Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90a7d710-d191-32fd-97cc-732b76d12f3b.roa
File:                     90a7d710-d191-32fd-97cc-732b76d12f3b.roa (raw, json)
Hash identifier:          m8DpwN+Qfycxq3IPhhaABtmMIvfSGhJQXwS6bQRyogg=
Subject key identifier:   7D:55:FE:32:73:48:9E:AF:79:19:52:4B:99:7D:E5:CD:BC:32:65:09
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0BD81A9A4ECC8134A51B4
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90a7d710-d191-32fd-97cc-732b76d12f3b.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.20.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:bd:81:a9:a4:ec:c8:13:4a:51:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=756c0e96-5863-4a62-9b54-35ffddf15e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3f:54:9d:f5:b4:e4:4f:ac:fa:d2:51:be:5b:
                    a4:1a:ab:3a:f0:e4:20:94:aa:f1:49:e2:ba:eb:b7:
                    98:c8:f6:16:dd:e2:71:57:95:2e:0c:2d:32:af:3f:
                    d8:17:0a:4d:79:27:33:e5:54:5f:89:41:56:db:63:
                    82:77:88:11:2b:28:8e:10:28:9c:03:22:79:b8:4c:
                    2d:64:0b:f2:4f:23:bf:7b:ad:59:29:e8:f0:f4:94:
                    93:57:ea:0f:e0:b9:d8:2d:b6:8e:d5:07:c1:0b:8f:
                    02:23:e6:2f:ab:76:ab:cd:1b:4c:5a:b6:57:2d:d3:
                    84:ce:41:b9:19:60:58:ec:94:d9:95:3d:a5:03:b4:
                    f7:32:a0:81:1d:fe:de:3d:9c:b6:b4:4f:69:94:61:
                    81:89:51:a7:2b:ec:0e:79:c8:ac:a8:1a:0c:1b:45:
                    7f:13:ad:f5:22:d2:e4:12:fb:24:bb:13:d5:24:4e:
                    1f:bb:bb:54:4f:04:1f:ff:96:a1:50:97:f0:c7:61:
                    c7:f2:9d:2c:84:b6:3f:01:b2:59:83:18:e2:e2:d7:
                    84:56:91:78:1a:22:c1:58:08:2e:1c:d3:5d:fa:7a:
                    3b:54:59:92:f0:a7:76:8f:d3:28:d8:1e:82:33:03:
                    82:87:80:88:43:c7:0a:1f:f6:15:c9:1d:b8:64:1f:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:55:FE:32:73:48:9E:AF:79:19:52:4B:99:7D:E5:CD:BC:32:65:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/90a7d710-d191-32fd-97cc-732b76d12f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:76:d1:69:4e:76:b3:05:7c:80:03:a5:7d:dd:43:0e:88:72:
         74:b8:4d:bc:4c:29:4d:81:2c:36:91:be:f2:6f:33:c5:f7:98:
         d1:f8:09:86:ba:5f:fc:a4:29:85:55:a6:e7:03:64:9b:a1:86:
         0a:ba:38:64:17:83:3d:0a:06:3f:f8:35:ba:56:e1:4f:f7:3f:
         a6:ec:e8:67:e9:3e:0b:b6:72:d2:aa:d0:38:46:68:e9:b7:80:
         33:ac:fd:fc:6c:65:f7:84:0e:3d:9b:55:87:31:ac:f6:0b:a4:
         16:aa:3b:cf:0b:97:d0:1b:67:11:1e:e8:36:69:86:0c:18:f3:
         38:1f:c3:5b:6b:8c:30:fa:2b:10:ab:ff:fb:21:09:63:63:d2:
         f2:84:a5:59:ad:97:0c:07:32:fd:3e:0d:c9:a0:a6:ff:b0:e7:
         9e:12:fe:65:51:fa:14:f1:f5:e2:ef:da:2d:ec:72:f7:9c:1c:
         a4:e4:d7:2f:28:73:e2:b3:c5:92:9b:64:f8:d8:d4:e4:08:e2:
         7d:38:c8:24:2e:86:ca:c4:d4:61:e4:0e:7e:fb:c1:24:3c:a0:
         fb:da:16:50:2a:23:52:72:a4:9d:d8:2c:ff:0e:71:8a:dd:3d:
         23:60:3a:d3:8a:0f:e3:e1:88:b3:c2:80:18:a4:3b:b4:c8:f3:
         8f:cc:1e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:40:05 2026 by rpki-client