Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6227b0e0-9d7f-3fb9-85d9-68bb3804b4f7.roa
File:                     6227b0e0-9d7f-3fb9-85d9-68bb3804b4f7.roa (raw, json)
Hash identifier:          J3ronX1ndN+ya+0zN3Hp2iMPHr0ikIpPwtbcmipwBTs=
Subject key identifier:   88:D0:60:CC:61:9C:82:B0:9D:01:A7:D9:90:59:C5:DD:11:C5:E0:43
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFE57CDB2523B8B25A4860
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6227b0e0-9d7f-3fb9-85d9-68bb3804b4f7.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.196.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:e5:7c:db:25:23:b8:b2:5a:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=93e7db39-1779-412b-9276-6e3d3eafaff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7a:c1:4e:90:69:d9:b7:99:86:5e:b2:94:60:
                    0d:34:93:52:86:71:64:23:45:9a:80:fe:60:63:e4:
                    49:94:8b:64:cd:05:43:7e:b8:8f:83:ec:7c:9f:20:
                    56:d4:ad:6c:5a:2e:63:d5:52:8c:40:54:bb:cf:87:
                    62:c8:f2:4b:13:b0:87:59:13:37:10:68:a1:eb:f8:
                    ea:75:0e:3f:20:94:4c:ab:05:18:d0:ae:44:b7:49:
                    34:c0:bd:0a:51:d4:e1:4a:58:0c:ac:13:d1:58:c9:
                    8a:69:54:47:0a:c9:15:8d:50:4d:29:0c:54:ee:94:
                    6c:e1:6b:de:17:ee:fc:99:a8:13:73:96:eb:8c:f8:
                    63:f7:8c:53:50:90:6f:d2:96:05:75:85:3b:49:31:
                    d1:82:24:7c:86:e1:df:51:63:44:51:7a:e7:07:15:
                    b6:ec:43:f5:de:c5:07:2a:d6:a8:06:13:d2:11:be:
                    02:09:39:e4:a1:7f:f3:c0:11:87:37:31:58:5d:46:
                    f1:ac:ef:2d:ca:36:92:1e:9b:9c:9c:d9:83:08:af:
                    08:f7:bc:a1:78:e6:b8:67:40:c1:e7:0f:bc:93:b4:
                    00:26:12:f2:b3:69:5b:9b:e3:f9:23:90:b4:74:f4:
                    a0:70:67:2d:b7:d5:ee:90:9f:fe:b0:bb:d1:74:93:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D0:60:CC:61:9C:82:B0:9D:01:A7:D9:90:59:C5:DD:11:C5:E0:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6227b0e0-9d7f-3fb9-85d9-68bb3804b4f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:a5:2b:8b:24:92:d1:04:b4:3d:8b:37:5b:ba:d4:6e:03:3c:
         e3:46:b2:27:10:7b:6b:b2:0a:76:c6:a4:fa:da:ba:67:1d:35:
         c9:63:bf:8e:6c:92:73:e7:71:7c:c1:54:e4:08:0a:85:26:ca:
         ec:6e:5f:d9:50:91:fc:80:82:bd:06:0d:64:2c:7e:78:1c:62:
         93:3d:27:2f:0b:35:2c:91:74:60:93:4f:6c:b8:3c:d9:e1:b4:
         96:07:be:40:9e:e2:4a:5e:ee:de:1d:fb:97:a0:4f:49:dd:e6:
         60:ea:65:4e:70:8b:62:99:ff:25:75:14:b6:87:8d:90:69:c5:
         38:f7:e8:f0:64:cd:79:c0:fa:fa:f9:e4:fa:12:61:a6:15:b9:
         be:dc:f5:a8:72:e2:ee:3e:fb:83:99:a7:d0:3c:b2:7b:9e:9e:
         bc:fe:77:dc:be:fc:dd:13:b4:36:3a:cb:a2:f1:36:02:32:de:
         63:27:d8:fa:2d:6e:ab:07:9d:52:80:e7:db:90:80:e6:9c:97:
         59:2a:f3:e7:61:42:fc:5c:cd:6c:fb:85:74:3a:fd:ca:03:a2:
         b6:62:2b:1a:62:90:65:d3:79:92:bd:b9:9d:7d:97:e6:da:e9:
         3f:4f:aa:b1:97:06:d4:61:f4:b2:d0:b0:9f:b0:b4:a1:30:3f:
         c0:bb:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:49 2026 by rpki-client