Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86fdc26b-76e6-3285-bc3f-ebf794c5b720.roa
File:                     86fdc26b-76e6-3285-bc3f-ebf794c5b720.roa (raw, json)
Hash identifier:          b5x1RnRRJXAhuxlsUMglQBc3vSK0udB9L9jFUyhqAEg=
Subject key identifier:   40:7A:D6:2D:16:A4:F7:E8:66:18:A1:AA:1D:17:5E:7A:50:AD:34:78
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B83FE5034F39A718A9B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86fdc26b-76e6-3285-bc3f-ebf794c5b720.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.196.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:83:fe:50:34:f3:9a:71:8a:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=87108c04-0a58-45a9-8002-f46f4af3e60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d5:5b:a6:81:2e:c3:e2:f8:61:97:98:f5:a2:
                    30:94:49:88:27:fd:6d:a7:1b:dd:a3:35:69:04:ce:
                    0c:10:8f:9a:3b:71:6f:6b:5e:76:ad:12:ee:17:da:
                    97:49:d0:6b:11:93:32:e2:f5:0d:fe:7b:da:77:f6:
                    bd:be:e3:de:c2:89:d9:40:35:01:c9:c2:31:07:99:
                    71:2c:48:e2:ed:f1:77:dc:8d:b0:e0:eb:0f:05:43:
                    6a:ad:c7:b2:2a:c8:e2:54:eb:6b:75:7a:22:d2:8e:
                    6a:75:c9:ac:bc:40:77:03:79:7a:6f:91:37:3e:9e:
                    42:4a:e0:ff:d5:06:1f:d7:9d:32:8c:fb:86:f6:67:
                    68:d0:c4:08:56:6b:f9:65:d7:16:39:a3:ce:aa:42:
                    fc:b6:86:4c:af:b9:ba:1e:6f:93:b7:ca:14:5b:16:
                    b9:a0:73:00:2e:25:0a:f4:41:54:ba:e9:61:78:fa:
                    8d:52:77:79:73:70:68:d8:1f:c4:6d:7b:cd:ee:48:
                    84:99:c7:79:00:0e:42:77:c0:5a:04:6f:98:8e:ce:
                    3a:cb:b8:40:1d:e2:8a:c5:23:3c:79:72:65:c8:92:
                    9e:c2:b0:5f:35:c4:d6:54:f5:10:b7:29:48:f1:97:
                    e2:5c:f2:84:18:c1:9e:dd:73:b6:67:0c:d5:19:f4:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7A:D6:2D:16:A4:F7:E8:66:18:A1:AA:1D:17:5E:7A:50:AD:34:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/86fdc26b-76e6-3285-bc3f-ebf794c5b720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c5:c8:84:a3:99:91:dd:32:5a:38:cc:53:b2:f1:3a:93:1c:
         a2:4d:29:a1:d1:21:13:fe:21:fc:3f:f4:5c:52:13:6e:0c:32:
         08:cb:31:81:93:b5:71:79:5d:89:68:cb:9a:40:8b:5f:ca:71:
         01:5b:1b:19:61:a4:f3:fa:94:1c:29:60:ae:c0:ed:89:ff:75:
         01:18:57:46:68:71:d3:27:36:09:78:eb:65:6e:9b:b1:31:08:
         0b:50:e1:0d:3f:f0:ae:6b:f3:f2:7b:98:11:ae:bf:38:e0:38:
         ba:9d:13:5a:5c:7b:3f:d3:11:9e:29:38:32:02:2a:44:c6:30:
         8e:ac:a2:2f:30:f4:b7:3a:22:75:80:66:ac:a3:31:70:ac:4e:
         b9:cf:93:47:08:ac:c2:ef:c9:31:7e:d0:31:f6:df:ab:36:81:
         e2:86:0d:c7:47:0a:1b:55:c8:b7:28:dd:3d:96:0c:f2:b3:c4:
         c8:25:6f:bb:26:00:a0:8d:f0:17:2e:d7:af:ae:53:b1:9c:c2:
         ee:a9:6e:c5:b4:68:00:ba:18:cd:e9:87:88:4a:1b:f0:ac:d7:
         00:51:a1:85:d9:6a:ec:25:1b:e2:c9:90:fc:ca:a2:19:08:39:
         d6:c6:9f:4e:bc:cd:6e:3a:ef:58:34:2a:3f:bc:dd:d4:d8:f9:
         66:4e:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:24:16 2026 by rpki-client