Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa
File:                     53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa (raw, json)
Hash identifier:          Ee/p0RQEpLziVjViaHz7LzrcuJU19XPuKXUkhaeb9Zk=
Subject key identifier:   13:AB:3D:AA:FE:19:1B:0E:92:70:39:37:0D:1B:C4:67:5B:4E:5D:DC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983EE99B821DE9E5FCE3F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        172.243.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:ee:99:b8:21:de:9e:5f:ce:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=58a740ed-cbfb-4e0e-a118-2c5d841938dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:59:35:ea:ac:63:e7:7a:11:ae:0f:32:3e:9a:
                    26:4d:63:44:b6:04:c0:fe:38:d7:49:a6:10:f4:74:
                    ec:a9:d0:82:9a:d5:37:09:f3:47:93:4d:4c:13:a4:
                    31:cd:eb:97:87:f9:90:28:e2:98:96:bb:e8:4d:15:
                    13:2d:86:ee:b0:10:98:3b:dd:9e:7b:eb:41:a8:b0:
                    86:c0:23:7d:3e:44:b2:73:0e:4b:71:a2:7b:60:bc:
                    bb:c5:c4:33:3e:ca:3d:8c:44:37:a5:75:a8:eb:4b:
                    cd:ef:c7:92:90:8d:b4:40:84:c9:c5:c0:93:e9:ee:
                    97:ee:ee:24:e7:f4:c7:c3:4d:76:67:96:bd:a1:f2:
                    85:ed:c4:1e:8c:40:3c:5e:3a:10:eb:aa:a6:b7:2d:
                    e9:1f:fa:51:8d:5b:0c:7c:a0:e9:33:48:b6:30:ed:
                    10:bf:6f:03:47:e1:09:ce:f8:f7:54:46:a4:b5:b2:
                    a5:13:7d:ab:49:83:c0:50:f9:ac:fb:84:e0:c7:ad:
                    b7:65:e6:0e:63:fe:e0:21:c9:23:08:fc:cb:46:17:
                    a2:3b:cf:a1:ac:7c:4b:db:85:ac:46:71:8d:24:fa:
                    5d:89:c3:bb:79:10:12:fe:06:0e:11:19:aa:8a:11:
                    5c:33:55:72:f7:74:f5:51:6d:00:cf:38:05:67:ef:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AB:3D:AA:FE:19:1B:0E:92:70:39:37:0D:1B:C4:67:5B:4E:5D:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:43:70:c8:08:71:4f:93:80:cf:0f:9d:35:46:7f:89:8b:27:
         bf:ed:c4:b1:44:22:93:9f:67:30:8d:bb:81:1e:6a:ba:3e:3a:
         b9:07:5d:fd:5f:d6:95:ec:87:0c:01:81:60:41:6f:8a:9b:2e:
         0e:54:cd:e3:d3:f2:5d:74:8f:06:f4:f0:a1:c9:7c:7c:29:3c:
         b7:82:0d:c2:a4:4c:61:57:80:06:eb:fd:e1:2a:1d:2d:6a:ff:
         15:30:f8:d5:94:8a:19:4a:eb:20:6f:bf:0b:9b:55:85:0b:41:
         db:66:68:9c:36:d6:fb:63:44:53:39:91:8a:f2:e5:b7:17:c8:
         08:f1:88:d6:cc:07:7a:72:a5:cb:7e:e2:6d:83:4d:23:2c:bf:
         a1:51:56:a3:b4:d3:7d:9b:db:ab:c4:a9:c5:5f:52:02:90:1d:
         6d:c9:71:47:92:be:ed:6b:62:37:cf:38:a1:2a:b4:cc:90:45:
         88:22:8e:66:e6:dd:3e:76:99:f7:1c:60:77:d3:f6:a3:e8:c9:
         c6:7d:73:f4:05:26:9e:91:75:c2:d1:df:b5:ab:a5:91:8b:20:
         e9:f3:39:9b:8e:ec:3d:92:e0:9f:7a:68:c9:b1:55:90:3a:27:
         12:67:73:d6:bf:54:2b:e7:2b:f1:a1:8d:54:66:51:68:57:84:
         f9:19:76:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 15:17:17 2026 by rpki-client