Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2890d7eb-8eca-325c-932f-7595f681354a.roa
File:                     2890d7eb-8eca-325c-932f-7595f681354a.roa (raw, json)
Hash identifier:          YZPb60pkb0k8TXLxGRDdLHrJcwndCAJr+IuNEKyJu4g=
Subject key identifier:   A4:0C:83:44:C0:06:4F:3E:E0:8F:FE:3B:98:28:D0:D1:15:40:CB:78
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BDAB3BDFCA81682C22D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2890d7eb-8eca-325c-932f-7595f681354a.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        67.54.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:da:b3:bd:fc:a8:16:82:c2:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=089d77b6-1d5e-4f90-9bcf-ec90b5e8e54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:29:9e:41:fe:22:9d:dc:95:e3:b1:aa:c1:85:
                    4d:2b:3e:34:3a:e9:56:b0:ea:35:14:e1:2d:c4:21:
                    48:62:96:95:ae:dd:71:27:23:5a:83:48:e1:93:52:
                    21:28:ac:b6:e6:02:23:d7:2c:0c:89:c4:1c:18:4d:
                    33:5d:ff:45:7b:b1:c9:8e:11:74:a0:80:7b:b9:a1:
                    2b:e8:2b:af:58:b0:26:be:e1:f9:28:1a:63:d5:d0:
                    54:cd:0b:dd:f2:43:33:75:80:af:38:f0:7f:2e:fd:
                    56:72:2b:c2:4d:29:c4:19:02:54:4a:b1:20:d6:a6:
                    e7:51:49:6f:a0:2b:3b:65:40:61:7b:5d:0a:e4:56:
                    0c:06:d1:ad:8b:55:38:03:9f:7a:24:6a:d8:44:44:
                    25:08:d8:6c:1e:49:3e:27:64:11:3a:bf:99:49:3f:
                    20:1d:93:a9:1a:69:ab:09:74:a4:c6:d5:d5:f8:70:
                    84:e7:3d:b2:0b:7f:a9:6c:7e:5f:f4:05:53:ef:20:
                    39:22:63:a7:0f:55:9a:4e:b2:ca:cc:e2:30:73:a0:
                    57:a7:68:f0:5f:7b:89:d6:b6:fd:3a:df:e8:f2:70:
                    65:0d:68:75:9a:1d:68:9c:9e:b7:9a:67:41:35:f3:
                    e3:73:b4:4c:e4:38:57:85:b1:9f:a7:0a:65:27:e9:
                    cd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0C:83:44:C0:06:4F:3E:E0:8F:FE:3B:98:28:D0:D1:15:40:CB:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2890d7eb-8eca-325c-932f-7595f681354a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:c9:a9:e8:14:47:16:38:f9:29:f3:2b:bc:16:d4:9f:51:ad:
         a9:2d:2a:5a:18:46:7f:c3:b2:59:28:91:13:cd:2c:c3:68:55:
         8c:ac:1b:0c:6e:65:ed:b6:8f:79:25:9f:d3:52:26:f5:7a:c5:
         f4:98:a3:8f:ad:1e:9f:66:eb:f0:76:95:df:a0:57:be:ed:31:
         ae:38:9e:d3:f3:7e:7a:17:fd:64:40:e0:4f:ed:da:c5:9c:26:
         6a:a1:c7:61:d9:89:04:0c:a3:80:c0:98:ce:3f:4f:e3:da:64:
         15:5f:0f:3d:9e:87:21:1c:cd:ba:67:2e:d0:5b:1d:e5:9f:bb:
         fb:04:5f:a3:43:3e:dd:67:ca:e4:67:24:35:ed:9f:6a:dc:be:
         7f:e4:27:5b:75:f0:38:5c:99:65:5b:43:6a:73:26:52:c9:bd:
         49:22:93:43:98:dc:03:55:4b:ce:12:21:33:0e:80:ba:07:1b:
         f8:a0:cc:21:3e:61:be:05:19:95:e2:08:80:18:17:25:58:07:
         f8:29:1b:09:cb:1d:3a:49:c9:65:89:3c:1b:68:b5:b5:08:41:
         e9:4e:59:16:e2:c9:16:d7:60:6c:31:a1:1e:32:ab:4d:b7:ed:
         85:4d:85:01:87:be:75:13:7c:a4:c4:36:6e:59:16:7b:30:86:
         a4:50:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:35:37 2026 by rpki-client