Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f98dc233-b890-39ff-a5a6-d3d6e8e4f701.roa
File:                     f98dc233-b890-39ff-a5a6-d3d6e8e4f701.roa (raw, json)
Hash identifier:          DkU3+meTYiqeD5mEVXme2Hb2JfU1iDPtsTe6txY8DOg=
Subject key identifier:   7F:A1:1A:22:FF:99:04:AB:5A:88:1F:AB:12:63:0C:30:7D:11:9D:CE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E00C408F234393983516A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f98dc233-b890-39ff-a5a6-d3d6e8e4f701.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.20.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:0c:40:8f:23:43:93:98:35:16:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=89aab704-6dad-4acd-92fa-4a01bd6aeaa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:69:c9:25:bd:10:a4:b3:1f:07:64:ba:38:9a:
                    e5:c5:e1:7f:1c:66:4a:b2:08:3f:45:84:2c:f4:8b:
                    c3:ce:cb:1c:c0:af:1f:08:74:8f:f7:40:ce:b0:66:
                    b0:59:75:c7:18:9e:ed:17:86:84:04:47:e4:0d:e4:
                    c0:7a:d8:e3:85:c4:32:02:54:ff:7b:a4:63:a3:71:
                    46:c2:0e:ad:81:f6:2b:08:e1:0e:cd:4e:e3:9a:93:
                    bf:0d:07:eb:68:3a:0b:75:03:02:1e:81:56:ca:0c:
                    c2:d1:e6:bd:f3:88:08:d2:93:99:7c:db:ed:76:ae:
                    3b:59:7d:c2:be:a6:7b:e0:7b:9f:75:bb:85:bf:63:
                    66:79:8b:ee:bb:47:a6:d1:6e:26:14:66:27:d3:cb:
                    f3:6e:2d:57:e5:b1:08:6a:22:47:db:89:5b:74:9c:
                    c6:a5:27:75:59:c7:49:5a:31:a9:95:aa:d5:02:2b:
                    24:db:77:e2:ea:03:1a:19:99:fa:61:99:0e:73:de:
                    b4:ba:e7:4f:a7:c4:e4:6f:f5:53:fa:74:fd:9f:2d:
                    37:2f:5b:f3:2e:3f:9b:c7:f7:52:41:ce:ed:ff:ec:
                    aa:6b:54:00:e6:19:df:ae:87:cd:32:42:89:2d:52:
                    1d:72:17:bd:6b:ca:67:c6:95:ab:5f:2c:4e:61:ae:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A1:1A:22:FF:99:04:AB:5A:88:1F:AB:12:63:0C:30:7D:11:9D:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f98dc233-b890-39ff-a5a6-d3d6e8e4f701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:87:d3:51:a4:d9:22:62:48:6c:7a:27:6c:fb:aa:79:d9:17:
         6e:ed:36:c2:92:6e:fd:11:a0:ec:c4:b9:f5:c9:d7:ef:8e:7a:
         39:1b:ce:8c:b3:de:94:9b:9c:4b:ae:ad:e4:c5:51:b1:a1:e9:
         b8:f6:be:4c:7e:f3:f6:04:f6:23:2a:4a:bf:51:a3:40:84:ab:
         2b:93:9d:dd:bb:a6:d7:73:2a:30:ec:80:c0:86:55:3e:c3:0f:
         34:c7:99:5b:ea:9a:67:bc:e0:a7:ea:26:2c:a3:16:31:b8:b8:
         f8:e4:8b:81:8e:db:5a:a8:b4:59:5d:e0:69:06:30:2e:ed:a7:
         dc:e3:2f:93:38:ac:f0:6a:8f:60:9c:5c:88:9b:3c:5e:44:83:
         32:97:de:94:b7:7d:76:bd:db:e7:a9:b0:64:de:aa:87:3b:13:
         fc:5c:d6:63:18:59:47:14:83:1d:e6:12:88:a3:73:63:11:e3:
         37:74:82:37:c8:5d:e5:f8:c6:66:1f:68:41:79:f0:49:18:01:
         5f:a4:8a:1d:18:52:ec:48:e4:31:12:de:55:ac:eb:17:77:cb:
         1b:51:5b:6b:c6:74:2e:b0:f1:9d:e9:ab:a4:89:48:e2:7b:fd:
         71:a2:a6:1b:f3:39:35:96:26:7c:1c:91:92:b3:5b:39:d1:65:
         3f:55:74:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:37 2026 by rpki-client