Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed7f643d-5a36-3273-b53a-77f7d7bf4e00.roa
File:                     ed7f643d-5a36-3273-b53a-77f7d7bf4e00.roa (raw, json)
Hash identifier:          zVdEFsVQMMs0MYhKltDjdfEWi83PVHZf+Vk772lZkgE=
Subject key identifier:   E8:E2:E4:09:72:21:66:7C:98:58:95:DA:27:C9:D9:88:27:1B:BE:46
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E09574678536279D41BB00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed7f643d-5a36-3273-b53a-77f7d7bf4e00.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.196.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:95:74:67:85:36:27:9d:41:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=6d8f42f7-f678-45a2-8b60-d65aeb537e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:2f:94:59:99:3e:5f:ec:4c:fe:3e:11:59:
                    ae:5d:cf:34:74:0d:8e:57:8e:3d:68:21:cb:48:0b:
                    76:4c:2f:26:49:5d:96:e1:82:f2:c9:c1:8d:2c:83:
                    94:44:39:a9:c0:64:4d:0f:49:0e:45:72:e9:7a:90:
                    51:d6:76:4a:0a:a3:73:be:74:10:6f:f4:da:68:63:
                    72:a7:c8:78:53:0a:7e:02:e1:7b:eb:9f:2d:d3:33:
                    b5:3d:e6:d7:65:0d:95:2c:75:d3:c7:b0:28:d3:4a:
                    6d:13:67:84:65:a1:09:cb:b4:a9:e4:8e:56:14:73:
                    97:47:9e:c9:bc:33:cd:2e:38:ad:d2:bc:94:4d:e3:
                    7f:74:ba:05:18:22:11:62:5f:d2:f0:0e:df:ef:46:
                    9e:54:4f:29:88:ae:08:f3:e0:86:71:55:3e:72:36:
                    75:65:89:b4:73:7b:22:de:83:bf:e7:5f:45:99:0c:
                    1b:28:5e:26:e3:8a:e0:10:18:f7:03:5b:5a:33:08:
                    a0:19:56:cd:4a:2e:2c:37:23:cf:4a:1c:29:ba:18:
                    04:ae:79:e0:68:74:4b:7f:67:b7:86:c9:4e:bb:64:
                    8d:ae:1f:28:75:7d:a5:29:28:39:4b:ed:b5:13:9e:
                    b7:6f:de:2c:de:c4:b5:51:4d:a1:b3:ec:12:82:23:
                    32:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E2:E4:09:72:21:66:7C:98:58:95:DA:27:C9:D9:88:27:1B:BE:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ed7f643d-5a36-3273-b53a-77f7d7bf4e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:c4:5e:95:af:a1:a9:3d:4c:5b:c5:4d:52:ee:e0:5f:64:d1:
         dc:3f:c3:90:a6:e8:f4:8b:56:a1:ba:ef:61:a1:4c:aa:31:b7:
         1b:bf:0e:ee:3d:c0:80:54:73:7b:76:de:ce:24:f1:89:f1:d3:
         96:ed:66:79:88:df:08:23:c5:c7:92:e5:f8:4b:e7:21:9f:15:
         f1:b2:04:dd:44:de:31:09:dc:dd:ba:8f:c6:9d:17:e1:d8:92:
         e9:c6:44:98:79:f7:ad:49:82:93:30:28:ef:66:9e:45:dc:03:
         0d:58:bf:fc:4a:52:96:f7:dc:a5:5a:c5:ca:a9:47:56:c8:c4:
         2a:b1:7f:b1:9e:7a:61:68:19:1d:33:45:62:0e:4f:35:ba:e0:
         8c:db:7e:07:2b:05:de:77:60:f0:c2:22:76:0c:90:d6:fc:41:
         80:7d:c0:1d:67:09:ff:d2:f5:ea:6d:1e:b3:ec:35:4e:fe:7c:
         73:5e:6d:f5:22:00:c4:42:c7:95:e5:80:a3:34:ad:e7:b0:17:
         cc:65:44:46:04:05:7e:b8:5c:01:24:67:d6:9a:11:dc:e3:2a:
         35:d7:6a:0a:45:2b:1b:8e:40:cb:e9:ed:b2:ed:3e:c4:98:47:
         36:c1:72:3a:6b:85:f8:df:87:64:bf:e7:38:b2:fa:19:0d:f9:
         cc:7c:b3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:05 2026 by rpki-client