Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8af5a33a-d62b-326f-9346-aaa6207253dd.roa
File:                     8af5a33a-d62b-326f-9346-aaa6207253dd.roa (raw, json)
Hash identifier:          UNeovDMhcID7VqxVwg5yib0LuVq25xp015YT2PG9wTc=
Subject key identifier:   B7:94:44:24:40:27:F2:46:9C:51:67:F9:C6:69:81:33:C9:7D:C1:3D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BB675B10C4E390D31EE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8af5a33a-d62b-326f-9346-aaa6207253dd.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.63.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:b6:75:b1:0c:4e:39:0d:31:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=7108e32c-34da-4ebd-a9cf-aa052276390b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f9:c8:d9:88:d3:af:4d:7b:bc:67:b7:9e:75:
                    ec:ca:26:3b:ba:90:aa:d8:4a:69:80:42:fa:eb:6f:
                    45:cd:b9:b6:63:07:b4:92:19:99:33:82:b7:1d:1b:
                    02:86:d8:c8:3b:a2:bf:b4:b5:e9:48:4d:63:64:38:
                    57:e0:64:81:ef:6c:5a:73:6d:cb:cf:f3:e9:f0:8f:
                    78:bc:3e:57:da:05:fb:fd:cd:1e:95:70:8b:c9:89:
                    9f:37:41:fe:24:45:5b:78:70:4f:a5:f7:6e:ff:28:
                    50:39:6e:d3:b9:8a:a4:ef:91:70:eb:3f:c4:75:ec:
                    ea:2e:b6:30:c4:c6:19:ea:86:ee:cc:5a:d5:9e:bc:
                    0b:e6:f1:66:ce:f3:d7:7d:3d:e8:83:b5:d3:1f:08:
                    14:e6:a7:94:4c:2c:d3:91:db:fd:d6:1c:aa:19:04:
                    e7:ad:1c:79:fa:62:a5:ce:aa:cc:3f:4a:a4:89:c4:
                    9c:d6:76:eb:d5:95:f9:3c:a8:78:f9:82:79:46:48:
                    c1:2d:b8:fe:17:1f:2f:5c:dd:be:e8:8e:cf:1b:70:
                    f9:b7:1e:27:95:5b:14:df:1a:7d:3e:73:46:6b:ef:
                    05:df:5c:a5:72:bc:63:bf:e6:22:34:84:24:84:5f:
                    10:e3:ff:4b:ba:58:5f:b2:69:c0:a6:33:53:a3:da:
                    73:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:94:44:24:40:27:F2:46:9C:51:67:F9:C6:69:81:33:C9:7D:C1:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8af5a33a-d62b-326f-9346-aaa6207253dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:b1:eb:27:f4:32:f4:02:df:fc:db:d7:2c:f8:ad:b0:f4:e6:
         71:11:47:35:92:89:0d:b8:1e:8e:39:3b:b4:99:48:9b:bf:d5:
         b4:02:87:ce:08:2c:c4:33:43:98:bd:e4:38:72:e2:6a:60:c0:
         04:ba:b2:9b:1b:4f:f9:d4:45:a8:21:1f:b0:3f:6c:23:c0:c6:
         81:b6:35:6e:45:cf:be:3c:97:77:1e:27:d3:9c:a9:73:85:f7:
         ec:cd:83:f3:07:76:82:61:64:da:90:71:b6:36:1e:8d:ca:86:
         8c:24:c9:cf:48:65:7e:25:8f:7f:35:0b:a9:69:76:88:6a:11:
         d7:3e:31:c4:cd:f4:e2:30:27:f4:bc:57:58:fb:35:2e:21:4d:
         7b:89:a0:4b:52:00:25:aa:1c:33:d8:cf:aa:53:6a:bb:8c:5e:
         32:fd:d6:3f:2c:2a:ba:c5:04:e2:9d:1b:b3:ac:b5:f1:ee:c4:
         94:f3:df:d6:d1:db:25:b9:63:94:2b:58:49:a1:f9:ec:43:f3:
         9f:86:38:2d:e7:77:dc:d3:a4:ee:aa:25:8c:cb:a8:0f:4f:10:
         0e:51:f7:d1:10:39:f6:0f:d4:58:2a:63:e5:63:26:e3:93:6f:
         29:69:af:66:e2:29:33:81:2f:c0:5c:b2:9b:06:ec:57:1e:96:
         65:24:ba:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:33:17 2026 by rpki-client