Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bfe6ebf-e669-319b-b904-362ddb4a5a27.roa
File:                     9bfe6ebf-e669-319b-b904-362ddb4a5a27.roa (raw, json)
Hash identifier:          1y3n0q9PM4PYPm+oiQOffyF/xgnNhbKQItYF4IVgl9w=
Subject key identifier:   AC:47:CC:17:8E:12:12:35:31:3F:60:22:EA:FA:82:E0:EA:96:5A:86
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C2294CFCCEDC8F8674680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bfe6ebf-e669-319b-b904-362ddb4a5a27.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.20.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:22:94:cf:cc:ed:c8:f8:67:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=f36dbed8-7700-4d6c-8927-7232c0ed7d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e3:d0:3a:c8:ad:ea:79:d6:43:be:a8:21:27:
                    e9:2f:61:b2:04:7e:0d:9e:e1:7d:86:cc:08:00:4c:
                    cb:c5:c0:60:8a:ee:0b:43:8c:5b:ae:f3:6f:c4:32:
                    9a:36:99:61:5b:97:c1:19:b0:77:14:73:da:0e:3e:
                    2d:a3:82:0c:64:4d:e7:38:d0:08:00:f9:cc:43:11:
                    8c:c7:b1:a3:f2:e8:8e:05:66:5d:db:4c:9c:f6:fb:
                    ea:d9:5e:ad:82:85:d1:55:81:f0:f9:d0:93:72:1f:
                    d0:5c:b2:aa:20:3e:7f:30:0e:15:3c:b1:23:e5:6d:
                    70:b2:4a:b7:84:27:3a:68:13:82:68:53:cb:cc:b2:
                    93:b6:3e:bd:1b:2b:5a:08:37:4f:9e:03:6c:24:fa:
                    72:19:4d:d9:69:d9:30:83:bf:1a:b3:89:b8:d4:91:
                    5c:ee:b6:43:e8:59:0b:56:00:aa:8c:cf:03:59:49:
                    42:c4:f0:76:a9:01:63:5d:eb:6e:df:c8:b9:bf:3e:
                    e5:cf:9e:92:9e:77:9d:33:94:50:75:58:5d:b0:f7:
                    65:f8:12:1b:e2:1f:7a:b8:ba:8c:57:a1:1c:31:bf:
                    90:5e:3c:ce:a9:f3:64:96:30:5b:31:e7:ca:fd:59:
                    06:c7:97:33:e0:b8:1e:60:0e:a7:02:9b:a0:4f:24:
                    34:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:47:CC:17:8E:12:12:35:31:3F:60:22:EA:FA:82:E0:EA:96:5A:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bfe6ebf-e669-319b-b904-362ddb4a5a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f9:c8:89:43:55:a6:99:41:3b:af:de:2e:dd:a6:38:4e:9d:
         5a:81:4b:b0:24:35:77:71:92:1e:2b:43:b5:ee:fb:eb:b3:cd:
         b2:8e:6b:cd:2f:48:6c:41:39:81:7e:d6:a6:09:63:a5:15:bd:
         ba:4a:84:1f:7f:b4:23:4f:35:d6:8d:fd:47:e1:eb:45:b1:27:
         55:9c:42:c7:74:d0:f1:30:9a:8e:63:e2:6d:24:09:27:bb:76:
         3d:24:e1:68:50:07:8b:b6:2c:94:b3:2f:86:1e:c4:0c:18:58:
         7b:3c:be:25:7a:7d:86:8f:1e:80:6f:d8:e7:ad:9a:36:71:04:
         b6:85:74:92:2f:c8:53:af:fd:01:46:89:ea:9e:da:9c:63:07:
         52:59:76:83:00:f0:ae:5e:05:41:5a:37:d9:26:eb:e9:af:dc:
         5a:2b:bf:ce:92:06:88:b1:d2:8e:a1:d3:01:1e:08:8a:f5:bf:
         bb:52:54:78:bf:80:b0:7e:a9:3b:9d:cf:be:35:04:3d:04:42:
         84:2a:15:a2:71:28:01:b0:ec:94:14:03:ef:6e:f1:5a:86:09:
         8a:8c:d5:cb:49:5e:55:d9:30:e5:e8:82:3c:54:11:a2:ed:24:
         f9:e3:e9:ce:70:e5:37:7e:fc:ee:fd:0c:d2:52:2f:fb:60:a1:
         f1:bb:41:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:38:08 2026 by rpki-client