Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c84a76a3-703e-3f29-96f5-d3c10efaedcc.roa
File:                     c84a76a3-703e-3f29-96f5-d3c10efaedcc.roa (raw, json)
Hash identifier:          erUA/i/rrNCZirmAVLWmsRSZMfzK9cer9BU40jiwSqY=
Subject key identifier:   05:C1:C0:46:20:F7:66:73:F1:89:18:A9:BA:27:AE:2C:40:77:2B:33
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79FC0D053F32CB89C498B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c84a76a3-703e-3f29-96f5-d3c10efaedcc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        172.242.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:c0:d0:53:f3:2c:b8:9c:49:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cc52dd55-59b6-41c1-a9b8-c5e220ae713d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:8e:13:40:f1:43:ac:65:6c:ac:80:d3:83:
                    d4:9a:c0:23:d9:d0:02:a5:b1:17:3d:05:6e:e8:74:
                    d0:b4:90:1d:39:73:a7:60:f6:83:40:01:50:c2:1b:
                    a0:0d:71:74:aa:de:27:de:19:a2:69:5f:c9:49:f1:
                    6a:a1:78:0d:d0:6a:49:62:10:a2:46:76:10:a0:ae:
                    84:d2:66:9e:4d:31:d7:71:e0:22:04:2f:60:0d:a1:
                    50:af:d8:06:d6:97:af:32:55:03:1e:46:ef:27:1d:
                    52:fe:1a:ad:56:a4:4a:66:ce:03:87:f1:b7:f4:ea:
                    ad:1a:20:53:16:fb:20:2e:20:27:bb:00:bf:fe:d0:
                    79:ae:90:fd:da:71:73:a4:34:62:08:c8:8b:7f:c1:
                    08:60:ae:e7:f3:5f:1d:39:cc:a2:58:ba:39:ae:6a:
                    b1:84:45:77:e1:86:76:be:cd:e9:5e:0e:88:89:18:
                    01:fb:6c:30:fd:4a:2e:59:ba:b2:f9:8e:a2:b1:9a:
                    07:ba:3d:e9:ad:ee:cd:0d:b6:06:f3:92:cc:bf:4b:
                    9d:c6:c9:c4:0b:93:0e:06:8d:86:40:93:9e:36:af:
                    3b:40:fa:eb:64:35:8a:13:a1:71:5e:48:b2:84:de:
                    c6:e0:fe:32:c4:15:e0:d6:ad:92:c3:eb:8e:26:86:
                    f8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C1:C0:46:20:F7:66:73:F1:89:18:A9:BA:27:AE:2C:40:77:2B:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c84a76a3-703e-3f29-96f5-d3c10efaedcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:7e:aa:34:a5:3d:57:06:0a:f4:dc:59:46:11:96:6a:c1:7e:
         c2:af:f3:80:8b:20:52:44:65:53:48:e9:85:76:2d:ea:77:34:
         86:e2:04:30:e6:19:62:ca:68:7f:44:d7:c7:f6:c5:5d:85:f9:
         19:7c:23:10:f0:d9:1a:5f:76:63:3f:49:6d:50:7e:74:26:3b:
         b4:8f:8a:13:25:9c:aa:77:73:fc:c8:71:fb:16:33:8d:d0:e0:
         01:15:7f:86:67:e9:cf:54:25:77:b2:09:6c:a2:30:29:ed:be:
         37:fb:d7:50:74:4a:8c:2d:c4:bf:3b:b3:20:6b:63:5d:1d:39:
         1a:3c:9e:d1:95:09:1b:1e:db:4d:91:ae:38:9f:b2:5d:96:0e:
         28:46:8a:76:d4:ed:d1:49:c1:d2:3d:0d:20:66:0a:51:36:02:
         bb:e2:72:67:30:db:8c:c3:ab:ba:08:ef:d3:6a:da:29:39:7c:
         a3:57:8a:19:8c:7b:4d:af:2b:e0:c4:12:c7:52:b2:c0:eb:39:
         7b:5d:a0:7c:da:c3:e8:92:1c:eb:a3:8a:4c:95:30:a6:8e:a5:
         0b:e5:ba:e9:94:f8:db:5d:1a:ba:fa:93:e7:0d:3f:30:51:98:
         ec:c7:16:2f:65:43:41:49:d3:02:eb:63:7c:de:b2:b0:bc:a3:
         81:40:1d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:06 2026 by rpki-client