Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8d50ec9-a829-31c3-9908-ed4bab880561.roa
File:                     c8d50ec9-a829-31c3-9908-ed4bab880561.roa (raw, json)
Hash identifier:          x2JGiOtDh1pbpVv3972PPC/umSQtED3Lf9jonsvzdMI=
Subject key identifier:   67:A4:51:9D:E8:2F:80:9F:C9:84:CD:D5:EB:84:0F:B8:E0:86:A8:39
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983F950C52E6852ED3E1000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8d50ec9-a829-31c3-9908-ed4bab880561.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        184.20.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:f9:50:c5:2e:68:52:ed:3e:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=762e7024-fc21-4533-a3dd-04df5803d381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:37:1d:11:a2:c1:31:85:44:0d:6d:54:23:78:
                    3f:65:be:f3:64:04:9a:14:6b:3c:2b:47:fc:86:68:
                    d0:ea:d4:78:b5:b5:7e:18:0d:b3:83:75:82:c9:af:
                    fc:8d:09:d8:6a:f9:11:6d:97:c9:90:5d:8b:3b:0a:
                    7d:ba:6d:47:2c:a3:80:37:94:4c:15:67:20:0f:a2:
                    7f:af:0c:af:1c:50:71:65:ea:a9:e3:a8:8e:71:cb:
                    57:8d:f2:e4:b2:fc:8c:89:f0:a8:0f:3b:32:84:bb:
                    b8:a9:80:84:7c:02:1e:71:de:ef:a3:48:eb:65:d0:
                    80:70:54:02:76:36:d9:95:92:51:65:08:24:b7:d1:
                    0c:9c:3a:da:29:78:f7:af:c0:d7:45:3c:dc:1a:0f:
                    6e:be:f0:16:e5:fa:8c:35:79:8b:29:b4:95:f6:60:
                    80:5f:11:aa:73:0b:55:93:ba:eb:28:4f:e9:40:59:
                    b3:52:e5:b6:5b:0a:dd:32:5c:9b:07:bd:67:2c:a1:
                    51:ab:b7:22:89:bc:6e:bb:1e:65:62:4f:97:e0:a5:
                    9b:6b:f3:f4:91:37:5b:91:2f:3d:f6:52:73:03:76:
                    6b:b1:8d:47:e2:60:aa:f3:f7:69:99:02:55:5d:ca:
                    68:91:76:2a:68:f0:60:7d:bc:05:a5:31:6d:ae:51:
                    3c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A4:51:9D:E8:2F:80:9F:C9:84:CD:D5:EB:84:0F:B8:E0:86:A8:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8d50ec9-a829-31c3-9908-ed4bab880561.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:26:ab:93:3c:e8:c6:ec:6c:c0:ba:1d:9a:83:96:2a:4e:0b:
         be:3d:d4:2a:9d:0e:ef:7e:5e:dc:91:cf:86:8b:42:5b:bc:61:
         1d:cf:5e:d8:47:56:ac:12:1c:3f:00:0e:08:e0:db:2d:f4:f5:
         e8:f5:43:15:6a:35:42:c6:a4:2f:6b:76:b5:9e:a5:0c:7c:b0:
         7e:1c:ca:0a:b3:0e:75:5b:75:ca:c0:88:47:9f:9f:a7:42:0a:
         31:a6:e1:d0:ab:87:c6:d6:18:68:8f:bb:eb:ac:c5:fe:b1:bf:
         47:36:d5:8c:a9:b6:f6:7f:6d:37:d8:5e:48:76:a9:5b:a8:3e:
         7e:5d:d7:0d:60:1e:f9:8d:cd:4a:96:26:d6:73:05:20:93:30:
         16:8e:92:ca:ab:e7:1b:ae:ad:f3:9f:2b:d8:65:eb:13:32:fe:
         c5:57:17:62:d2:6e:d3:63:e1:65:24:a7:74:4c:3f:44:28:36:
         4f:ec:38:1b:c5:25:58:47:aa:ff:3b:96:db:7b:6c:c7:0e:dc:
         0e:fb:d5:ed:cd:a4:bf:12:51:72:75:37:68:9d:3f:a8:db:cd:
         b5:53:27:34:ad:de:87:d5:47:66:ed:e4:55:3b:8d:1f:17:c3:
         53:7d:04:90:2c:c9:97:74:e6:16:54:14:19:fa:4e:dd:69:28:
         fc:c6:fb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:54:45 2026 by rpki-client