Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e6c00eb6-1409-3f28-b009-53d9271d3142.roa
File:                     e6c00eb6-1409-3f28-b009-53d9271d3142.roa (raw, json)
Hash identifier:          1jPBvtw4p160jvSXya5Ja/bphGbnlVfN+r8Ae9z3rPw=
Subject key identifier:   73:29:BA:4C:E1:E2:6F:59:4B:26:F5:2A:1C:EC:7D:F1:D9:B2:CE:38
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49840724A7ABFE8FE180C0E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e6c00eb6-1409-3f28-b009-53d9271d3142.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        184.21.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:07:24:a7:ab:fe:8f:e1:80:c0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a9b1aafa-d93b-4cdb-814f-edff717378cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:d0:71:ff:2f:d9:bf:48:64:8d:17:17:c1:
                    1a:c4:0e:7c:0d:cd:61:97:e6:3d:48:29:75:24:45:
                    61:7d:d1:e7:af:43:60:6d:7d:2c:5a:09:b6:0d:34:
                    0d:a8:a9:f7:58:9c:b6:be:b1:98:7a:6a:be:6f:93:
                    61:bd:60:6e:28:bb:42:b2:ed:7c:56:be:03:22:5d:
                    14:89:7d:fb:05:fb:ce:83:08:7c:ef:40:30:e7:de:
                    86:8b:81:a0:bf:e9:e8:a9:35:d4:3b:bc:41:bf:f3:
                    eb:0b:80:0a:74:31:37:c4:48:68:8f:de:58:44:99:
                    e8:66:c2:c4:bd:fe:51:dd:3e:24:9b:a0:b6:6e:7e:
                    5b:37:85:32:df:0c:68:66:67:ab:77:a9:8f:bb:5d:
                    79:a7:ac:8a:6d:ad:99:70:eb:ba:ba:55:e8:5b:a5:
                    ef:18:3f:4a:09:9e:16:fd:e9:65:cb:c9:5c:de:c4:
                    90:04:a6:64:69:25:f5:a7:fd:7a:ca:f0:0d:7a:00:
                    3c:e8:67:88:67:6c:50:0d:2a:84:40:aa:46:a9:66:
                    de:06:a7:0e:24:38:b4:bd:96:b4:f2:14:5f:6d:ee:
                    23:88:99:e4:28:f4:67:3a:cf:43:a7:c3:a5:e1:f4:
                    7a:38:63:13:b4:a2:8f:cf:91:5c:05:a9:b0:4b:b3:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:29:BA:4C:E1:E2:6F:59:4B:26:F5:2A:1C:EC:7D:F1:D9:B2:CE:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e6c00eb6-1409-3f28-b009-53d9271d3142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3f:a1:a7:c5:eb:ab:55:a9:32:d1:f4:18:fb:3f:c9:08:79:
         9c:7b:c1:b2:34:e4:cd:77:ef:6b:bd:66:e1:0a:ce:89:14:e6:
         0e:f5:b9:0c:fd:ef:bd:5a:f3:3e:3a:72:7c:ec:16:bc:f6:4e:
         81:b1:de:e3:cb:b1:1a:63:12:aa:98:61:de:e2:05:82:ac:6e:
         5f:57:4d:c8:be:6c:75:06:6e:95:66:b0:76:93:4e:fc:05:74:
         8c:35:81:e9:4a:09:d5:0a:5b:f2:a0:4c:6e:f5:e8:83:78:6e:
         db:bf:5f:7f:3c:69:5a:50:53:0a:03:47:11:52:bb:01:de:b5:
         5f:4d:90:59:8d:22:9a:db:1f:94:8a:96:4e:40:49:dd:45:61:
         0e:25:3a:83:8f:0b:0f:07:84:86:75:49:23:d8:38:82:07:7e:
         bc:55:1d:52:4b:fd:49:55:31:69:44:91:af:f0:b8:d6:8d:6c:
         a8:85:91:4d:02:4b:d7:4b:18:a3:f2:d9:74:41:bf:b0:a7:85:
         eb:be:42:eb:b9:06:5b:11:2e:98:be:66:98:c1:83:37:ba:b1:
         58:a6:cb:b1:e4:f3:3b:7a:54:58:ef:c5:b9:85:26:6b:2b:ab:
         0f:0b:d6:4c:44:cb:99:cc:4e:8d:2d:82:09:55:75:c8:9a:40:
         49:d8:c6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:00:24 2026 by rpki-client