Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b34b751-4177-3847-8988-657a9993c157.roa
File:                     4b34b751-4177-3847-8988-657a9993c157.roa (raw, json)
Hash identifier:          WuAFNyMoJgZAdJeEaVqRNOQLrvhxOykVtNAYG0f0ibY=
Subject key identifier:   81:5D:79:13:7B:32:3B:B9:59:D2:5E:7F:87:B5:42:C6:46:8D:7D:19
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79FCEADFEA4A9E07D65D200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b34b751-4177-3847-8988-657a9993c157.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        172.243.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:ce:ad:fe:a4:a9:e0:7d:65:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f36ae13e-cff4-403d-b523-ed27f2420e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:13:2f:24:dd:43:80:c1:d4:ed:2c:6d:20:bd:
                    df:9d:08:cc:b3:af:7e:44:54:c9:df:eb:5b:c7:83:
                    39:c5:be:a7:68:d9:2e:20:f0:59:24:99:a0:4b:67:
                    ea:ca:51:93:e7:5a:ba:70:76:63:40:a0:62:38:ea:
                    d1:4d:e1:a6:3a:20:c8:f0:0d:36:fd:25:30:5a:88:
                    e3:95:3d:81:21:d3:85:f3:b5:01:49:74:2e:d8:b4:
                    2e:d4:d9:88:1b:36:9a:81:4c:ed:5b:20:8a:58:aa:
                    22:06:c5:b1:00:9b:f5:59:9a:76:35:2d:a5:2b:1b:
                    9e:1b:6e:f7:2f:34:18:e2:b1:82:c5:42:2d:e3:59:
                    7a:2a:5c:c0:36:36:15:20:c8:93:21:11:6d:94:55:
                    35:85:32:5b:d9:0b:75:91:b6:98:f2:7d:71:c7:e1:
                    2c:9b:7e:39:b1:8b:03:cd:0d:8a:a7:eb:94:7c:6c:
                    3e:e9:f2:39:73:bd:45:f9:c9:35:21:ad:69:f1:03:
                    72:e3:2c:a3:ec:f2:a2:10:60:f7:3f:6d:c5:f1:38:
                    c4:9e:bc:eb:3f:b0:5e:93:ae:3d:68:2d:61:6e:24:
                    14:5c:61:5b:40:47:c0:82:05:dc:49:1a:34:fc:2c:
                    41:51:4d:93:27:e1:95:69:61:58:9d:42:82:c8:a5:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5D:79:13:7B:32:3B:B9:59:D2:5E:7F:87:B5:42:C6:46:8D:7D:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b34b751-4177-3847-8988-657a9993c157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:17:08:a7:ec:91:24:0e:ca:0a:e0:96:f8:fb:ff:7b:e7:dc:
         06:d7:24:cc:1d:73:d4:64:2e:b2:d6:05:7b:98:8d:87:8d:b8:
         36:13:5d:4c:56:4f:e8:c5:e0:40:f7:3b:e9:bc:40:de:52:8b:
         97:fb:3c:b1:70:5f:6b:e5:34:55:d8:c1:d8:9c:b9:0e:9a:46:
         dc:52:96:bc:eb:0b:29:ff:d1:dd:13:21:75:a8:bc:5e:6c:30:
         ac:ea:0b:b6:98:bc:9d:eb:4b:e7:97:6b:e7:52:5e:3b:42:b3:
         7b:a0:01:95:85:c6:09:eb:93:76:68:33:b2:37:9c:ed:a5:01:
         05:fc:6b:3e:39:9a:46:c7:70:35:e1:43:58:72:7a:ae:8a:f1:
         f4:3a:23:66:19:61:d6:c2:13:17:2a:ba:6e:b0:75:e8:51:38:
         7c:fb:42:86:98:94:2f:9f:ec:92:0b:e4:cd:17:1c:09:13:58:
         11:50:3c:8b:73:82:88:27:35:ba:fd:58:36:25:5b:46:21:e9:
         4d:d2:c3:c1:28:2d:3f:d5:60:62:fc:e9:e9:41:71:19:bf:25:
         4e:2d:8c:af:2a:63:c8:72:01:c8:fa:e1:55:ff:88:e1:cb:e8:
         eb:32:74:d3:46:4d:f9:f5:ea:8b:46:89:9e:81:c7:0c:33:8b:
         c3:2e:86:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:18:10 2026 by rpki-client