Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0ff1f45-a856-3692-b700-086a0fb2bf07.roa
File:                     d0ff1f45-a856-3692-b700-086a0fb2bf07.roa (raw, json)
Hash identifier:          BF20gTUuYxstsHAQAQils8ID3HN8MUNWiuABH7cjsdM=
Subject key identifier:   D9:5D:54:B2:64:C1:C4:19:32:FD:A6:C8:8B:13:AC:0D:5A:4E:23:E6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983D8A8770FF576E0E86D40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0ff1f45-a856-3692-b700-086a0fb2bf07.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        172.242.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:d8:a8:77:0f:f5:76:e0:e8:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5c8a4002-b777-406b-b33e-63e45674ad0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:33:ae:c4:1a:56:8e:8f:b2:e4:40:6b:f9:ec:
                    96:2a:d1:9e:3e:47:ff:e2:f4:eb:06:37:8e:75:75:
                    b5:d1:02:fd:59:82:cd:d0:f1:16:58:8c:76:c0:67:
                    5d:d1:b0:aa:10:fd:ad:7b:74:3f:ed:ac:fd:59:5e:
                    5d:c3:d9:4e:3c:87:61:8d:fe:22:f7:e5:0c:1b:83:
                    6b:8a:85:24:44:71:33:72:92:5e:b6:99:33:d8:cf:
                    ba:bc:5f:87:e9:c0:19:d0:56:06:3a:42:28:e3:87:
                    9e:ea:6b:0f:f0:0f:ee:ad:12:ee:00:94:c0:76:f5:
                    f1:fa:74:c3:65:03:8c:b5:5b:32:e6:85:f2:2e:d6:
                    96:0d:da:69:ed:06:78:ca:46:28:9f:0a:27:cf:0e:
                    9d:f6:e9:0c:f8:ca:2e:38:d2:98:cb:76:f7:1b:49:
                    56:85:62:a2:8b:ae:98:00:b3:35:e1:59:3c:fe:be:
                    57:d6:aa:ec:cc:10:47:b9:03:5f:a4:a8:0a:28:ca:
                    4a:bd:01:36:d7:74:b9:63:3a:f7:19:98:a8:41:16:
                    67:fa:fa:d5:f0:a9:12:0b:88:45:7d:c5:c3:4e:11:
                    3d:79:6f:2e:23:fd:c9:9f:a0:96:76:96:79:4e:4e:
                    87:2b:8a:81:5a:a3:e6:25:c4:cf:01:9a:b9:42:ec:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5D:54:B2:64:C1:C4:19:32:FD:A6:C8:8B:13:AC:0D:5A:4E:23:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0ff1f45-a856-3692-b700-086a0fb2bf07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:84:c1:15:49:71:76:c8:2c:d0:56:f6:70:40:42:5f:49:d8:
         38:d7:21:0e:fb:e4:4f:2a:e3:54:95:57:a3:4b:8a:88:1d:2f:
         9b:bd:7d:23:b2:32:bc:90:b3:88:5c:e8:48:5c:bc:e1:95:4b:
         b6:81:92:13:1c:55:f9:96:de:7b:15:76:19:13:93:3b:6e:e1:
         6c:ef:fc:dc:6d:87:b3:f8:3c:53:1f:00:ac:11:c4:a6:b4:5d:
         d8:1e:20:ef:7f:9e:27:a6:51:49:0e:b3:d5:30:c0:3d:3d:4e:
         bf:10:79:e8:eb:d7:85:40:57:85:bb:2f:3e:7e:41:7e:4e:04:
         25:74:68:7c:a1:8e:59:42:57:75:62:8f:d3:24:ee:29:c6:3b:
         ca:62:c3:88:cb:44:69:0f:81:41:64:56:07:69:d9:fd:16:32:
         bc:35:b7:c2:77:62:9a:d7:03:6f:a4:17:e9:55:e3:00:fc:63:
         91:2a:3b:d7:ed:28:54:8a:93:b5:c1:9b:4d:2f:c2:4c:9a:d2:
         97:f4:b0:9f:a7:f1:94:c4:2f:b1:55:b9:59:57:68:6f:ec:03:
         5f:1e:09:bd:a1:06:6b:96:de:30:4c:34:e2:de:e2:8a:ac:ae:
         34:9c:a8:a8:98:5b:fe:eb:48:a1:bd:1b:70:48:23:bb:4c:b8:
         5f:49:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:06:57 2026 by rpki-client