Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/92548fef-f4d5-356f-ba3d-7a5589ed7919.roa
File:                     92548fef-f4d5-356f-ba3d-7a5589ed7919.roa (raw, json)
Hash identifier:          CSvaJpXCR2GBKtiZE1ouxJMnjdDIITOq28Kxbn6+EeE=
Subject key identifier:   4A:0D:42:91:74:15:F9:DF:1B:22:DF:34:E2:88:D9:CF:7D:E9:EA:CC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983EF320D302737A9F10C00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/92548fef-f4d5-356f-ba3d-7a5589ed7919.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        172.243.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:ef:32:0d:30:27:37:a9:f1:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c8b95d93-6f42-400c-9f03-ac0fd4ad05f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:99:aa:db:6c:8c:62:7f:24:89:bf:0e:45:
                    11:57:c8:b7:de:a8:d8:fc:7e:44:0f:8b:c5:7c:ee:
                    1d:9c:a9:2c:ee:bd:db:de:db:b2:cf:69:5b:d6:1c:
                    e0:d2:20:4e:f6:02:52:a2:84:ea:0f:37:d3:4c:33:
                    99:a5:26:6b:4f:94:49:d1:3c:0d:6b:69:19:53:0e:
                    a1:18:83:ec:77:1d:f4:3e:89:35:bc:85:e9:85:06:
                    de:26:78:0f:78:bd:ef:5f:48:19:04:5a:f1:70:c2:
                    36:41:42:a8:70:9b:b8:45:de:37:d6:ed:1f:f6:0f:
                    16:1a:ca:b4:43:48:2b:63:a5:94:24:d9:73:56:b4:
                    11:f2:f2:5e:b0:21:4c:7a:94:03:5f:db:b5:dd:6f:
                    4a:68:e0:c7:a3:77:c8:8b:ac:f0:3c:41:93:97:68:
                    5b:e4:05:25:bc:4e:a7:11:b5:0c:6a:75:9b:4a:9b:
                    95:8f:31:f8:1e:50:c5:db:69:85:59:ae:93:64:ee:
                    3b:74:3b:8f:0d:56:2e:2a:ef:dc:39:d1:9f:c3:a4:
                    ab:d2:de:c0:0d:8e:73:22:65:19:b0:dc:23:ba:a0:
                    1b:89:90:07:fa:1b:8d:9e:7f:e2:1c:c7:1d:d7:3c:
                    a7:b5:4e:72:81:92:66:6b:a8:f1:ce:ad:43:c3:e0:
                    87:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0D:42:91:74:15:F9:DF:1B:22:DF:34:E2:88:D9:CF:7D:E9:EA:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/92548fef-f4d5-356f-ba3d-7a5589ed7919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:19:33:40:9f:c2:e5:bb:be:70:46:86:76:1e:d3:08:6c:51:
         02:45:91:9c:91:66:31:70:9e:0e:63:c5:45:04:d1:8d:97:2f:
         96:f4:b2:b1:87:6d:3c:8b:7d:fd:86:40:e6:22:09:8b:15:4e:
         4d:f3:39:33:18:fb:78:c7:24:74:b8:0c:b1:63:04:c7:b3:30:
         82:e0:8f:d0:20:75:ae:73:17:bf:e2:4f:3d:18:2a:54:9e:25:
         0c:69:f6:90:6a:82:63:ba:dd:38:62:cc:e2:1e:e0:5f:42:6b:
         a2:13:c7:5f:b5:d5:2f:af:da:b1:e9:8d:dd:02:f8:af:67:09:
         27:7a:57:5a:cf:e6:10:bf:04:58:68:42:76:4c:24:e4:8d:bd:
         66:12:d6:7c:23:90:8d:9d:b0:df:d3:e0:ef:56:04:6e:6f:fe:
         8e:3a:fb:38:c0:e9:56:e3:11:61:69:5c:71:cf:8a:6f:c3:62:
         5e:04:e3:65:3c:17:e5:64:71:9b:22:85:22:2f:3f:16:62:c9:
         2b:eb:cb:28:f8:6f:2b:9f:c3:91:1e:4d:37:92:99:2d:4a:91:
         72:91:52:ba:a3:c4:e4:b3:71:55:79:54:35:5b:d7:7f:84:f6:
         5a:1a:cf:38:6e:71:8c:af:8c:7c:fd:69:86:50:db:60:6f:40:
         98:2e:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:00:51 2026 by rpki-client