Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a16ec444-d4a0-3271-acc7-d3d4538537dd.roa
File:                     a16ec444-d4a0-3271-acc7-d3d4538537dd.roa (raw, json)
Hash identifier:          Un18aKuQEpE56L8IwsCUJaWZ54Kp6ONtZ0nYnG1FO3w=
Subject key identifier:   38:5C:8C:A2:72:30:C4:18:AD:CF:F0:83:22:51:A4:A6:D6:EA:AB:B0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E098B9F5C0277159451100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a16ec444-d4a0-3271-acc7-d3d4538537dd.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.197.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:98:b9:f5:c0:27:71:59:45:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=5162161e-d3e4-43a6-a21a-813da6ecdf9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:80:8d:7e:ba:3b:31:f2:d7:8c:86:8e:ba:8e:
                    6f:3f:1b:1c:80:91:4f:29:e1:54:53:9b:57:10:e3:
                    a9:bc:15:be:5c:7e:71:d0:2a:56:ea:ee:dc:fa:90:
                    bb:88:d4:8e:1d:ac:0b:f7:1c:77:80:85:2b:a8:e5:
                    43:04:5d:1a:de:90:67:1e:9d:44:c3:ea:0e:fc:9f:
                    ec:46:aa:54:97:00:30:fc:36:4a:23:f3:b7:8d:a9:
                    f8:71:14:26:33:63:c6:08:39:19:78:46:b3:e8:29:
                    d3:21:16:80:78:ae:c8:b4:84:dd:87:f4:db:40:79:
                    5c:f6:34:a1:9b:a9:b1:3c:63:48:c1:21:48:bb:5a:
                    4f:cd:6e:de:5c:39:b2:7a:db:9a:66:f2:cd:c4:04:
                    86:6b:6b:a8:ff:0b:15:46:2a:ac:88:05:8f:12:fb:
                    38:15:92:de:52:b0:24:09:11:62:fe:df:f4:5f:b1:
                    50:2b:9f:75:1e:a3:02:df:55:2a:23:0b:c7:f5:0d:
                    19:71:5d:47:ce:45:35:6c:31:fa:2b:5a:45:55:de:
                    06:01:b2:30:57:97:d7:2c:7f:50:3a:ec:7d:3c:e3:
                    2c:09:d6:96:6c:d2:7a:e4:79:b6:3b:24:b7:89:9d:
                    8a:2e:6a:76:46:39:95:fa:70:82:26:61:2b:c1:46:
                    42:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5C:8C:A2:72:30:C4:18:AD:CF:F0:83:22:51:A4:A6:D6:EA:AB:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a16ec444-d4a0-3271-acc7-d3d4538537dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:31:86:40:f6:a6:43:b0:00:f3:d8:82:8f:df:dc:a0:44:45:
         e6:95:09:70:d6:b1:24:06:56:ad:73:48:67:d6:39:70:79:ae:
         16:e3:16:c3:b5:2d:2c:af:ae:5f:93:d3:88:65:eb:eb:4b:d4:
         2f:20:d4:92:b1:a5:19:e9:b1:bb:9e:07:89:03:40:00:8b:ee:
         1d:58:dc:e9:97:42:d8:35:8d:1f:09:fd:96:f5:c8:be:04:eb:
         8a:ba:5e:ae:42:22:31:65:1b:1f:f6:42:de:cf:fc:6c:59:ad:
         27:b1:e9:a6:0f:fe:68:7b:b0:61:fa:aa:64:10:05:8d:0f:41:
         20:d5:90:e8:bf:05:56:77:94:8b:2b:c0:3b:e6:84:b8:6f:6f:
         39:74:35:6d:5c:86:34:b0:86:4a:37:2a:e9:68:f2:bd:4f:e9:
         78:39:11:c7:6f:f9:69:a3:f6:ca:95:99:b2:77:03:aa:4b:49:
         80:56:cb:19:4b:75:de:e4:38:5c:79:a8:6b:05:87:b9:30:9c:
         fa:bf:20:e9:cb:af:90:fb:98:c1:1a:f1:ae:1d:19:61:8c:3f:
         ba:15:d0:bd:67:0e:91:65:fb:eb:7e:b4:b0:f3:ba:2a:92:f4:
         25:fc:25:94:2b:c3:6c:28:fd:cb:67:76:50:f0:b1:77:3d:ba:
         1e:bf:de:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:14 2026 by rpki-client