Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/235a6387-8e61-3db9-9681-79ae32b937d1.roa
File:                     235a6387-8e61-3db9-9681-79ae32b937d1.roa (raw, json)
Hash identifier:          mWOKni38N3q9LMspGhXdTWNDoyG7ruOMltn5bJnARrQ=
Subject key identifier:   E0:FB:4D:8A:E2:9E:CC:00:D3:16:8E:29:68:BE:5D:70:00:A9:8D:67
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C0CCBA764BEC8F6717A20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/235a6387-8e61-3db9-9681-79ae32b937d1.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.198.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:0c:cb:a7:64:be:c8:f6:71:7a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=1f0723c0-62f7-4781-8fc6-68c734301020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:77:3d:eb:73:3d:49:46:4e:03:a9:18:62:3f:
                    77:e2:c3:10:52:aa:68:df:a7:18:eb:1e:80:db:08:
                    d0:95:0f:62:e0:dc:b0:ae:a8:08:87:a3:64:0e:44:
                    4d:41:63:33:38:36:03:88:60:96:3f:9d:7b:e2:64:
                    e1:bc:b1:01:82:80:32:e1:00:04:8a:1c:b8:39:bc:
                    0e:39:ad:57:77:22:aa:24:7a:86:f1:f6:55:fa:dd:
                    b0:3d:d4:b7:f9:89:ae:47:9d:b8:99:91:41:cb:a4:
                    a2:84:53:a3:44:77:9c:7d:c0:8a:39:32:7b:c5:df:
                    48:8b:4a:ca:dd:ea:07:b4:50:47:08:e1:80:38:b0:
                    82:6e:16:9b:f2:82:b2:cf:ec:f2:49:3b:2e:92:d0:
                    a6:e3:9e:35:97:af:18:dc:eb:ff:d6:85:9e:78:95:
                    af:22:5b:7f:d4:a8:4f:9a:b0:20:a0:be:1e:e8:53:
                    49:85:f8:5a:81:68:81:67:46:0f:5d:37:d3:3b:e1:
                    10:c3:3f:04:8e:04:e0:80:48:9f:5c:d4:47:48:b4:
                    94:0d:07:05:2f:6c:3a:9e:cb:f0:6c:e8:b3:5b:58:
                    51:32:e6:06:e1:b1:1b:8d:3d:fe:ce:2b:e7:06:44:
                    01:66:98:1d:20:c5:64:5a:55:4f:42:48:9a:b7:01:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FB:4D:8A:E2:9E:CC:00:D3:16:8E:29:68:BE:5D:70:00:A9:8D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/235a6387-8e61-3db9-9681-79ae32b937d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ce:f8:a7:0f:4d:43:f3:14:b3:b9:15:15:cf:a0:22:38:85:
         71:b3:0c:54:c7:44:06:43:58:0e:84:6f:f5:87:a0:7f:e5:3f:
         47:87:25:1f:dc:43:0b:23:12:b5:ad:f6:55:92:92:d9:be:d5:
         f9:17:b8:39:a4:fc:a3:ed:2e:b8:cb:51:9f:d5:92:7a:d9:35:
         33:bc:3d:18:ba:7f:2b:e4:fc:db:ca:12:98:36:53:96:c8:3c:
         37:38:40:99:1a:64:24:7e:44:c4:e4:2f:8c:b5:61:38:26:f4:
         7e:8a:46:58:46:e8:d8:77:93:a1:bf:8a:bd:88:71:95:b7:79:
         fe:68:96:2c:18:3e:17:bb:5d:c3:0a:84:5c:bc:3a:b6:05:cd:
         cc:1c:ec:f0:60:9a:f1:17:5c:d1:d8:51:64:fc:32:3a:9a:49:
         3e:75:cb:c1:7d:d1:65:70:37:35:8d:ff:80:6b:9b:67:80:0d:
         bc:03:da:1e:46:40:c9:29:e5:97:8a:23:f0:5c:e2:f4:a2:bd:
         f6:84:4e:93:08:01:f0:3c:4a:41:a8:cf:bc:84:3e:6f:0f:da:
         62:7c:97:da:68:0f:76:67:cf:d1:f7:43:0b:80:96:ea:ad:f2:
         a1:67:b6:1b:fb:92:bc:02:dd:e2:be:5c:d2:69:31:a7:7d:d1:
         2b:9e:8c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:32:13 2026 by rpki-client