Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c8e6f45-a9b2-3b45-b6e2-936f95881382.roa
File:                     4c8e6f45-a9b2-3b45-b6e2-936f95881382.roa (raw, json)
Hash identifier:          We9d+LObMVzZgPpa0BGz3NvPlK7RiJeOi7Kqcbowxjw=
Subject key identifier:   57:EF:F0:19:CC:05:75:C3:F9:1E:AB:04:1F:77:38:3D:4B:77:A5:97
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E006D553E8F296001B4E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c8e6f45-a9b2-3b45-b6e2-936f95881382.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.20.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:06:d5:53:e8:f2:96:00:1b:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=cfe6265d-1e1a-4d27-9c51-55b4203ceb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:c4:c5:30:98:1c:b0:9f:64:fe:41:b0:e5:
                    72:f9:88:4b:c2:ec:a6:8e:11:db:89:d5:34:9f:db:
                    f3:bd:e1:fe:12:8f:03:9d:90:be:40:60:2b:16:0b:
                    21:00:e2:b0:0c:05:a0:aa:38:b5:27:d6:22:05:5e:
                    07:da:25:56:08:f7:0d:c6:71:8e:ed:f6:5b:ca:27:
                    f7:9b:36:16:08:25:b0:0d:0b:37:3c:23:37:e6:d4:
                    32:2a:2c:f6:88:57:a1:d9:4c:90:56:43:4b:fe:a5:
                    be:07:92:ee:c7:e7:a1:c5:34:d4:00:30:52:2c:97:
                    9b:a1:bb:68:67:f5:e6:d1:c7:e4:05:b3:e8:7a:b2:
                    ff:9a:8e:c5:59:7b:9a:ff:a8:68:2d:04:c7:d9:93:
                    20:3f:41:7d:90:57:09:82:72:72:9e:ef:44:62:5d:
                    ff:7d:99:75:00:e2:5f:8a:6d:b7:e0:9f:fd:9f:dc:
                    3e:bb:b9:41:99:84:42:e5:0f:c1:0a:f9:c5:ec:ed:
                    e5:10:52:1c:fb:49:49:cb:65:c7:33:b6:54:e9:82:
                    c7:69:37:f0:47:92:4d:d4:9c:3d:6e:98:1f:13:40:
                    ca:23:71:a4:1b:9c:37:47:66:d9:ab:dd:49:c6:0d:
                    5b:37:77:4f:11:cd:71:36:29:52:bf:5d:fb:c8:8f:
                    ff:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EF:F0:19:CC:05:75:C3:F9:1E:AB:04:1F:77:38:3D:4B:77:A5:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c8e6f45-a9b2-3b45-b6e2-936f95881382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:3d:cd:48:e9:df:7c:a9:f7:12:f5:d4:5a:b1:32:58:da:cd:
         0f:40:ed:7b:3f:e2:70:b1:6d:b7:27:e3:86:74:87:e2:35:74:
         23:37:db:f8:91:54:86:8e:94:a2:62:6a:30:3b:67:fb:c6:e5:
         16:09:8c:19:8d:90:45:72:07:a3:52:21:d5:44:99:39:74:1b:
         9b:ae:4e:91:96:a5:c0:21:f3:b8:b4:fe:56:93:a7:c4:c7:b5:
         21:04:53:e7:52:ff:df:5c:ea:b8:e2:58:b6:ce:1b:53:ed:6c:
         98:b6:7b:a9:c0:24:7b:f4:5c:14:4a:97:d2:46:d2:bc:55:be:
         e1:77:a8:18:23:e0:78:2a:82:a5:95:25:a6:58:d6:ac:bc:57:
         4c:71:07:ba:0c:1c:e4:92:8f:d7:48:59:21:29:f6:ff:3d:1e:
         0b:a2:cc:d1:6a:3e:8c:a2:42:bc:ca:c1:ec:93:35:7e:c1:43:
         ff:f2:20:67:7b:b0:62:cc:1d:14:e1:5c:38:f9:d6:7d:5b:d1:
         52:96:9b:94:6f:25:2e:c1:59:f6:44:b7:51:35:ea:ac:36:fc:
         a3:f9:04:ee:e1:b6:ab:71:4e:d7:a9:9e:d2:c8:bc:b8:41:1d:
         76:98:94:b8:85:f5:4c:27:94:6b:58:7a:34:16:bb:53:53:54:
         d2:60:17:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:45 2026 by rpki-client