Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77fb49ec-1cd3-3b62-b414-a07b2fc1eb32.roa
File:                     77fb49ec-1cd3-3b62-b414-a07b2fc1eb32.roa (raw, json)
Hash identifier:          SdIVa0vqVLPL3dOp+sPmVoPcR9JYX35ZWsvNlXObLXY=
Subject key identifier:   BE:FA:C4:A5:18:8B:30:A9:7D:53:70:AF:19:AE:5D:89:53:23:BC:37
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0D15F21BAC4EA252EA640
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77fb49ec-1cd3-3b62-b414-a07b2fc1eb32.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.62.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:d1:5f:21:ba:c4:ea:25:2e:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=35d845f5-c3a6-4593-b318-b34496bc278b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:48:cd:cc:ac:3a:25:7c:f5:0e:0e:24:00:ae:
                    b4:6a:9d:a8:91:fb:4f:49:e3:f6:69:bd:5f:d1:c9:
                    62:10:a0:89:b0:14:31:7d:20:a1:f9:48:09:d9:03:
                    18:5f:b0:90:07:14:96:6f:ce:13:be:b4:c7:25:83:
                    1a:9f:f7:b0:86:a9:ad:a7:3c:3d:12:8c:5a:af:a1:
                    11:91:8f:54:65:7f:d5:b4:ff:09:e9:24:5b:58:b9:
                    bb:be:1d:ee:21:bc:23:16:f8:75:c3:b3:3c:83:6d:
                    f7:ae:3f:97:d4:7b:8f:73:5c:9a:ef:0e:8e:3e:86:
                    a8:e2:fc:b7:db:8a:35:0e:c0:39:b2:14:9a:32:92:
                    66:a0:41:52:96:f6:ca:53:29:49:bc:a2:59:52:5a:
                    ae:9e:df:9a:0b:14:6b:6c:de:f5:f3:88:c8:58:d2:
                    bb:9b:44:49:93:e7:55:18:1c:a2:67:6d:8e:af:d6:
                    83:1f:d4:ae:5b:79:8a:9a:35:42:80:e3:5c:bf:09:
                    6d:d3:04:bb:26:3d:e6:ad:e5:83:88:48:25:2c:db:
                    cb:9f:6c:52:e5:0f:45:e2:02:b2:25:88:bc:6a:e4:
                    d2:4a:2e:b0:05:06:58:84:c1:c5:41:59:c0:c2:25:
                    e6:07:b8:23:5e:16:35:ef:05:85:7d:f9:46:86:5b:
                    1f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FA:C4:A5:18:8B:30:A9:7D:53:70:AF:19:AE:5D:89:53:23:BC:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77fb49ec-1cd3-3b62-b414-a07b2fc1eb32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:71:b7:a2:46:96:b4:51:08:69:89:eb:ee:95:10:5c:06:a7:
         e5:33:b2:38:79:ba:e1:cf:e7:5c:bb:7e:0b:7e:ad:b2:82:41:
         23:60:25:00:ad:0c:da:6d:07:7a:27:72:29:d1:64:1c:a7:ad:
         db:2c:8b:b1:ae:73:b2:91:53:d5:46:16:fe:37:51:92:42:87:
         6d:62:60:fa:9d:d9:c1:bb:58:2b:22:2d:01:59:31:94:b3:9a:
         76:0d:99:12:d8:f6:d6:ad:06:ea:0b:0c:ad:a9:e9:c2:b8:93:
         dd:0b:e9:5a:dc:3c:0e:51:6a:49:56:0a:e0:db:9b:8a:6b:e8:
         60:40:fe:ec:69:3a:be:d8:f3:57:4d:30:5b:41:8b:7c:c0:f2:
         35:c8:54:99:1d:cb:f7:70:0d:06:a1:67:47:21:9e:bd:19:87:
         4f:17:14:d6:b7:e0:7c:ae:99:50:81:6e:ab:04:5f:b7:2b:78:
         1f:5a:ad:e3:78:61:5e:18:af:41:81:61:8e:35:8d:aa:09:05:
         cc:44:9c:01:e1:32:60:70:bd:58:ff:79:0b:73:67:9a:05:87:
         e8:9c:85:34:56:68:2c:5c:f7:95:5e:e2:9b:49:81:1f:c3:2b:
         9a:95:63:ea:3b:11:41:d9:74:89:fe:81:53:92:02:b8:6f:5d:
         df:89:ff:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:09:03 2026 by rpki-client