Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5262cff4-846a-39ea-bc2e-8a8b8b15da90.roa
File:                     5262cff4-846a-39ea-bc2e-8a8b8b15da90.roa (raw, json)
Hash identifier:          4B/w70ao0TeMsaGvNq1IDaJCu+v97c8N/INW12EBHXI=
Subject key identifier:   5E:53:54:1D:3D:E4:43:06:15:86:01:94:CE:95:54:10:CB:63:48:9F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E09CABD837764BFE1B5700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5262cff4-846a-39ea-bc2e-8a8b8b15da90.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.197.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:9c:ab:d8:37:76:4b:fe:1b:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=2a0ac83b-b9e4-40f1-9d11-236930d5b5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:b1:41:83:48:ee:90:05:91:99:f2:d2:e3:
                    18:2b:3f:a7:b3:e0:ce:14:82:dd:4e:32:56:26:27:
                    89:39:3a:f6:59:b2:e1:b1:5d:9d:59:1b:62:c1:f2:
                    a2:18:5b:36:7a:b3:8f:4d:fe:b0:a9:1c:7e:2f:4f:
                    87:83:d6:08:8d:72:95:57:96:c8:b8:b0:cc:1c:6e:
                    c5:c9:d0:ce:18:32:b0:b3:fd:35:1c:85:e9:6d:b8:
                    a7:54:fd:f7:26:cb:12:42:8a:b7:1f:39:78:18:2f:
                    40:91:98:fa:6f:86:83:00:f4:b5:1b:29:87:53:45:
                    79:6d:38:d3:cb:f1:11:58:d8:cd:bd:62:8b:52:17:
                    ae:e5:0c:6a:ec:03:38:7d:5f:94:85:79:53:ef:9c:
                    5e:2b:d2:76:44:9b:05:d4:21:39:25:bf:de:67:7f:
                    54:ad:69:47:ef:48:3d:e9:ac:97:26:0d:97:93:00:
                    78:c1:e0:4e:f6:cf:f8:1b:8c:07:36:8e:c8:c2:de:
                    ff:53:a7:83:a8:be:91:0a:84:d1:9b:bb:a9:3e:43:
                    be:0f:e7:56:24:a4:87:c2:48:99:09:f8:a4:e4:c7:
                    7c:90:2b:28:d6:3e:a5:c3:92:b0:2b:d5:c4:6e:bc:
                    fa:74:ef:11:e1:7b:7e:0c:3c:49:2a:98:1a:3b:37:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:53:54:1D:3D:E4:43:06:15:86:01:94:CE:95:54:10:CB:63:48:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5262cff4-846a-39ea-bc2e-8a8b8b15da90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f1:15:1b:d1:91:52:bc:a0:1a:c3:bb:ff:19:94:cf:6e:ed:
         f3:e9:e9:e4:64:0b:7e:98:88:f4:78:82:57:3f:6f:58:e8:24:
         57:38:b6:63:ca:45:34:fb:46:cc:e7:85:d7:db:8a:f1:bc:a0:
         2a:bd:eb:90:09:18:b7:ea:e2:f7:6b:95:4a:4f:94:66:78:9a:
         28:d7:ce:5f:dc:8f:23:6e:db:7f:14:58:6d:b3:5f:36:0c:17:
         68:fc:9a:28:ed:34:72:d5:1a:4c:d5:54:ee:50:f1:1f:94:db:
         3b:d2:c0:f5:1b:6d:97:ca:92:60:0a:d7:4c:5a:06:44:0f:41:
         2e:43:fd:0b:7b:a0:1c:dc:f5:16:87:37:ac:88:4d:de:b8:42:
         3a:43:27:f3:3e:6c:13:8a:f7:12:26:15:fe:19:30:cf:92:c3:
         31:ac:73:4c:d3:e9:dd:69:3b:fb:71:ed:f5:89:1e:cf:96:b4:
         9d:7e:7c:4e:51:00:aa:97:44:67:27:51:40:a0:7a:65:2b:8f:
         99:8c:e8:57:fd:d8:11:6a:b7:95:b9:cf:26:98:7f:44:a0:28:
         06:c2:b9:cc:00:cf:da:82:14:05:32:b2:fe:ae:43:c1:00:27:
         f3:a8:6c:ae:0a:00:2d:7c:04:23:f7:b7:1a:96:e3:f6:89:76:
         d3:7d:20:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:24:02 2026 by rpki-client