Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee89ad28-0725-30e4-9dd8-5ff0cf300b78.roa
File:                     ee89ad28-0725-30e4-9dd8-5ff0cf300b78.roa (raw, json)
Hash identifier:          1BTWezkaTZ0Oc+hOgaVYvAhwzcfdSkd+dF/20fKVTgQ=
Subject key identifier:   1D:91:EE:60:43:76:44:EC:D0:D1:61:FE:DA:2F:5E:41:71:23:87:EF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49842F75BAB444AB0FCF2740
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee89ad28-0725-30e4-9dd8-5ff0cf300b78.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        184.63.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:2f:75:ba:b4:44:ab:0f:cf:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ab9c446c-e5d8-40b9-84e6-05ba604c2786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c0:16:f7:da:1c:fb:d4:80:86:9e:5b:40:86:
                    80:19:1c:6e:11:57:29:74:45:35:0c:64:ba:d0:ef:
                    c1:bb:3f:62:93:24:3b:8f:8c:2a:d5:76:df:23:dc:
                    2a:08:0d:d6:9e:6e:f6:fa:92:74:c3:ae:13:f1:59:
                    ca:bb:e6:12:df:d0:ec:21:e9:01:06:1f:f6:27:70:
                    b8:8a:21:57:80:21:d1:9f:7d:12:83:b4:95:11:55:
                    97:8d:c6:bd:95:1f:b1:4e:07:0a:1d:29:fa:9c:a2:
                    fe:89:ec:09:aa:c3:d5:1a:01:f6:13:c4:e3:d2:23:
                    04:03:74:3f:00:46:5e:88:8d:7b:0f:51:dc:59:c1:
                    ae:f3:d9:11:88:87:24:15:54:6f:29:e2:55:e8:52:
                    fa:fc:1d:f4:27:eb:b8:d7:06:58:51:83:47:e2:1c:
                    6c:f9:ea:be:bf:a6:9d:08:d5:50:70:36:c2:c6:4e:
                    f8:0a:5d:57:21:f1:48:4a:af:af:a4:08:00:ac:03:
                    1f:d2:4c:f5:b9:e2:41:a6:81:b6:23:81:31:61:b9:
                    bc:a7:82:cb:40:63:d2:24:70:52:8b:35:cc:f3:1a:
                    da:d9:ad:f3:9a:de:bf:f7:6b:e1:10:dc:6f:2f:32:
                    7e:e4:b2:88:34:82:0d:68:f4:f8:b1:c9:6c:35:51:
                    ab:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:91:EE:60:43:76:44:EC:D0:D1:61:FE:DA:2F:5E:41:71:23:87:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee89ad28-0725-30e4-9dd8-5ff0cf300b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:f0:f3:f8:4a:2b:bd:aa:a6:77:25:7b:67:ae:33:da:93:e1:
         ff:64:95:fa:63:94:2c:2a:b9:3c:9d:78:eb:5f:45:b6:25:e1:
         3f:31:09:41:6f:2f:87:6e:5c:9d:32:9e:4e:ff:5c:4e:57:23:
         2f:24:e8:54:4a:f4:dc:d3:03:f6:7d:0d:bb:aa:20:54:6b:a7:
         97:d8:66:ac:d8:42:e8:9d:e0:eb:67:2c:65:62:8c:67:ff:24:
         bb:d2:8f:f2:11:7c:d5:e2:69:28:58:a8:cd:a8:51:e0:87:70:
         eb:a1:44:56:74:1d:b9:c5:f8:44:c1:01:44:2c:8b:95:71:44:
         e8:61:c4:70:c0:74:62:e5:5f:c5:ef:0b:f8:40:80:b1:bb:b6:
         38:aa:ad:d7:00:98:3b:1f:a9:c9:1e:51:ba:06:d8:02:94:2f:
         9d:0a:f9:7e:d3:e9:90:3a:f3:0b:ec:81:71:a2:65:e1:63:56:
         f7:73:c9:d5:dc:e5:f8:78:97:8e:c3:7f:dc:ca:ce:ed:46:82:
         e1:15:6e:e8:5f:52:53:17:d5:c5:f6:a4:f0:b6:ab:c1:a2:a5:
         69:c7:15:7f:c8:c6:e8:37:ac:ab:d7:3b:51:a9:24:2d:31:45:
         22:91:4a:23:79:81:20:19:b6:fc:08:5e:af:b6:9f:ff:aa:0a:
         cf:2d:7f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:17:42 2026 by rpki-client