Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/924d5c82-5fd2-3781-949e-453b857408b2.roa
File:                     924d5c82-5fd2-3781-949e-453b857408b2.roa (raw, json)
Hash identifier:          8Mlox+B6WgXcUDAVwJeysXj2xJfFP69c0xaWuuCuwJc=
Subject key identifier:   58:82:57:A8:CC:EE:49:AB:49:5A:25:36:C8:AE:5F:65:4C:84:26:9C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E09C5494934147F87343C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/924d5c82-5fd2-3781-949e-453b857408b2.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.197.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:9c:54:94:93:41:47:f8:73:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=02a6c172-5480-487e-bf82-1ef55853c2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:46:40:21:c6:a5:0a:02:47:ea:9b:28:42:
                    01:bb:d0:3c:8a:eb:e4:25:35:fb:a1:be:51:fd:c2:
                    0b:57:5b:96:32:40:77:46:87:c6:7d:d4:26:6f:32:
                    e8:49:68:a2:b0:6e:2e:ba:11:b7:8e:52:31:b7:02:
                    08:d8:82:d3:a4:a5:60:1d:e0:83:73:76:89:0f:7e:
                    0d:1c:21:a4:61:85:41:7d:bc:8b:ad:c8:18:e5:1e:
                    2c:e3:eb:9a:0d:20:30:12:75:61:4f:69:60:78:37:
                    62:33:ff:63:2c:82:3c:a4:39:1a:d9:53:cb:f4:7d:
                    6c:cc:af:11:ee:de:8e:ed:fb:be:83:cd:b2:f4:69:
                    d8:0f:38:ad:32:5b:98:7a:1f:8c:da:05:ef:70:39:
                    c9:af:b2:14:47:fd:e9:59:76:fc:42:43:ed:81:d4:
                    59:8a:59:7d:6d:a0:ec:10:32:c0:67:18:e7:29:09:
                    a3:ff:35:36:de:1c:70:4a:81:0b:00:71:28:67:aa:
                    85:f1:25:b6:a9:4b:66:81:db:0e:df:f0:a0:c0:c3:
                    c0:27:7f:95:92:b8:ec:42:27:19:bf:3d:87:e7:b4:
                    0f:e6:99:4c:5a:2e:73:4a:67:29:b9:a3:a7:3e:41:
                    05:1a:47:10:16:5f:5a:e8:52:55:ee:a3:d1:cd:41:
                    4d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:82:57:A8:CC:EE:49:AB:49:5A:25:36:C8:AE:5F:65:4C:84:26:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/924d5c82-5fd2-3781-949e-453b857408b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:02:f4:20:25:98:25:6b:16:d5:af:e3:ff:b2:42:3b:df:a7:
         67:ec:8b:e6:92:49:b0:cf:cd:60:3a:fd:37:f2:78:bf:2f:dc:
         3b:cf:c4:3d:c5:2d:5d:96:44:8f:d5:9b:e7:c6:aa:ab:de:10:
         eb:9e:80:c9:f3:c3:b2:d8:15:d3:aa:6c:c8:61:56:4c:66:fe:
         b7:7a:10:e0:67:ae:48:89:aa:65:e3:fa:32:38:35:6d:57:3f:
         fd:52:3e:90:9c:f5:93:69:bb:33:9e:f9:61:9f:d2:3c:ef:30:
         06:9b:87:3e:26:61:5f:43:08:38:56:27:a5:65:90:34:cd:66:
         82:d3:99:a1:1d:68:da:2e:6f:4f:dc:22:bf:7c:aa:03:81:64:
         48:4c:c1:a0:c8:63:7e:2a:50:63:8e:12:c0:44:4f:76:7c:e1:
         77:df:96:95:2d:e5:e6:e7:9a:84:0e:e7:5e:7b:35:de:16:9b:
         21:b4:04:ce:b1:9e:1b:48:44:f1:9e:39:bb:6b:d7:22:26:4b:
         bd:6d:e9:ac:ec:8e:43:20:8d:0b:6f:31:b1:9a:a7:6c:00:eb:
         09:55:f2:9f:49:bb:10:18:b3:81:89:59:87:6a:c6:36:95:6d:
         3e:31:3e:55:52:98:ed:b5:98:cb:64:a3:34:32:d0:83:db:be:
         4b:c9:9b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:08:00 2026 by rpki-client