f3:de:b2:
                    64:27:eb:f8:20:ce:b6:21:2b:85:b4:3b:a9:87:a1:
                    30:da:1c:ed:d5:94:43:07:73:22:37:35:f2:1b:06:
                    85:7e:9a:51:cd:f7:55:f5:68:49:51:65:41:d9:57:
                    7a:1b:18:19:ac:f7:77:0b:69:bb:37:0e:8b:b9:89:
                    0b:43:6e:7d:ec:03:85:1c:88:23:f8:bc:24:0f:ea:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E1:EA:F6:04:26:E8:FA:FA:7D:45:0A:D8:14:96:B3:56:A1:C3:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a16c66d-da47-33dd-94c1-c0373c32bd20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:9f:ee:68:12:c7:b5:70:90:66:30:6a:8c:f5:2b:0f:dc:c5:
         d3:81:d1:1f:13:97:58:20:8d:94:7b:ba:71:04:3b:08:87:b7:
         20:b2:37:23:99:57:94:9a:1a:09:02:1b:e2:9f:92:7c:8f:2b:
         84:bb:1a:0e:2f:65:7c:a4:db:b7:b5:2c:4c:9f:c5:4b:15:de:
         69:48:77:55:c5:d6:88:3b:67:8f:f9:02:ca:a5:fd:7d:bb:55:
         bf:41:90:7f:f2:7b:08:f8:4e:bd:7c:2f:1d:d9:df:c3:22:97:
         2b:1b:53:94:fb:97:67:33:f6:5c:7c:53:38:34:7e:c7:83:62:
         36:37:e9:33:72:61:81:e7:0b:a2:95:76:48:79:da:1c:0f:0f:
         2c:c2:b6:2a:9e:de:fc:10:ea:0c:c1:e4:59:f5:44:a7:b0:36:
         dd:6e:e8:f6:51:23:da:91:25:00:36:84:95:3d:0f:0d:93:34:
         89:94:da:e9:78:f4:be:69:b0:86:9e:53:8b:68:52:7f:71:3d:
         21:c7:f4:6a:d1:96:96:58:02:a1:9a:37:62:ba:e5:5d:40:c1:
         65:48:2a:5b:1a:5f:51:9f:e8:3d:dc:9b:0d:39:00:78:1e:c3:
         d3:b2:bd:7a:52:d0:47:b3:f9:0a:37:36:63:ae:5a:3f:ab:8d:
         a5:8c:ff:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:32:03 2026 by rpki-client