Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb6314ca-4b96-3dac-b4ae-bd2d578b5780.roa
File:                     eb6314ca-4b96-3dac-b4ae-bd2d578b5780.roa (raw, json)
Hash identifier:          HnLfNzOBC6eJO2uVbaB3mp1e2hbTIunAJdcG388ExlY=
Subject key identifier:   49:2C:2D:19:35:EE:BA:27:B7:B3:9A:9B:5F:19:BA:5D:AA:58:6B:E9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E05A8161639CC4C980D140
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb6314ca-4b96-3dac-b4ae-bd2d578b5780.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        67.54.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:5a:81:61:63:9c:c4:c9:80:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=730f5129-e90b-4b58-a718-cd883a86aa3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:18:9f:fa:eb:5b:05:49:d5:00:2c:a3:3c:6a:
                    cc:5d:c7:22:46:8b:9a:db:26:8d:96:f2:02:40:42:
                    ce:bc:b8:bf:8b:05:20:be:10:19:e0:53:2b:bb:cc:
                    28:7a:e5:80:71:b9:92:f9:3d:d5:12:84:04:12:d6:
                    35:a4:28:22:56:9e:ab:75:a3:f4:c0:96:83:9d:bd:
                    e1:13:a9:20:90:0a:2a:e0:7b:30:b3:58:b7:2e:27:
                    9a:32:58:58:bf:2a:bc:fe:e3:d4:b7:38:24:76:f0:
                    11:1a:1c:03:28:87:b4:6b:d5:bb:c8:3a:f4:78:8f:
                    0d:8d:ec:9a:da:fc:f7:97:15:ab:21:7b:f8:e5:27:
                    27:22:9c:20:96:ea:d7:fb:99:4a:eb:97:0b:5b:b1:
                    32:0d:95:8f:e5:9a:4a:38:8c:a3:aa:df:08:1b:b5:
                    fe:1b:f2:22:dd:1a:6f:42:7b:00:42:2a:b2:f8:b4:
                    ba:36:49:9f:11:cf:64:c0:2a:41:c2:43:f1:2e:d3:
                    58:78:18:1c:85:24:06:c3:69:36:23:6b:f0:40:b9:
                    b0:99:8c:f5:b2:a9:8d:6c:63:3e:2d:18:cf:30:89:
                    03:c3:e4:2b:27:0d:75:e6:7f:f9:98:1e:15:4c:f3:
                    ec:71:f1:25:53:3b:ad:15:42:ee:ee:33:c9:70:9d:
                    4e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2C:2D:19:35:EE:BA:27:B7:B3:9A:9B:5F:19:BA:5D:AA:58:6B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/eb6314ca-4b96-3dac-b4ae-bd2d578b5780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f5:b8:f5:4f:d9:03:36:74:82:81:b8:b5:aa:34:17:16:30:
         78:04:ca:d0:9f:76:81:9d:66:e7:26:d6:5a:77:3f:c2:94:9a:
         e3:01:d5:63:8e:58:76:7d:65:15:f3:b8:90:3c:71:43:97:71:
         db:7b:6e:dc:84:1a:48:d2:df:6b:9b:70:db:53:45:a3:3a:21:
         3d:f0:82:bc:32:51:70:9c:bf:e7:18:68:2c:53:c9:bd:47:d5:
         a8:6c:63:83:e0:28:69:d6:e4:d1:b1:25:a2:67:77:7e:d5:5d:
         9d:3c:86:55:41:51:93:b2:f4:e2:f1:5a:e0:75:3a:86:50:ee:
         e2:6c:c3:aa:80:62:f3:80:01:4c:31:4e:d1:9b:0e:b9:c8:96:
         ea:af:27:aa:1c:94:ac:d3:4f:6a:2a:e8:bf:bc:91:4d:f7:c2:
         f3:79:75:a4:c9:39:22:62:b6:6a:43:bb:9e:d4:98:95:2c:00:
         be:d8:65:6b:2c:b5:71:9e:bd:ed:0b:19:ac:87:68:26:36:08:
         05:98:9c:55:87:19:87:f3:12:b4:6d:28:96:8b:f8:4b:b4:25:
         85:3b:8d:33:f3:7d:b7:ab:16:b8:69:31:c4:9c:22:13:91:85:
         ae:c6:2e:aa:fd:1e:53:41:6d:a2:b8:bc:aa:0d:b5:30:46:4c:
         95:2d:4c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:43:14 2026 by rpki-client