Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78345f08-828d-33ca-b542-d545e34a9486.roa
File:                     78345f08-828d-33ca-b542-d545e34a9486.roa (raw, json)
Hash identifier:          VbGgbgJR/yu0PZrB9wdjTS/nxG2QyGvBMwYbDLKtO44=
Subject key identifier:   1B:3B:E1:CF:E2:7F:8B:45:CF:FF:DF:AD:82:13:78:D7:34:8F:C3:0E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E08E3BD3C9E729D9CED180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78345f08-828d-33ca-b542-d545e34a9486.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.196.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:8e:3b:d3:c9:e7:29:d9:ce:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=5ff38b85-d5f3-43c8-9024-8b0baa2c4efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:38:bc:14:6e:1e:20:81:b1:fc:3e:34:50:
                    1c:43:cb:30:42:59:81:14:19:0c:9a:37:1e:e3:ad:
                    31:06:84:e1:fc:32:d0:a2:88:d7:c2:f5:3f:6c:85:
                    98:c2:d4:c5:dd:37:c3:4e:25:96:0a:da:ef:63:9b:
                    e1:55:2b:aa:4f:6a:fd:49:75:93:00:28:b8:ad:96:
                    c0:13:bf:1e:f7:6b:67:d9:7e:fb:1e:01:6e:05:88:
                    5e:d1:f3:94:3a:20:ea:41:ed:1b:64:50:ac:89:87:
                    17:a8:db:de:52:26:e3:68:da:42:ba:23:3c:ea:d9:
                    9b:71:bb:82:8d:05:ce:29:34:24:ea:e9:5e:17:05:
                    25:c8:dc:2b:fe:d3:f1:52:e0:43:c5:20:bd:9a:78:
                    ac:46:d6:e4:58:1f:84:bc:b7:b1:25:66:72:9c:13:
                    3a:0c:23:7b:70:ab:57:f9:12:80:e9:30:33:55:1e:
                    95:77:00:d9:95:df:74:b9:86:c7:c0:55:86:6c:2f:
                    9e:24:92:53:a7:9c:c4:c2:9e:6c:c6:3a:7b:2c:dd:
                    96:7b:ae:27:ad:e9:51:73:b2:01:d3:fc:a6:57:0e:
                    e4:f9:ca:8e:45:70:5e:c7:c4:05:06:ab:ea:d3:a6:
                    b7:12:1e:34:ae:2b:90:70:1f:d6:01:c0:c8:97:e6:
                    74:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3B:E1:CF:E2:7F:8B:45:CF:FF:DF:AD:82:13:78:D7:34:8F:C3:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/78345f08-828d-33ca-b542-d545e34a9486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:18:51:13:2b:f9:38:2b:a7:a3:fa:ac:a1:9b:90:66:1a:c8:
         f4:f8:8d:76:05:49:50:b1:10:00:18:85:c2:3f:9d:55:09:01:
         04:65:75:76:a3:f3:73:1c:66:82:52:1c:77:2a:7a:8b:9c:54:
         67:eb:49:3d:6c:0f:b9:98:59:f8:67:15:d1:ba:7b:74:65:97:
         62:be:98:d9:16:75:39:c1:6d:3a:5e:66:16:3c:58:25:c0:35:
         21:a8:0d:88:cd:af:eb:50:f0:8c:eb:03:31:44:b6:09:52:07:
         33:71:9f:a3:c3:69:62:c2:d5:bc:d3:cf:12:fa:31:71:37:e2:
         a1:48:47:f1:d3:c3:58:a6:10:90:51:81:ce:f9:fe:6d:52:41:
         e9:07:06:65:85:12:70:76:47:8f:d9:22:d6:06:de:a9:31:89:
         c4:b9:54:73:17:f7:6a:4e:03:10:7c:ba:ac:af:ad:f4:8b:69:
         a8:01:ce:09:44:32:bd:ae:3c:a7:0b:06:98:f5:f6:df:7d:bd:
         7f:46:40:67:2c:ab:a1:27:d0:45:0c:22:58:65:52:0e:4a:aa:
         99:79:0d:ee:7e:24:39:18:54:e7:93:cb:e6:7c:46:12:cc:64:
         06:52:5d:84:b3:f1:09:7c:79:94:09:e8:ed:a4:b0:66:80:6e:
         18:f4:4a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:02:11 2026 by rpki-client