Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0cc38708-ad73-3eb7-bca4-5435df6bc233.roa
File:                     0cc38708-ad73-3eb7-bca4-5435df6bc233.roa (raw, json)
Hash identifier:          191lzWzXRMLgcoRLhaR14pJkojTvI0lvzUH53dvlCGg=
Subject key identifier:   EF:75:9C:72:D8:09:AC:9E:18:B8:74:95:04:C5:34:E5:84:A4:BC:0E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C14D4ECC6C8D7AA4CA1B0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0cc38708-ad73-3eb7-bca4-5435df6bc233.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        172.242.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:14:d4:ec:c6:c8:d7:aa:4c:a1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=63d38aa4-5c85-40ca-af68-4cd36bf9813b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:b8:6e:64:88:aa:ff:1d:4d:48:f4:7d:cc:
                    f3:4c:50:b9:f2:55:70:e2:e9:f6:fa:74:3e:3d:3f:
                    0c:75:3e:a4:d6:c7:ad:45:2a:94:7c:29:2b:b7:d8:
                    14:18:0e:51:28:61:8c:b2:f4:f2:2d:44:47:d4:2f:
                    92:7a:49:c6:eb:0f:cc:8a:2d:68:1b:46:92:2e:9e:
                    58:e6:ab:a3:6a:e1:b2:5c:ae:50:79:19:9c:19:78:
                    b3:15:a0:15:f0:09:49:4b:dc:fe:59:ab:7a:ce:35:
                    3f:b3:bd:8c:15:ee:32:0d:6e:07:bf:a7:db:ad:fe:
                    fa:97:f5:e3:24:12:aa:db:2f:fd:a5:8c:79:d6:11:
                    dd:e2:f8:63:a1:98:28:bd:b8:ea:30:4b:88:ca:13:
                    28:1d:eb:e7:6f:72:2d:98:e6:6c:32:2e:c6:6d:82:
                    9a:49:07:10:06:96:03:21:1c:49:51:b9:14:cb:d4:
                    00:4c:2c:10:81:a5:19:d8:78:b8:ef:32:a9:c2:ed:
                    75:51:11:79:f8:0a:fe:69:cd:4f:ee:d8:f9:f4:e7:
                    3f:5e:48:a2:93:7f:21:b3:54:f2:9b:00:1d:74:18:
                    ab:b3:7a:bf:17:4b:87:45:c2:77:94:00:81:5e:c1:
                    c0:86:9e:56:83:31:c2:62:9d:ec:5a:e4:3f:c3:50:
                    76:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:75:9C:72:D8:09:AC:9E:18:B8:74:95:04:C5:34:E5:84:A4:BC:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0cc38708-ad73-3eb7-bca4-5435df6bc233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:66:ee:60:88:44:88:1f:b7:6f:3e:4a:2a:16:4e:34:f9:0d:
         b0:b1:1a:d7:60:6e:e7:8c:1d:1d:3f:a5:3e:b7:d1:fb:25:0a:
         b0:b0:b7:d7:9a:4c:13:74:15:79:51:69:a8:42:41:7b:94:e0:
         52:0e:20:e4:31:df:34:75:fc:ea:28:d8:81:b2:ac:4d:d9:c1:
         7a:7a:f3:38:2c:b2:ce:2d:83:34:b2:e6:b6:f3:70:c7:76:c9:
         8e:77:0c:b4:fb:07:0e:f9:22:c5:96:37:c0:5f:27:a0:25:d3:
         ce:81:ab:af:c0:c4:3c:09:3f:c3:7a:19:a2:6f:8f:86:07:95:
         80:05:bd:9f:2f:fc:34:06:a8:40:7e:cb:9b:70:f7:56:73:fb:
         74:1a:6f:b1:ee:14:18:04:de:77:9e:c0:0e:25:da:cf:35:13:
         52:d7:d9:21:d7:08:7a:ca:0e:cc:95:90:ad:bf:41:94:8a:7b:
         d6:88:6d:e5:ee:e9:56:5d:03:00:f0:7e:0a:63:90:be:80:cf:
         ba:e3:50:53:d4:17:38:ca:c5:6a:27:64:f8:79:09:90:c3:76:
         7a:d2:ad:cd:61:d7:52:56:f1:26:c6:f0:20:ed:e5:1f:77:21:
         bc:a3:4d:21:7d:d8:34:34:32:05:77:78:9d:c8:9e:03:79:69:
         16:1c:3c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:49:09 2026 by rpki-client