Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77c6db04-7ab4-323f-ba9c-9d9d7a6716d0.roa
File:                     77c6db04-7ab4-323f-ba9c-9d9d7a6716d0.roa (raw, json)
Hash identifier:          qUlK6YqP4IGe2qyLgvzCniSB15114DhpGoE+fo3XsiM=
Subject key identifier:   3F:A0:CA:8B:C1:B5:25:16:AD:10:DA:04:75:52:57:36:84:A7:55:E2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B9DEE7CA39A8A41F536D7
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77c6db04-7ab4-323f-ba9c-9d9d7a6716d0.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        172.243.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:9d:ee:7c:a3:9a:8a:41:f5:36:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=4c6ef4b5-4ce2-42ed-aafc-a8b539657f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:10:ea:fd:31:84:6d:24:47:38:51:db:5a:
                    49:d1:8c:bb:5e:a2:de:66:04:cd:f1:96:90:cd:92:
                    ce:3e:1e:6f:15:71:46:13:4c:73:18:2b:da:88:67:
                    0b:8b:03:74:28:05:c6:bc:a2:60:d2:85:aa:5a:5a:
                    f2:d5:cc:9d:41:5a:e7:33:c2:34:92:76:cd:84:9d:
                    d3:b1:06:c4:93:f7:87:a3:e3:29:cb:51:5b:1f:3c:
                    8c:0f:cb:8e:fc:f8:0a:b7:65:42:af:3d:d4:2c:3c:
                    e8:32:5c:db:99:3c:f6:86:28:26:09:ee:47:5c:07:
                    af:66:32:6e:ae:5c:64:8b:35:68:a4:4d:eb:d8:1f:
                    5f:57:3f:4d:05:1a:98:a5:49:e9:c0:a6:a4:65:56:
                    69:cf:2a:42:59:92:79:dd:41:56:be:4d:63:20:ab:
                    d6:80:ba:b2:e3:9a:8e:cc:ce:09:50:f2:b5:65:d9:
                    a0:bb:42:a4:7f:12:71:88:4c:61:ec:d6:fe:35:10:
                    b3:da:e9:62:43:e8:9a:39:0a:f0:ff:52:c2:d8:49:
                    7e:d0:2f:51:ed:4b:52:fe:2d:85:a4:0b:29:34:27:
                    42:6f:d3:d7:d5:66:be:ef:ea:c9:94:6c:ad:10:57:
                    34:76:ff:a1:74:bb:90:91:8f:10:ee:88:45:15:08:
                    a9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A0:CA:8B:C1:B5:25:16:AD:10:DA:04:75:52:57:36:84:A7:55:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77c6db04-7ab4-323f-ba9c-9d9d7a6716d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:f5:4c:11:d9:6c:b8:75:2f:57:01:05:c9:20:b2:07:b8:5c:
         82:f6:e3:46:ff:44:86:68:dc:17:70:04:4b:8f:a8:62:37:88:
         1c:e9:99:51:84:e0:af:d9:0a:77:56:66:a1:c2:bd:4f:ca:66:
         7c:45:42:27:75:a1:84:0b:7b:12:3f:3f:f4:2e:8d:6b:6e:b4:
         0f:73:75:d4:9c:af:d9:49:e5:7f:a7:23:25:05:46:f5:78:0b:
         58:39:83:8b:d1:8e:e1:46:e8:15:55:76:e1:ff:98:dc:7a:ec:
         a8:91:e6:70:77:24:6d:86:fb:e2:6e:41:f6:5f:8f:d9:ae:77:
         fc:4d:71:a4:1e:69:ff:ad:7b:a5:b7:23:bf:24:0d:1d:d5:d3:
         82:f4:fe:f1:b7:46:39:ae:83:1d:9d:65:f5:68:17:d7:68:07:
         ca:d4:1d:94:59:2a:ac:3a:15:47:22:16:42:c1:3a:ae:29:0c:
         2f:ab:fc:3d:24:fd:c0:be:ff:5a:1b:5f:4a:19:e1:4d:af:5a:
         71:ac:14:c5:fe:a5:c1:19:3b:e8:86:13:3d:69:da:e0:f6:2d:
         ad:61:73:4a:6f:37:59:51:87:4c:51:cf:33:59:44:05:0c:f4:
         1d:a1:10:cb:e6:38:49:b3:b3:01:af:8c:df:3a:14:4f:73:7f:
         3b:84:f1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:00:18 2026 by rpki-client