Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4853c0da-0a11-31eb-8ffb-975a65fe19f4.roa
File:                     4853c0da-0a11-31eb-8ffb-975a65fe19f4.roa (raw, json)
Hash identifier:          lNgAP7t+urvfxm/qkvT14mAPo5HuTu8Y1KmPfmXF2fw=
Subject key identifier:   5E:0D:3D:83:3A:7A:AD:30:A2:60:CA:29:FB:0A:7A:C9:64:0C:42:41
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0D6154F77ECA73C52BAC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4853c0da-0a11-31eb-8ffb-975a65fe19f4.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.63.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:d6:15:4f:77:ec:a7:3c:52:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=2797704b-b932-4d68-89bd-541b6f7bfbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:a6:8e:73:35:d7:e5:d1:23:9b:f7:1d:1e:
                    c8:e0:80:2b:6c:15:b3:1a:f2:d9:61:08:09:44:f1:
                    4f:0c:9c:eb:6c:41:b4:0f:58:f4:af:e6:fe:e2:fa:
                    b8:8a:e6:41:72:a9:48:6d:e3:c1:2a:1f:a1:84:2e:
                    30:3d:85:9b:eb:39:a0:37:e2:0d:29:02:60:47:1f:
                    02:4c:1b:9c:4a:29:07:14:62:e4:79:9e:3a:f2:ce:
                    b9:6e:ce:a1:c0:15:05:e9:0a:80:91:6f:14:53:91:
                    43:19:64:c1:3a:5a:99:a3:e2:57:e0:85:76:0b:78:
                    ee:f2:8a:0c:b7:18:f5:fa:ba:cb:2d:52:38:6f:ab:
                    60:c0:2e:58:80:0f:10:24:33:bb:90:15:4b:b4:f2:
                    b9:32:f9:30:93:75:41:42:ae:9d:7e:8c:ac:96:9e:
                    52:62:d2:63:66:45:47:14:89:3a:2b:e3:82:9f:33:
                    c1:57:8f:2c:a0:94:e6:cb:4c:b2:48:37:b6:87:2c:
                    ac:78:bf:96:dc:88:70:94:18:f9:4b:9d:b6:93:b0:
                    f0:93:4b:e0:59:ab:5d:49:40:02:f9:8f:20:f8:e8:
                    0e:2c:40:bf:27:1b:6f:5c:a8:ba:0d:18:54:fd:72:
                    bb:8e:4d:d7:5c:10:1d:a2:26:97:c2:d3:c1:f2:10:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0D:3D:83:3A:7A:AD:30:A2:60:CA:29:FB:0A:7A:C9:64:0C:42:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4853c0da-0a11-31eb-8ffb-975a65fe19f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d9:21:94:e2:35:99:a0:ab:66:16:b9:9a:2d:c6:3d:0c:8a:
         8a:a1:c6:55:85:a6:35:7e:a9:84:9d:33:60:f6:25:ed:a1:e4:
         19:6b:73:58:ef:39:18:43:a1:17:f3:72:76:ee:d7:bc:75:a0:
         40:0b:1a:cd:7e:53:25:a3:3a:0a:5a:ef:14:82:85:49:89:b5:
         59:bb:4c:c6:86:63:5d:b3:3b:c5:dc:0d:9b:69:10:01:19:25:
         89:12:8c:88:64:a5:69:49:54:dd:02:5c:10:6c:78:4e:cd:14:
         4d:35:51:96:9e:d1:52:68:5e:7b:08:af:0a:55:69:19:07:fa:
         d4:88:b5:5c:38:e1:85:0f:f5:b9:e8:96:90:ed:52:ee:21:1a:
         61:db:08:0b:7b:bc:d7:7f:bb:d5:21:3e:2f:4e:77:f9:24:6c:
         2d:e1:7c:69:18:b5:08:cc:c5:fb:79:ce:70:45:a8:4d:7a:07:
         dc:92:b3:56:d5:e7:45:39:f1:1e:92:4b:d4:ac:80:a2:7d:07:
         62:cc:34:41:f7:df:d6:08:f9:3d:02:55:c6:99:f9:1e:3e:6e:
         93:c3:6a:50:be:94:01:30:b4:cf:93:b0:35:d4:d2:91:67:61:
         0f:77:3e:3a:e5:54:fb:84:26:6f:15:c1:2f:e9:3c:9f:44:d5:
         f1:2b:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:17 2026 by rpki-client