Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76dac075-1c7f-3649-9e99-4499bb9a2714.roa
File:                     76dac075-1c7f-3649-9e99-4499bb9a2714.roa (raw, json)
Hash identifier:          6mUwXKOCqDvIKGjMVIxyoKlbTXlulV5mvyF/qQc1DpQ=
Subject key identifier:   88:70:C8:DC:23:84:3E:CE:41:ED:1F:12:5A:6C:9E:DD:88:7E:4A:44
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C1D66CE73B4C7F51BC320
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76dac075-1c7f-3649-9e99-4499bb9a2714.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        172.243.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:1d:66:ce:73:b4:c7:f5:1b:c3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=1a1bf957-6b4f-4279-a53c-e8ed86ee453d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:75:54:d3:45:9a:7c:f2:3f:75:43:3e:e0:
                    51:9c:ea:96:6a:0e:64:9c:4f:24:75:50:24:f1:74:
                    a5:f5:9c:38:5e:46:6d:13:73:4e:ff:45:4a:41:2f:
                    8a:93:02:2e:e3:b9:68:fe:f4:86:07:86:8e:03:26:
                    39:dc:aa:4d:01:60:fc:70:46:17:99:90:49:12:76:
                    44:27:0c:5c:14:67:9a:3c:08:6a:d7:58:dd:10:0f:
                    44:61:b2:02:50:13:64:c7:db:c7:06:b1:59:2c:20:
                    95:1e:46:ce:ad:86:f2:79:81:fc:12:a9:81:f9:7c:
                    08:33:d7:a1:e9:85:e4:a7:e7:8c:f2:e5:8e:76:f3:
                    42:3a:3b:85:23:5c:31:e6:c9:0f:59:ed:a5:38:ef:
                    b5:48:77:5a:89:2c:7c:f5:96:7c:e3:65:24:d5:ba:
                    92:4d:6c:99:ab:dc:d8:6f:7d:b3:5d:0e:76:35:f5:
                    d8:db:ad:2e:a2:72:7e:65:d4:3a:81:9b:d5:68:bd:
                    c0:a7:ab:91:3f:ab:3d:d0:86:e5:72:7c:57:6f:66:
                    65:1f:85:a7:06:71:37:f4:8b:51:bf:74:e9:c7:23:
                    ec:c1:54:da:d0:b9:9f:36:73:b0:31:bc:6e:c6:37:
                    d3:c0:ab:08:ce:19:72:be:6c:fb:55:d1:c4:f2:1e:
                    c0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:70:C8:DC:23:84:3E:CE:41:ED:1F:12:5A:6C:9E:DD:88:7E:4A:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/76dac075-1c7f-3649-9e99-4499bb9a2714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:87:02:c5:2a:07:cf:83:c2:5a:e6:da:75:75:a4:77:7d:a4:
         f3:36:d2:ab:d1:48:72:b2:16:5d:b3:97:90:c0:96:d4:62:50:
         ab:fe:2c:b5:1c:34:58:5f:e8:9e:21:9c:06:a3:a2:44:d1:53:
         d0:0a:c7:af:7c:90:6c:97:36:f5:b0:40:e6:e4:cb:75:5b:bc:
         9e:5b:f2:df:18:4b:ea:98:1b:36:96:4c:aa:46:ce:44:04:61:
         da:d0:6d:fc:14:eb:1b:62:de:43:5e:4d:d3:d5:96:23:83:ef:
         ea:1e:c3:ba:2d:53:40:8d:95:73:13:cb:13:69:63:cd:cd:90:
         85:b8:c5:57:1c:06:cf:24:c5:51:00:aa:73:dc:3d:07:33:ef:
         10:19:fe:38:e7:78:ad:20:96:d5:22:f4:b6:c1:64:1b:cd:21:
         4f:15:97:fe:bb:73:4b:5e:09:1d:41:c1:02:3c:44:94:42:cb:
         16:37:d4:ea:81:e6:c2:68:11:81:eb:ff:1d:df:40:f2:29:5b:
         be:38:da:2c:a5:bb:03:dd:4f:b5:23:cd:8d:c7:a3:fc:95:10:
         6e:12:0c:71:d3:8a:2a:92:5f:65:ab:58:5d:48:4b:96:e0:d5:
         29:52:8f:30:19:5e:8d:10:5b:20:ec:1c:2e:9a:ae:cd:4c:a5:
         42:9e:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:47:14 2026 by rpki-client