Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dbce31f-f057-3e8e-9fe6-46b165ce7862.roa
File:                     6dbce31f-f057-3e8e-9fe6-46b165ce7862.roa (raw, json)
Hash identifier:          JfHmBpOP0Vbe1PhNUa4mNCtardD+GKYN+7qyLP5UT4c=
Subject key identifier:   FF:3A:76:54:9F:DD:E5:73:84:41:1A:5D:70:C4:1D:4C:71:83:EE:46
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983D6201E5640DC287B6280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dbce31f-f057-3e8e-9fe6-46b165ce7862.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        172.242.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:d6:20:1e:56:40:dc:28:7b:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e8fe1ec8-4252-4428-94ac-000cbba50476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d0:5c:dc:37:c3:8e:8c:7d:40:f7:28:81:1a:
                    86:83:03:05:ea:b0:5c:91:09:6e:53:e6:f4:85:61:
                    3f:ff:45:62:c1:68:d9:be:2f:af:fb:a4:ed:ee:67:
                    05:74:a3:6e:33:50:ef:db:e3:73:17:d8:24:7e:75:
                    1b:a0:0f:ec:d4:43:a1:c9:ca:ce:21:17:bb:b4:f9:
                    d7:5d:fe:d4:ed:c3:1f:24:f3:1f:3d:a2:f1:b7:cf:
                    53:42:1b:ce:27:82:ca:c6:02:3d:8b:ca:6b:21:5f:
                    75:c9:87:81:06:76:1d:a4:ea:4b:6f:3b:b0:bd:7f:
                    34:a1:bd:aa:fe:98:2b:0e:fe:dd:1f:3d:32:3b:d5:
                    32:b4:d2:89:54:62:7c:6d:95:65:e2:d7:ca:30:96:
                    b6:2b:23:f6:ff:7c:d5:86:bd:c7:6c:f4:09:a4:53:
                    46:3a:1d:4b:7d:68:1b:61:55:43:72:49:73:3c:9c:
                    93:6d:d6:0f:a7:5a:0d:c4:d1:fa:c0:a7:5b:32:56:
                    84:f1:e1:d5:cf:98:6e:d6:35:20:ad:58:89:18:73:
                    e4:91:6d:63:2d:f0:a2:5d:42:96:ab:7e:d1:e6:77:
                    d2:9e:6d:65:96:db:7d:47:c4:19:67:9c:20:18:d2:
                    cc:d1:e1:82:4a:e2:0b:2f:12:e8:e7:dd:23:03:de:
                    84:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3A:76:54:9F:DD:E5:73:84:41:1A:5D:70:C4:1D:4C:71:83:EE:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dbce31f-f057-3e8e-9fe6-46b165ce7862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:03:96:3c:63:02:e2:f7:92:f0:41:4e:b4:2a:2c:03:d5:6d:
         9b:f1:0a:29:6d:6c:0e:81:c2:b2:29:c9:93:4f:38:79:4b:a2:
         81:94:59:0f:82:1c:a4:ed:c7:29:e3:80:a1:61:4c:1c:70:ce:
         9b:d7:17:72:19:8b:5f:03:02:b7:09:8e:04:7b:31:23:2d:73:
         eb:01:78:a0:62:56:70:bd:b0:05:35:29:de:e2:f9:19:95:ce:
         df:32:4c:7c:0e:56:56:16:1a:36:a5:3c:19:df:66:b4:0a:fd:
         cb:2e:65:29:a0:a5:15:94:93:1d:78:a4:5f:af:01:03:b8:06:
         53:8e:70:74:cb:90:11:92:ff:40:ab:92:bc:ba:86:8f:a9:e4:
         72:e4:ba:b1:51:1e:0b:1e:1e:48:f6:29:b6:3d:ad:2c:d2:85:
         65:77:0a:1f:c0:55:ac:b0:1a:fd:e6:07:7d:b8:3b:95:29:94:
         b9:e3:5c:ce:17:7e:7f:fd:63:e8:74:82:9f:9c:ae:1f:de:98:
         ef:8a:8f:f4:a0:de:85:30:c9:a1:d7:2f:2a:25:39:99:d8:f0:
         be:04:ac:48:99:96:fe:bc:b8:e5:36:82:4c:db:9c:4e:8b:ed:
         95:8a:2e:34:cb:a1:e7:e6:aa:18:29:c6:3d:db:39:3d:9b:ee:
         a7:0f:59:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:23:05 2026 by rpki-client