Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85ed9880-dd4f-309c-8299-a73fc851fdb7.roa
File:                     85ed9880-dd4f-309c-8299-a73fc851fdb7.roa (raw, json)
Hash identifier:          ihdxK9XW0dTzcNHh5cxm+c7uvXKUlRuu0txVG2iTLRo=
Subject key identifier:   FC:01:2F:E6:A3:56:FB:81:59:0D:EF:79:60:4A:4B:4E:CC:9C:31:68
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA7A01D9BB9AA7F0427538600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85ed9880-dd4f-309c-8299-a73fc851fdb7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        198.45.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:1d:9b:b9:aa:7f:04:27:53:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=27e16f47-6fea-4f6c-9166-fe4f64c9b320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:02:ba:eb:4b:ed:f3:6d:f1:99:5a:56:6d:
                    07:ce:eb:e3:12:29:45:f0:d1:c0:1c:e4:d7:47:8b:
                    08:17:f5:47:c0:9b:58:40:1f:62:95:c7:0e:cf:5b:
                    45:c6:b4:2b:67:85:13:fe:45:91:75:23:c2:81:6b:
                    ea:30:92:7a:b6:b7:81:ba:ef:bf:a4:0e:70:e5:5a:
                    74:1a:0e:3b:2f:8c:58:c1:c0:dc:8c:e1:69:98:0d:
                    b4:58:b4:c1:b8:7a:00:19:8d:4c:96:4a:5d:f9:8b:
                    23:b4:53:e3:1e:0b:7a:16:d4:03:a1:b2:22:73:00:
                    f4:1f:61:db:33:25:36:47:b7:e5:fc:21:78:b4:d6:
                    70:ce:2d:3f:e6:f8:4c:a6:6c:46:2d:de:dc:24:f2:
                    6a:d4:0e:ee:1c:43:12:56:49:74:a4:7a:55:08:ee:
                    db:e4:b2:af:44:bc:65:bf:20:db:70:e5:01:7f:17:
                    17:be:b5:a0:3a:90:d6:c8:35:7e:e7:bd:a7:c4:9d:
                    e0:02:ce:bf:25:c3:cf:32:6d:16:c7:e1:f4:f0:20:
                    06:de:d5:13:d2:d6:7b:90:7f:5b:5d:35:d7:32:eb:
                    d7:ba:df:95:f0:6a:ea:71:e6:7f:d0:e6:1a:60:6c:
                    f8:64:d2:5b:b4:80:70:ba:6b:9a:3a:0a:7b:5b:28:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:01:2F:E6:A3:56:FB:81:59:0D:EF:79:60:4A:4B:4E:CC:9C:31:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85ed9880-dd4f-309c-8299-a73fc851fdb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:47:c0:bf:2e:f5:e2:2f:a5:5a:10:d5:e2:91:a8:ec:6d:c5:
         86:f8:43:ef:dd:77:75:f9:be:08:bd:c1:d6:88:ac:1e:41:03:
         d7:1c:7a:7a:5f:dd:5d:89:6f:6a:90:90:24:0d:55:b2:1f:db:
         91:04:28:c1:84:71:ff:ce:18:de:07:c1:94:15:4c:89:e6:79:
         93:30:5a:cb:01:7f:c9:ac:df:65:42:4e:a4:ec:c1:3c:98:bf:
         db:f8:6e:0e:95:2b:99:12:e7:5a:36:a1:a1:ac:57:6f:4c:75:
         79:45:23:33:e0:27:08:0f:10:b5:43:0a:00:10:43:a0:51:61:
         a0:2a:50:09:b6:81:a0:4f:5b:00:59:e4:3c:be:0d:33:09:a4:
         65:a5:41:b8:e9:9e:a5:e6:53:94:95:e7:4b:59:73:95:5c:71:
         38:c3:d1:5e:42:33:c8:10:a9:d1:bb:81:18:3c:db:dd:ab:5e:
         56:a8:3d:c6:39:d3:a1:93:e9:ba:45:c9:a5:6c:d5:6c:50:04:
         61:f7:ca:92:97:63:87:d2:81:77:ce:8f:72:11:35:50:79:3b:
         2d:37:b1:91:3b:0d:b7:b3:82:30:0d:5c:1e:9c:bc:f1:5a:d6:
         a9:9e:84:4a:9f:2d:22:9d:98:8b:f6:69:28:7f:67:5a:ee:dc:
         b6:3e:ac:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:52 2026 by rpki-client