Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb79b182-9f65-3afd-a656-894514d243a7.roa
File:                     fb79b182-9f65-3afd-a656-894514d243a7.roa (raw, json)
Hash identifier:          +8d/Qr7Pzfo+rPLz6Z3qyFXhphAjKf3evx2uBuzKI3w=
Subject key identifier:   EE:7F:77:4F:A8:23:4A:C8:2A:D5:FE:29:5E:95:C2:2B:68:CD:D7:AA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0BBBEAC1C807DA2DAA000
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb79b182-9f65-3afd-a656-894514d243a7.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.20.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:bb:be:ac:1c:80:7d:a2:da:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=176b4ecc-5ded-40cd-a45c-49fb3ecb076b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:db:20:f9:97:ca:c8:47:2c:f8:8a:9a:b7:05:
                    3f:ed:40:13:cd:6f:d0:85:f2:a0:df:86:59:cd:da:
                    6c:ff:13:ea:56:e7:10:14:6f:87:15:28:c4:4c:38:
                    78:c5:b1:30:e9:96:3d:6b:1d:54:a7:87:db:f1:9b:
                    f2:eb:62:77:60:86:6c:b4:80:21:25:fc:6f:a8:e8:
                    42:28:75:89:1a:60:89:19:e5:f6:31:2c:63:dc:6e:
                    cb:1a:9b:5c:a3:dc:59:1b:84:e4:f4:15:9a:1c:a6:
                    10:cf:9a:16:92:5e:92:74:a1:fb:f7:93:bd:94:37:
                    32:58:64:ad:8e:6d:57:56:c8:22:ae:25:08:3f:1e:
                    25:f2:22:71:bf:f5:58:e3:56:ac:de:68:dc:25:ec:
                    83:56:d9:c3:d1:87:dc:f7:f4:af:a3:1e:0b:aa:b6:
                    ed:cf:a3:4a:4b:44:ea:4a:4c:99:0a:d2:cd:35:bd:
                    fa:b1:17:cb:2f:6a:fe:c3:e9:bb:af:08:bc:44:17:
                    13:74:4e:66:05:3a:31:64:7d:72:09:03:a2:b3:cc:
                    53:2c:35:f5:a9:da:df:76:a1:bd:f2:2a:9d:8a:0b:
                    19:cb:a7:80:c1:80:91:f5:c8:11:1f:1b:a7:64:ad:
                    ea:93:ea:e8:06:ee:29:48:ab:a6:e2:5f:cc:e7:5f:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7F:77:4F:A8:23:4A:C8:2A:D5:FE:29:5E:95:C2:2B:68:CD:D7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb79b182-9f65-3afd-a656-894514d243a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:c0:db:d3:ec:b9:ee:10:71:f5:4f:66:cc:be:a8:a5:b9:4a:
         8b:71:44:53:3a:97:65:fb:58:1e:76:a3:09:7b:5d:bc:eb:97:
         03:2f:4b:54:26:69:e3:cb:51:38:ec:69:96:2a:78:d9:cd:58:
         56:5b:8e:15:4b:81:e6:80:a7:4d:18:da:7c:4a:4e:24:72:e1:
         a8:40:dc:f6:19:25:0e:46:1d:43:65:71:3f:ef:b8:0c:da:73:
         14:a7:8d:d6:7a:5a:fe:2a:42:cd:f9:09:d9:7f:78:fb:1c:4c:
         f2:b9:2a:c6:7e:a1:48:9f:dd:67:f1:de:72:1a:ec:41:47:13:
         75:3e:f3:54:32:0b:7b:06:5e:93:d5:b0:d5:a5:65:16:24:a3:
         80:b9:82:56:f6:ca:06:37:c8:46:f5:3c:91:a6:43:9d:1f:14:
         9a:84:39:24:bc:c0:2b:42:f4:06:b2:cd:c4:b5:7e:24:c9:d4:
         c1:44:1c:69:da:b2:05:04:28:4e:6b:20:2f:34:7a:47:97:43:
         37:0f:a8:72:a5:43:43:27:1a:52:3a:e5:7d:7e:50:f0:27:ae:
         48:11:ad:13:60:b7:73:10:21:0e:cd:4b:e7:1b:78:83:59:d6:
         f5:48:ab:e8:8f:81:64:d5:b1:7e:32:32:01:36:72:49:a8:0a:
         f3:53:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:31:22 2026 by rpki-client