Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0dcca031-0312-3129-a1a3-7816cf1ecff8.roa
File:                     0dcca031-0312-3129-a1a3-7816cf1ecff8.roa (raw, json)
Hash identifier:          2s01xvUMr8FQw3P4PlyLAdQ0lC1vNi3CbA1hhI6MMro=
Subject key identifier:   94:22:CD:05:E5:75:75:42:02:AC:C2:CF:02:04:DD:D5:47:04:E8:C9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA7A0093269567582958CBF80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0dcca031-0312-3129-a1a3-7816cf1ecff8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.63.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:09:32:69:56:75:82:95:8c:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=852b44d9-0c97-4c09-8229-d45a6786f9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:58:90:d4:d9:0a:32:3d:01:b2:92:0f:6e:
                    40:d3:60:f7:fb:43:62:f9:46:59:4d:98:15:2c:2b:
                    a4:0d:20:00:a6:f4:19:fa:1e:5f:d2:da:cc:da:4d:
                    c2:66:2e:db:94:84:0c:9a:b6:61:ff:3c:b9:f5:20:
                    48:01:3f:55:02:72:35:94:b3:53:52:80:75:ac:2e:
                    fa:2e:91:19:bf:44:e7:eb:67:f0:49:25:5a:eb:ef:
                    6f:af:d7:b1:9e:48:7c:71:ca:b1:b3:3a:70:3a:ed:
                    2b:45:ca:fc:7d:df:22:37:f4:88:cc:bf:a5:df:cb:
                    2d:b5:45:a5:84:79:a0:93:2e:73:31:9a:54:17:5a:
                    e4:ee:e4:ad:da:37:71:d6:32:0c:90:9d:96:13:8e:
                    c4:17:09:32:99:4d:3e:cc:89:de:3f:05:33:b1:47:
                    57:96:2d:dc:fd:a6:18:41:5f:17:48:6b:cf:c9:16:
                    58:b7:2b:fd:1c:08:c8:c3:2d:5d:fc:18:d3:8e:90:
                    d7:27:a0:fa:9c:de:82:56:87:6b:b7:7b:9c:86:ec:
                    08:91:71:3b:80:a7:e5:37:2a:28:86:0d:d2:7f:dc:
                    a8:67:ad:ba:aa:2a:2d:87:4e:a5:97:83:81:af:e9:
                    33:b1:26:ca:d2:3d:1d:67:74:a4:a7:df:73:57:7a:
                    c4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:22:CD:05:E5:75:75:42:02:AC:C2:CF:02:04:DD:D5:47:04:E8:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0dcca031-0312-3129-a1a3-7816cf1ecff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:54:b6:af:2a:dc:50:c3:e3:93:6f:78:c6:6d:80:8a:0c:c8:
         d2:eb:50:30:2a:7e:93:1d:68:89:b2:74:7a:b8:54:ff:c5:51:
         72:af:a9:ad:99:3f:ec:78:4c:cc:cd:8b:81:58:13:0c:aa:07:
         6f:63:0b:eb:b4:25:16:81:ed:0c:40:31:ac:72:b2:a0:db:66:
         da:0e:d8:ab:4f:43:27:23:7c:b7:96:69:5a:49:9b:e6:85:f8:
         3a:54:d4:c3:e4:5c:6f:d5:27:36:c0:b4:66:ed:37:f6:24:08:
         b4:97:54:b7:87:77:73:8f:cb:60:c7:2c:bd:3c:9c:6a:ce:b3:
         b9:71:a1:2a:9e:2f:c5:fd:b2:ba:3b:6a:93:23:29:64:f3:4f:
         b3:f4:5c:0f:56:da:b1:e2:1a:f1:ce:7f:49:24:ab:03:c6:1d:
         6f:02:fd:81:b6:64:e9:b1:87:25:a0:0c:ab:33:0c:66:02:9b:
         4f:df:22:2d:83:59:31:5e:da:b5:86:e0:ab:21:db:37:c8:26:
         5f:1a:2f:72:cf:91:43:0f:e1:e4:fa:62:2c:4f:3b:a6:28:ef:
         33:c6:d9:2a:af:67:37:12:f2:e9:dc:ff:e6:59:c0:aa:9c:d5:
         2f:89:a5:6c:4f:6f:e7:6e:a3:58:54:3c:bd:8f:f5:3b:24:b1:
         4b:37:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:17:12 2026 by rpki-client