Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bccc062f-8e57-31cd-9ca2-081d4382b174.roa
File:                     bccc062f-8e57-31cd-9ca2-081d4382b174.roa (raw, json)
Hash identifier:          RpDsoIr0VoKLVsbTEE7OEle3UYB7UazS2Ula1NnXD7s=
Subject key identifier:   E9:2E:03:2C:81:A9:C6:65:71:D0:A5:B8:13:87:5B:63:23:0C:5D:CC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0B1FA7AFCA2B53D8319C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bccc062f-8e57-31cd-9ca2-081d4382b174.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        172.242.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:b1:fa:7a:fc:a2:b5:3d:83:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=7ab7a5e0-6b33-4ebe-ac5b-735fdd990276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:68:33:c7:08:f2:17:2a:8d:88:0f:91:ae:bd:
                    6c:9f:26:92:02:30:9e:c0:6b:9f:b6:bf:e3:01:a0:
                    ef:b0:e1:2a:a3:b7:8a:d3:2f:ba:0f:13:4a:cf:f3:
                    a8:98:d6:08:38:b7:89:73:a9:d8:61:30:74:fa:52:
                    81:c0:98:d6:ac:6b:12:ee:51:7a:16:98:51:33:16:
                    86:a8:9b:db:d6:77:71:6b:64:29:92:f5:bc:c2:6a:
                    34:94:b9:53:12:4e:11:17:ad:78:c1:e7:34:5d:5a:
                    d8:fb:29:78:fe:2b:3d:8a:d0:53:86:37:57:4a:fe:
                    45:e7:e3:6d:0d:d8:32:60:c3:36:69:35:c6:d8:56:
                    ae:66:7e:aa:d9:66:b8:1c:8a:6c:db:a6:f9:c9:53:
                    ad:b4:13:f1:9a:71:33:df:3d:1b:f0:15:54:22:b7:
                    bd:68:b5:6c:cc:10:67:04:fc:86:69:b5:aa:3d:ee:
                    89:71:6a:38:09:16:58:c5:1e:1a:bc:9f:22:28:ee:
                    b0:fa:52:43:d8:a2:f2:bb:59:44:57:57:04:ad:8f:
                    68:c7:5c:7e:6f:ca:37:7d:ac:2a:05:38:28:94:e4:
                    a8:06:18:f4:56:52:f5:b5:15:ca:df:2f:34:84:1f:
                    a4:4b:c6:b4:85:8a:d1:fc:63:ef:2e:04:99:06:41:
                    5e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2E:03:2C:81:A9:C6:65:71:D0:A5:B8:13:87:5B:63:23:0C:5D:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bccc062f-8e57-31cd-9ca2-081d4382b174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b8:cc:7a:be:1a:30:c9:ed:b2:28:8e:98:d5:46:ed:69:74:
         7d:c3:9e:cb:fb:26:36:3c:03:d9:92:c0:36:92:66:78:63:85:
         f2:c7:8e:fc:ae:af:f5:43:d7:e7:6d:6a:f1:a1:18:6b:7d:72:
         7a:4e:bf:7c:65:ea:b6:2b:b7:70:9f:ce:88:86:c3:83:70:e9:
         2c:3c:ad:09:bf:a4:d6:19:69:b7:e5:f6:21:0c:fe:1c:fc:41:
         30:d9:21:de:8e:1c:6c:bb:8d:17:53:87:14:6f:23:9a:27:b3:
         59:33:83:b0:44:fe:80:f3:fa:8f:bc:79:0e:4d:56:0d:19:c7:
         df:c6:32:7e:74:ca:ed:6a:ad:ef:8e:45:76:9c:21:90:12:1f:
         00:e4:41:50:19:c9:81:8b:b0:55:5b:92:55:ee:89:9f:70:d0:
         40:a4:8c:5c:b4:7d:cc:bc:9d:3f:66:0a:3d:b6:41:5f:9e:1b:
         91:10:67:77:1c:74:54:a9:25:51:82:a4:a5:74:8a:0a:9e:4b:
         ed:db:97:f2:b2:e6:81:67:04:49:7f:0a:a1:f1:75:b5:c3:a8:
         5a:74:82:5f:44:0a:5b:58:14:df:4b:f3:d8:5e:28:86:04:91:
         ae:da:54:4e:f5:48:72:64:cc:34:65:7c:7b:f8:62:62:0d:0a:
         31:39:03:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:59:49 2026 by rpki-client