Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/34927099-dfeb-3754-b50d-e4a3d284c3ee.roa
File:                     34927099-dfeb-3754-b50d-e4a3d284c3ee.roa (raw, json)
Hash identifier:          F5u++nRyypiIZDfgDZSPUQfxUyvAlGpgqTjf+vKQ+Hg=
Subject key identifier:   C0:ED:2E:CA:B6:F6:50:5D:5E:D1:BE:34:50:70:80:0F:C5:BC:DF:79
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0D821883816E2D8580600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/34927099-dfeb-3754-b50d-e4a3d284c3ee.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.63.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:d8:21:88:38:16:e2:d8:58:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=2c05e23a-9d67-4c71-877f-c0edadb70f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:da:b9:fc:e2:f0:0d:b0:6c:bd:ae:a7:33:
                    68:f1:84:d7:ae:83:a1:03:95:56:d7:33:72:b5:b3:
                    ee:12:6b:d9:2b:70:74:39:8f:33:00:3b:24:75:19:
                    24:f5:42:83:5e:0a:8e:fb:84:35:85:89:5d:23:a8:
                    0e:3f:64:57:6d:86:90:37:99:24:90:80:34:9e:66:
                    46:20:ba:63:61:c1:03:51:d4:b3:19:52:4d:50:48:
                    5e:6c:a3:0e:d5:b3:47:55:44:ff:11:37:a4:e9:97:
                    07:89:88:91:75:11:02:bc:33:48:8d:bd:86:52:de:
                    ff:8a:bf:a5:b8:1a:86:0f:ee:5b:15:16:cc:94:a4:
                    83:37:47:46:92:e1:49:1a:c2:db:dd:6d:4d:35:91:
                    50:c0:a2:21:ee:9e:82:3b:d4:ef:60:24:47:aa:9e:
                    af:5e:ff:00:b2:0c:11:9c:72:68:41:04:d6:7e:3d:
                    90:1c:28:45:69:04:71:e2:24:3d:d0:50:09:75:e5:
                    a6:b2:c9:65:3c:8f:a2:38:8a:4a:f4:3e:04:c0:7c:
                    58:42:e7:27:d6:dc:c9:10:c0:5b:40:a6:64:03:03:
                    02:39:94:40:8f:ab:a7:fd:68:d1:ee:36:0e:3e:5b:
                    6c:8c:da:a9:4a:9c:96:ee:2a:88:41:39:99:c0:4f:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:ED:2E:CA:B6:F6:50:5D:5E:D1:BE:34:50:70:80:0F:C5:BC:DF:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/34927099-dfeb-3754-b50d-e4a3d284c3ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:67:f8:61:73:a4:63:ec:dd:a0:18:06:12:d8:e8:b6:ed:db:
         37:e2:c2:41:60:38:4a:aa:a7:10:ed:b4:ca:19:64:da:42:bb:
         09:e8:bb:57:7e:62:aa:58:94:0d:21:79:20:9c:ad:28:66:6e:
         bd:b0:4c:29:80:e2:fe:a1:65:e9:4a:6c:c7:71:36:93:53:fe:
         3d:f0:6d:9c:79:ae:cf:fb:e7:da:0d:6e:e1:83:ec:c6:95:89:
         80:ef:ba:1f:6b:2c:b7:68:e9:8b:b3:b0:f7:99:c6:6e:6e:2e:
         dc:40:13:65:3c:3d:6c:11:a2:66:c6:6a:6b:7b:55:9a:0f:f9:
         dc:c6:70:4e:07:6e:3d:5e:6d:e1:64:98:6f:d1:68:96:54:cc:
         50:f3:26:46:38:70:53:49:30:4d:52:26:f9:14:85:d1:16:d3:
         68:a1:6e:6f:a4:61:c9:a2:87:fb:ca:5a:0e:55:9a:06:66:50:
         4d:05:1b:c1:7d:b0:3b:6f:ff:6a:e2:10:8a:f2:d4:a2:d5:87:
         a9:d5:21:c4:65:90:9f:a9:fe:10:d9:b0:6e:0e:03:3d:6d:bd:
         51:d1:1d:7a:6b:1a:e0:8a:f8:72:67:fc:da:83:21:3b:87:b9:
         de:d2:7a:f3:6e:ea:b1:9a:52:c3:8a:a5:18:f1:31:5e:9c:a6:
         96:00:a1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:24 2026 by rpki-client