Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/902c54da-4bd3-3e38-a8bc-3851ade632c0.roa
File:                     902c54da-4bd3-3e38-a8bc-3851ade632c0.roa (raw, json)
Hash identifier:          WFqOiSQY18jx1/qS5mfa3P1blH4BcVI0yX4K1+deMyQ=
Subject key identifier:   68:07:7C:1F:EF:DB:71:F8:94:C6:25:85:8C:1B:63:7A:82:B1:35:5F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E156DA9B431482CB2DE00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/902c54da-4bd3-3e38-a8bc-3851ade632c0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        172.242.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:15:6d:a9:b4:31:48:2c:b2:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=71da9a1e-8a5b-439b-aaf0-655338dc7ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:7b:31:1c:13:94:59:f4:0e:60:25:1f:12:
                    ca:23:62:79:8d:b1:cc:03:26:bb:6a:41:15:de:ef:
                    16:f7:a5:11:ad:1a:ba:81:54:85:16:8f:1c:e4:d6:
                    d9:fd:85:e9:86:a7:14:04:d1:3c:72:a7:22:4b:78:
                    53:f8:14:94:a1:6b:9e:63:2f:ec:91:5b:d7:0f:39:
                    4d:e7:f3:bd:29:21:18:04:d4:fb:33:e6:46:81:66:
                    b4:47:83:39:dd:2a:9d:f8:06:9a:4d:2e:6b:48:db:
                    fa:60:8d:c3:ce:2c:4a:97:4e:7c:af:cc:81:a7:85:
                    3c:9e:ed:40:30:df:72:5e:50:95:1d:6c:0a:2e:e8:
                    c4:d9:c6:e7:1c:72:b1:c5:50:c6:df:a4:a5:62:c0:
                    4b:72:ca:2b:79:7a:b5:3e:3f:78:6a:21:8e:4d:3a:
                    96:d3:f1:67:03:89:da:71:9a:2a:14:e9:e7:55:37:
                    90:82:e5:9e:ee:25:03:33:aa:5d:37:95:f0:16:5f:
                    4f:e3:9b:75:08:20:5f:30:13:6b:a5:5a:11:44:74:
                    f0:ea:e9:d1:91:12:1f:38:94:13:55:60:b4:e2:a8:
                    14:89:e8:11:a9:37:f5:0e:0c:47:f8:6f:68:db:41:
                    68:fe:c3:c6:a5:b6:00:a0:75:42:60:1d:72:af:62:
                    9a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:07:7C:1F:EF:DB:71:F8:94:C6:25:85:8C:1B:63:7A:82:B1:35:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/902c54da-4bd3-3e38-a8bc-3851ade632c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:80:4e:0e:fb:3f:34:0e:29:4d:3b:c3:ce:75:42:9e:c5:59:
         ee:5e:99:f3:5e:35:b3:08:2f:56:9d:38:4e:fc:03:d9:8d:14:
         3f:62:6f:5c:cc:eb:84:2e:c2:81:fb:4f:da:61:d2:db:3b:4d:
         16:23:f6:76:98:39:16:ee:f6:63:38:01:28:c8:b7:46:e2:07:
         c6:3f:22:aa:67:13:23:ff:cb:d2:30:fb:f4:a7:31:3f:ef:d9:
         a2:0d:8a:50:78:ef:03:65:02:75:18:01:b6:70:ee:31:26:4b:
         34:3a:01:7d:fa:cc:cc:10:b9:ac:fd:f0:77:52:d7:31:ad:37:
         f4:2c:14:3d:7a:d5:a0:e5:8e:ef:6c:69:8e:11:d7:79:8f:7c:
         aa:34:70:b0:02:2e:2b:d1:32:5a:98:8d:a8:d8:ec:fe:3f:98:
         bb:58:19:8b:2b:42:4d:a6:d8:65:51:1b:8a:d3:01:ec:a2:68:
         77:d5:9a:96:75:fa:d9:14:3c:9a:53:f7:5b:54:e0:c1:b3:4b:
         06:9f:cd:96:71:7b:f8:ff:6f:c9:d9:2d:5a:06:fb:7b:04:58:
         f3:3b:b3:fa:7f:45:ee:61:43:6e:c1:e2:09:50:3f:71:97:ce:
         72:b8:2d:67:b3:72:73:14:fb:b0:9e:e3:58:91:54:69:b0:9d:
         63:c6:13:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:17:31 2026 by rpki-client