Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2aa6628c-4de4-31d6-859b-b2a0649b2a79.roa
File:                     2aa6628c-4de4-31d6-859b-b2a0649b2a79.roa (raw, json)
Hash identifier:          wsRDm/LjjjduD/IVb0y0NCmoPRlqrS8iY1fvDeD9x50=
Subject key identifier:   E3:24:39:22:44:23:A3:6E:5E:36:22:10:4E:F7:ED:F6:E5:FB:6A:B0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFEF96B30B8FC1A3F39180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2aa6628c-4de4-31d6-859b-b2a0649b2a79.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.198.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:ef:96:b3:0b:8f:c1:a3:f3:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=a633de9f-b7cd-4688-8380-a0235280cf82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:09:15:46:92:e2:92:0a:6c:b1:81:31:76:af:
                    f6:aa:e0:63:57:a9:69:b4:6a:fb:de:86:66:fc:80:
                    4d:9f:51:f4:59:29:7f:58:42:aa:e9:5d:f6:ac:e7:
                    b5:48:a6:44:a9:fa:66:3c:88:f6:63:0d:05:ff:e4:
                    1f:2e:3e:ba:6d:d8:4f:68:8f:ef:d0:83:a3:e9:b0:
                    59:f1:e4:81:b6:10:e9:b7:ef:4a:52:0b:63:93:c4:
                    3e:df:4d:ab:52:b0:35:b1:04:b5:df:6e:a9:bc:2f:
                    5a:95:64:94:7b:9a:44:4b:96:b5:2b:30:7f:ff:20:
                    be:3b:5e:e1:44:7c:6d:15:fd:35:84:63:50:c4:7e:
                    e8:ea:8b:4a:b7:a7:c4:da:d2:ab:3c:76:43:80:72:
                    89:0d:8a:3d:06:b7:5e:e8:f3:98:91:4e:48:92:ef:
                    d6:c6:4d:40:b2:c7:cb:d2:75:a9:e6:6f:19:14:2b:
                    21:6d:33:cf:74:9c:f0:21:67:e5:75:8f:ff:b5:fb:
                    e4:c8:2a:c2:bf:9a:c2:c0:a6:12:a3:c9:16:c7:4d:
                    9d:3d:34:5e:02:e9:e4:25:53:22:91:52:f7:0d:e1:
                    64:96:da:d9:80:34:c6:15:2c:4d:75:c6:7a:ae:f4:
                    fe:d2:31:5b:ed:b6:34:64:12:e0:06:5d:64:e8:a1:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:39:22:44:23:A3:6E:5E:36:22:10:4E:F7:ED:F6:E5:FB:6A:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2aa6628c-4de4-31d6-859b-b2a0649b2a79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e7:f2:bf:e1:de:cf:2b:e6:00:14:fc:3d:fc:45:2b:e2:3e:
         f6:28:24:a8:10:e5:95:c5:c6:7c:03:38:ce:31:a5:b9:8e:4b:
         d7:0c:1a:9f:c6:55:da:78:bd:3f:63:62:b4:33:d7:14:5a:1b:
         b3:99:c8:5d:00:15:d4:17:f5:42:f1:c9:f0:fa:f3:f3:f6:96:
         f0:f7:1d:61:c0:11:ca:91:a8:e6:09:3a:19:e1:c7:86:fa:68:
         47:8a:a1:38:d6:f0:02:5d:77:e1:3b:5c:ca:34:46:69:08:75:
         55:ec:12:81:d8:1a:f1:b4:94:eb:05:3e:7a:7c:ee:7d:cf:1f:
         3a:fb:25:31:dd:32:b4:29:51:51:8f:74:72:f0:6c:60:7c:57:
         b2:c1:15:83:d1:75:13:5e:56:56:55:39:6d:f9:15:58:ff:dd:
         c2:47:d3:2a:55:f8:a7:af:cf:e2:db:7d:5a:1c:28:24:b3:48:
         1a:4f:de:72:a9:59:bf:07:a3:d9:9a:06:33:25:bc:3e:fe:91:
         3a:83:03:63:2d:02:69:aa:54:78:69:71:67:2c:97:99:9c:d6:
         3a:a6:72:fd:b4:f6:f2:d9:26:61:6a:9e:cd:85:be:4e:e1:cf:
         e6:f9:66:e2:a5:0f:e1:1b:e5:51:df:d5:09:d6:aa:1d:c8:93:
         75:f1:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:40 2026 by rpki-client