Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0766f45-3354-3d01-b66f-6398285bc302.roa
File:                     b0766f45-3354-3d01-b66f-6398285bc302.roa (raw, json)
Hash identifier:          2lY5mwilwRNwmtpWGkXhwXuhN3qiymWMFrR/Ltc9/zo=
Subject key identifier:   1B:E9:22:AF:8D:27:C1:FA:56:BE:44:28:5D:39:A2:DC:0F:F7:CF:B1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0BC54CC896657D9771020
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0766f45-3354-3d01-b66f-6398285bc302.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.20.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:bc:54:cc:89:66:57:d9:77:10:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=ecfb60d8-7542-46fc-ba27-7504886554aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2b:6f:53:14:89:52:72:67:7b:be:02:7f:cd:
                    4a:72:11:80:f2:3d:d8:b3:40:f8:00:3d:a2:ba:71:
                    84:6e:3d:e7:44:48:93:41:71:fd:8c:56:ad:f2:74:
                    9c:02:c8:de:0a:de:9d:11:27:59:d5:78:5b:5b:85:
                    44:0f:d1:60:52:49:d0:a3:b3:bd:de:a1:18:72:19:
                    1d:76:05:6e:09:68:f8:74:31:3e:31:80:73:75:ce:
                    7a:ce:f6:ff:b8:db:d7:57:24:50:9c:84:da:77:74:
                    c0:15:8a:ff:30:e1:05:07:c9:eb:5c:3c:b8:0b:b6:
                    e9:d3:29:e6:7e:d9:b1:b8:3d:5e:19:b0:da:b2:33:
                    b7:29:3e:15:26:7d:74:44:d2:b3:a1:6a:bd:7c:79:
                    ab:ed:9d:83:4d:e4:37:79:4e:84:7c:8b:82:7a:f8:
                    89:9c:24:9b:14:93:7e:95:50:15:71:d2:e7:ed:a2:
                    b1:3d:2d:92:2c:c3:5c:89:37:68:75:7e:8f:34:01:
                    fc:6d:09:33:77:6f:e4:ab:ee:7a:be:3a:ed:00:cf:
                    ea:0b:a5:d6:de:ab:62:d1:9c:f8:b9:4d:0f:f9:99:
                    e4:4d:b1:ed:65:93:53:63:ef:f3:bb:6c:49:3d:6e:
                    ee:29:74:cf:db:3c:bb:b3:90:8c:18:d3:c5:18:e9:
                    cc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E9:22:AF:8D:27:C1:FA:56:BE:44:28:5D:39:A2:DC:0F:F7:CF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b0766f45-3354-3d01-b66f-6398285bc302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:13:33:66:9f:b9:d4:8b:4b:37:66:e1:2a:f9:97:ed:7f:59:
         43:d9:fa:1a:0a:bb:9f:2f:db:e0:ea:b8:8f:1d:d2:ea:7d:54:
         bd:c4:0f:db:bd:6d:a5:32:c2:a6:c2:80:1a:0c:90:c6:49:aa:
         1c:28:c6:3b:eb:05:53:e4:ba:fe:dd:3c:18:77:fb:d9:45:7c:
         50:6b:82:60:3d:66:db:ef:26:8e:fe:dd:27:d9:3f:44:1a:c3:
         0e:b3:09:9d:61:9d:7f:17:45:3c:b0:fb:42:ff:34:66:04:ff:
         bd:19:7f:e0:9f:04:dd:9f:cc:06:39:ef:25:6e:aa:77:a9:a7:
         63:ac:57:65:05:3b:40:f9:36:2e:62:03:ac:62:7d:4e:1f:0b:
         97:4c:9d:15:b0:32:90:7f:6d:54:3a:6c:ef:ff:ae:c9:63:f6:
         86:44:25:a7:56:6b:80:f5:5e:85:99:85:d9:0f:ff:bd:0b:e9:
         df:35:64:23:82:0f:9e:5a:97:ae:c3:0d:bd:bb:c0:d5:07:ab:
         f4:13:db:f0:96:3e:8a:93:fe:fc:bb:63:36:c0:fd:f6:c2:50:
         de:35:57:d7:cc:3f:2c:35:61:c8:f6:3d:9c:1a:49:4e:f3:77:
         6d:de:47:ab:f3:ab:22:4b:74:e9:20:a8:4c:05:88:8f:b7:bd:
         12:56:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:54 2026 by rpki-client