Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/485bbc0a-1e16-3b3c-a732-de7f6889e1fc.roa
File:                     485bbc0a-1e16-3b3c-a732-de7f6889e1fc.roa (raw, json)
Hash identifier:          Qn19qX3W7PlRkKcijdFDHPnuQ7Dy5l+OCDa92iljAtY=
Subject key identifier:   B7:3D:FA:CB:99:69:92:53:C7:CA:25:DB:10:47:E0:1A:AB:08:63:D7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BB8756B43F30C7E690D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/485bbc0a-1e16-3b3c-a732-de7f6889e1fc.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        198.45.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:b8:75:6b:43:f3:0c:7e:69:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=19881065-5a50-4521-9ff0-e8d94ddc25c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c0:bb:08:21:c2:a9:ad:7d:cc:87:b3:57:3c:
                    0c:e9:38:33:c6:6d:a3:a8:12:6a:bf:8f:b5:b3:3f:
                    61:24:34:91:d8:c7:ee:b9:e8:a2:b6:bb:a1:00:d9:
                    f3:cd:f3:68:ce:79:7b:64:54:fe:96:08:5e:37:ba:
                    b9:e1:56:0f:81:7c:9a:3b:02:bd:a5:7b:ce:91:5f:
                    49:71:6e:49:c6:35:e5:cc:00:10:f8:3d:42:8b:54:
                    6d:7b:8e:c3:13:48:6e:85:18:55:78:2d:f0:fd:6f:
                    c9:dd:e6:03:39:73:52:90:cf:56:dc:80:b4:4b:0b:
                    86:d4:c4:31:52:27:60:58:23:9d:38:7f:87:15:ef:
                    10:f2:91:35:d1:4d:9c:25:3c:d7:95:04:64:4d:83:
                    0e:c0:81:47:7d:bc:15:e0:29:7b:ba:5a:24:d3:8a:
                    b5:af:39:ce:57:be:4b:dd:94:51:16:c4:bf:a4:0d:
                    2f:4e:f9:dd:04:91:ef:b8:b5:f8:b4:72:af:3b:ed:
                    60:9f:96:b9:0b:a3:40:21:50:a4:40:4a:e0:30:2c:
                    e3:5c:ef:b1:0f:18:2c:bb:c3:6e:6d:7f:4f:a5:fc:
                    d6:94:c7:43:20:f4:a0:35:8e:57:10:bb:e1:d2:1d:
                    29:b2:01:76:96:07:60:55:1c:26:9b:b4:70:98:d1:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:FA:CB:99:69:92:53:C7:CA:25:DB:10:47:E0:1A:AB:08:63:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/485bbc0a-1e16-3b3c-a732-de7f6889e1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:0c:70:83:db:cf:6f:a6:e8:0a:33:ef:76:90:c8:45:3f:29:
         17:64:9e:b7:e9:78:a8:0a:6a:62:aa:6c:8d:22:89:25:d6:de:
         53:b4:c1:00:8c:f9:2a:12:4c:0d:f1:b2:45:27:2e:70:f7:35:
         3e:86:d0:f5:2d:1a:8d:df:bf:2b:5e:96:a5:ec:3f:da:16:a6:
         8d:95:23:68:09:f0:1e:5a:0e:bb:e2:ba:03:1f:6f:95:39:11:
         40:18:03:3a:2c:2a:40:43:ec:53:be:5c:d0:e9:ba:5c:f1:b2:
         e5:13:6c:33:9b:82:8a:ca:84:4e:b6:61:ec:e8:c9:87:9c:f4:
         c0:3e:af:e4:7e:3b:95:54:af:82:cb:6a:c6:19:47:07:bc:8b:
         e8:b6:fa:1f:f4:a7:66:47:5b:63:56:b0:12:de:d9:ed:91:ad:
         b6:be:9c:a5:2b:c1:c7:50:fb:11:ac:86:70:b8:9e:a6:66:d0:
         ce:8b:3e:c2:33:ea:c9:f1:78:8a:e4:d5:c1:1e:d4:93:ef:ea:
         21:90:6c:cf:41:e0:49:f3:c6:1b:65:bb:00:fe:df:d4:3c:78:
         1a:b3:97:92:00:b5:e1:97:a1:2f:bf:76:78:38:ca:b9:cf:0a:
         46:17:b9:b0:ed:5f:71:67:85:3c:06:1f:98:ea:c7:eb:a0:ab:
         79:37:ad:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:02:23 2026 by rpki-client