Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28e5dc7a-269a-3c29-a36c-d319550db8e2.roa
File:                     28e5dc7a-269a-3c29-a36c-d319550db8e2.roa (raw, json)
Hash identifier:          aaUdsH9TuUhcHwK48RmmfWgqxq3YjLIj+ittEUe/VSU=
Subject key identifier:   5A:79:16:84:DB:3B:01:0B:CE:99:7C:9D:06:08:20:FA:57:20:61:B1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C0B880C5E8E0E20FD9300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28e5dc7a-269a-3c29-a36c-d319550db8e2.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.198.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:0b:88:0c:5e:8e:0e:20:fd:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=5b1f05b0-3aef-44b7-9601-5dc40411a934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ac:50:4c:0a:4b:ee:83:d4:4d:46:d5:68:6e:
                    56:57:dd:76:50:2d:2a:1f:72:a7:47:00:af:66:df:
                    a8:3e:91:65:fe:a7:dd:e9:6b:7f:3f:49:e3:8a:7c:
                    f0:a1:3d:32:1f:ea:ab:f7:72:40:c5:00:cf:a1:8e:
                    18:4a:89:e0:05:66:c9:1b:3e:a4:f9:3f:6f:a4:37:
                    d5:9e:d1:3e:d5:81:cb:31:c2:e0:dd:ee:f5:cc:a3:
                    1e:b9:1d:6e:21:1c:2a:66:7c:fa:95:6f:8f:4c:7a:
                    55:37:08:f3:a4:6b:81:1a:a6:e3:29:06:54:ee:83:
                    f7:7c:de:24:76:e3:f6:af:36:a9:aa:c8:77:aa:b1:
                    0b:da:e5:77:7d:04:b6:1a:18:c1:df:df:ac:4a:b5:
                    27:a2:2b:a1:3e:68:3b:8f:a8:28:75:52:e4:14:18:
                    06:b4:5d:45:16:f6:4d:b5:93:91:d9:05:3b:0d:9c:
                    75:63:66:b9:cb:dc:57:04:ed:73:9d:7a:3f:7f:ef:
                    ab:14:64:2c:fc:75:eb:22:63:78:29:75:76:ed:8b:
                    ca:81:8e:20:f7:bf:60:5c:65:1c:17:14:9c:2e:2a:
                    df:2e:9c:de:33:6c:7e:94:c3:0e:4e:3c:e1:ad:20:
                    e7:df:a8:89:6a:b8:03:de:02:f1:70:53:7e:ad:9c:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:79:16:84:DB:3B:01:0B:CE:99:7C:9D:06:08:20:FA:57:20:61:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28e5dc7a-269a-3c29-a36c-d319550db8e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f9:9a:c7:15:2b:b2:19:16:7d:ab:f3:0f:a3:8e:2a:24:23:
         d3:c9:91:b5:35:67:37:86:10:15:fe:27:42:0b:c9:0f:a7:ad:
         7c:1e:0d:b1:5f:c5:c5:5b:48:ad:99:c8:a1:d5:47:d7:aa:f5:
         69:5f:31:68:d3:a9:01:1c:9b:b9:57:a4:58:df:ce:ac:85:cc:
         66:a6:b3:c6:2e:fa:e9:64:fd:80:17:ca:17:52:f8:44:b5:f1:
         61:5c:b9:47:63:d1:f3:f5:4c:7e:b9:ff:ac:7a:f5:d6:2d:ad:
         04:37:50:d5:60:e2:70:f2:0e:5c:85:e0:56:0b:b9:73:4a:8b:
         37:ee:91:c3:93:97:52:02:74:93:8d:c6:53:b9:99:ea:73:d5:
         4c:15:7f:23:bc:26:4a:99:ad:be:1e:57:d1:8d:3c:37:0d:2f:
         38:b2:17:76:e6:06:19:3b:5a:7e:d4:61:84:37:16:77:af:57:
         31:26:a4:19:c8:21:53:d3:2e:54:1c:2e:90:d9:28:b6:1b:d3:
         e0:be:77:50:02:a2:b4:1f:d1:18:e4:4e:31:56:57:34:55:b4:
         d3:3d:ae:04:d8:55:3e:4f:db:d8:e8:0d:7c:f5:b4:23:d7:8c:
         76:8c:80:81:99:c6:dd:18:0c:b4:40:c1:ff:db:f8:55:1e:5f:
         52:38:6d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:20:39 2026 by rpki-client