Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad5f5be9-5164-3617-a46e-17c00a26cf41.roa
File:                     ad5f5be9-5164-3617-a46e-17c00a26cf41.roa (raw, json)
Hash identifier:          NnhrcebCy1cLTgguuGde2y4Oq9xuBzZu7lZ165l7XKg=
Subject key identifier:   A8:6B:35:A8:74:2D:88:25:86:2E:BD:B6:BC:E7:52:3C:AB:A3:C4:E1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0CDCC9A6AEF9AC6E35700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad5f5be9-5164-3617-a46e-17c00a26cf41.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.62.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:cd:cc:9a:6a:ef:9a:c6:e3:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=edb2eeb8-f953-4914-b0f6-350a6e3c40f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:45:05:88:a3:7f:ff:b2:b3:a3:32:6b:59:e3:
                    6b:2a:22:84:e7:90:51:c0:81:19:2e:bb:53:b6:59:
                    f4:ff:38:bc:95:8f:ce:11:5a:fa:15:df:dd:cc:44:
                    0c:91:ce:ee:71:50:38:3f:b6:0e:c2:5e:10:a9:d2:
                    14:d2:41:9a:45:59:3d:5e:27:b7:d6:89:08:69:6d:
                    52:2d:ad:01:a1:2e:77:69:22:17:08:d1:bc:be:30:
                    ef:cc:79:a5:2c:24:f7:a7:8e:2f:04:a1:ef:30:43:
                    17:b4:a5:a2:18:1d:f1:01:cd:ee:25:0d:75:7a:5e:
                    81:9d:f4:d8:32:39:75:3b:6b:fb:f5:c1:a7:fe:43:
                    2d:58:3f:f5:9a:4b:8f:ec:67:ce:7a:99:c7:7d:e0:
                    18:96:7f:0f:34:5c:0e:e4:5d:4c:0e:93:90:de:80:
                    f4:a3:f2:d8:6d:3d:45:9e:53:ed:b6:33:85:d2:0a:
                    70:d9:0e:a1:e5:ed:28:64:de:05:05:24:17:1d:e6:
                    c0:1d:a4:5c:69:35:9c:00:3b:67:ab:6c:2d:e6:43:
                    59:6f:6f:58:17:6f:4b:2b:af:51:1b:e5:b4:9e:a0:
                    37:5b:8e:92:d5:6d:fa:d8:1e:e5:dc:1e:60:0b:e7:
                    30:aa:6c:9a:9c:3d:2e:0b:cc:d7:16:5c:2e:9a:d5:
                    75:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6B:35:A8:74:2D:88:25:86:2E:BD:B6:BC:E7:52:3C:AB:A3:C4:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad5f5be9-5164-3617-a46e-17c00a26cf41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:cd:31:95:9f:9b:82:40:67:41:fe:6e:a6:2d:7e:87:0a:8f:
         4c:95:95:d7:27:b4:68:03:07:a6:be:1d:cd:95:49:37:00:14:
         25:4e:c6:e6:f5:b9:a1:26:b6:0b:66:f7:28:de:ec:64:7f:46:
         46:1f:8c:ec:c1:db:f9:85:4a:a6:a2:28:a6:d1:ba:08:fd:f9:
         4e:6c:54:20:a7:ea:4b:05:22:d0:b7:44:c5:78:54:ce:3d:3e:
         cb:38:23:57:12:02:49:f3:dd:5a:a9:0b:a4:ed:b9:b1:f2:96:
         dc:d5:5c:47:67:96:f3:4f:61:49:8a:97:42:9f:c2:d8:8e:05:
         12:32:f8:46:61:49:55:44:e7:e0:2e:7f:d2:f5:1c:42:77:db:
         e0:57:25:ab:23:53:ae:2b:3e:17:a8:46:bc:12:fd:39:25:7d:
         54:8d:55:4a:cd:47:af:6b:e3:05:f3:2a:24:99:6b:7b:5d:70:
         20:90:e8:f4:f2:fa:61:2a:d5:6b:db:c0:95:c8:8a:dc:71:a3:
         5c:57:c9:40:85:d7:46:d7:bc:3f:34:75:de:6c:6e:25:50:48:
         25:cb:89:ea:2e:90:80:ce:95:e8:9b:df:e2:41:cd:d3:e4:a2:
         80:36:de:38:59:5e:73:a2:8d:bd:57:dc:8c:23:da:94:93:4f:
         8f:fe:44:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:09 2026 by rpki-client