Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c24848b7-7a9c-3291-be51-a3c4001a4c42.roa
File:                     c24848b7-7a9c-3291-be51-a3c4001a4c42.roa (raw, json)
Hash identifier:          GSJWI0v4CRnOR7jTrGYyWqBrWn51cDC+e36hsgODTTU=
Subject key identifier:   A7:BD:3A:15:C7:8B:48:54:59:89:47:2B:B7:2E:8F:40:AF:66:06:26
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E65A3EAF26B7A2D59EF80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c24848b7-7a9c-3291-be51-a3c4001a4c42.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.63.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:65:a3:ea:f2:6b:7a:2d:59:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=06a4f636-52d6-4488-aaa8-e511b04f6996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:39:6d:0f:5c:be:b5:e4:a5:40:a8:e4:75:
                    ea:c5:da:f6:b3:43:d8:9e:14:f6:d6:f4:96:6a:4f:
                    53:1e:45:78:b9:3c:be:68:28:14:5e:b3:24:49:8e:
                    c3:3e:23:35:db:b1:7f:eb:36:67:81:00:90:38:dd:
                    7e:45:5d:dd:e5:1e:9b:1b:2b:e4:28:23:83:4a:fb:
                    2b:c1:56:3f:26:cf:2c:cb:ed:97:ba:e4:a0:41:9e:
                    24:ee:b4:87:76:24:92:e0:05:f8:be:a8:22:71:da:
                    23:3f:2c:71:da:a1:18:fe:c2:5a:bf:8c:36:30:b7:
                    ae:e8:61:1d:d7:8b:d7:4e:a2:b5:2c:d4:b6:d7:ea:
                    ab:35:bb:4b:69:4a:ba:97:8c:2c:1d:5f:a2:da:96:
                    87:5a:77:93:f0:bd:fd:11:09:48:de:8f:61:16:be:
                    f6:7f:35:31:0e:e3:1a:98:ff:41:6c:ff:28:c5:2f:
                    68:68:8d:47:34:46:e7:46:6d:49:58:2f:cd:31:f0:
                    78:f5:b0:f3:d1:82:45:a7:ba:83:d9:8b:d3:91:1c:
                    fa:59:51:04:e5:a5:1e:24:11:e0:00:e2:c5:d1:af:
                    19:a2:da:8a:2c:c5:68:e9:6f:b0:8a:2a:25:34:57:
                    55:a8:71:27:95:20:26:68:92:ef:be:67:e7:7c:42:
                    82:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BD:3A:15:C7:8B:48:54:59:89:47:2B:B7:2E:8F:40:AF:66:06:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c24848b7-7a9c-3291-be51-a3c4001a4c42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:dc:5b:c0:4f:26:57:ce:a6:a0:53:c7:f5:ff:44:21:6b:0c:
         e2:d1:0b:05:21:13:c5:41:fb:e2:1d:f9:9a:e6:0d:ce:6f:38:
         e3:82:57:75:4c:f3:f5:88:bf:48:14:0a:72:82:6d:b3:9f:92:
         25:1e:11:a6:cc:87:5e:b1:9e:2e:5c:94:c7:e3:16:d9:d7:f6:
         32:39:9b:d4:37:0c:b5:6d:5e:ef:5f:1c:9d:04:f8:51:e3:b4:
         fd:cb:c0:19:65:85:6b:5e:31:97:78:e1:b4:e2:3f:49:0a:44:
         13:88:02:a3:58:44:db:86:34:5e:a1:4d:87:81:ef:2f:9d:7a:
         6b:4e:c4:67:07:c5:4c:11:0c:2f:1d:4d:65:96:c5:23:19:d3:
         a0:4b:b5:f5:0b:8d:fd:1f:33:92:48:fc:c3:50:dc:b2:d4:2a:
         47:d3:c9:a3:15:7a:4a:d1:4d:2a:01:d7:ef:3e:60:fd:28:9f:
         35:dc:32:2f:46:38:bc:4f:01:6c:90:51:a1:12:d2:95:5b:57:
         a1:23:49:53:ed:2f:73:ed:ed:e8:83:c4:95:9f:b5:fb:7a:fb:
         40:e8:93:44:2a:03:41:cf:69:0e:65:46:56:f8:0a:ca:83:70:
         8e:13:8a:c1:70:63:d6:e0:34:38:d4:ac:bf:db:4b:da:df:55:
         4b:85:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:34:32 2026 by rpki-client