Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23445bb1-d5ce-3f49-8716-3e425751789a.roa
File:                     23445bb1-d5ce-3f49-8716-3e425751789a.roa (raw, json)
Hash identifier:          mRGlFwOQ86CaKcY4JLtoo+1CQQp5hVY4sU3p/1xxxLM=
Subject key identifier:   BE:87:B6:A4:15:6C:2A:5A:70:9B:7B:D6:16:EC:F1:C6:55:2B:1F:52
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BAF9941611C86C9C69F40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23445bb1-d5ce-3f49-8716-3e425751789a.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.62.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:af:99:41:61:1c:86:c9:c6:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=501fdceb-73f4-452f-9b3a-225a87371836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:53:c8:56:42:f1:44:ad:6c:9b:7d:a3:e7:41:
                    cf:87:3f:b8:52:d3:20:e2:97:48:c1:e6:1d:ca:ff:
                    7f:53:32:4d:db:f3:74:6c:9d:94:f8:42:f1:d4:68:
                    7b:0a:a8:c7:86:cb:1f:6d:e3:d0:b0:b8:dd:b0:fd:
                    ce:02:ed:4b:58:a4:97:ff:52:be:4c:14:27:fc:51:
                    e5:d7:03:15:42:54:92:5d:45:8a:1f:27:76:c0:08:
                    86:6d:58:04:37:56:12:00:3e:78:16:f4:4c:19:4e:
                    bc:21:89:f2:d5:df:53:cb:2e:b2:c1:dc:fa:55:5b:
                    8f:33:8f:0b:1a:29:55:5f:63:c0:34:85:f5:00:00:
                    e3:a2:e9:7a:3e:3c:8d:8e:f8:19:5c:0b:73:5b:82:
                    06:78:61:df:84:d1:3f:6c:60:d6:70:4e:91:9b:74:
                    55:8e:c8:73:bb:27:56:fd:af:d3:f3:1b:08:39:0f:
                    c5:1c:fb:8c:7c:ce:db:7b:86:5b:eb:f0:48:81:a1:
                    19:5e:df:85:f6:95:15:2d:71:c5:81:65:95:1a:c6:
                    59:64:84:60:09:8c:ca:04:76:1e:04:21:bb:52:0b:
                    f4:74:5b:d9:b0:76:31:38:f9:2a:d5:f2:35:92:2f:
                    da:1b:ab:2c:32:80:a2:c1:58:8c:ae:2d:ed:20:d4:
                    83:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:87:B6:A4:15:6C:2A:5A:70:9B:7B:D6:16:EC:F1:C6:55:2B:1F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/23445bb1-d5ce-3f49-8716-3e425751789a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:cc:8e:b3:ac:9b:06:18:ba:74:16:88:74:3b:6b:5b:6a:a1:
         9e:ab:bd:3d:2d:a9:18:51:a0:9c:b8:1b:44:29:a8:5d:a3:cf:
         22:5b:3b:4b:8c:57:e6:85:12:ca:4b:67:51:50:ca:64:22:9f:
         1b:de:de:4a:88:0a:af:c8:74:8d:05:62:e4:5e:a4:a8:d2:df:
         bc:67:85:05:e5:b2:12:89:88:80:ba:ec:48:8c:b1:dd:d3:0a:
         e6:a6:90:1a:46:25:03:df:ef:d9:a4:2e:be:02:ec:5c:4b:0e:
         92:38:e9:b2:0b:d7:d5:4a:65:fe:8b:4e:49:1e:c7:c3:1f:f9:
         51:14:60:8d:9b:3a:02:f8:59:5a:7d:50:17:b1:b4:3d:4e:c7:
         f5:88:a9:e2:1f:b8:a9:7d:37:6e:dc:00:30:c1:9b:90:71:8b:
         c1:4a:91:17:32:b4:da:35:7e:b2:90:91:69:bc:5c:f1:45:df:
         01:cc:61:5a:78:24:a3:42:2a:5e:19:d9:ba:55:b4:e1:c5:6b:
         93:69:63:b4:5d:4f:48:62:5c:74:cc:a6:9a:9a:77:0f:85:47:
         fd:c3:df:18:ee:d7:4b:1b:b1:f5:3f:df:74:85:a2:98:f6:a8:
         59:7d:6a:cf:6b:d0:3b:6f:cc:79:85:36:52:55:aa:eb:d9:2d:
         f9:88:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:35:30 2026 by rpki-client