Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de1ccaa6-1742-3567-9abd-69e01106c1fb.roa
File:                     de1ccaa6-1742-3567-9abd-69e01106c1fb.roa (raw, json)
Hash identifier:          yuoWuapQiWSCYMSpKmgF3hV+Wu1ug2B2PC4s9u1Ngbs=
Subject key identifier:   9C:0A:2D:B7:A1:B0:92:8E:E7:37:20:AD:78:A2:5D:B6:DC:5A:C1:A3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BAC4FECB469D8F239C400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de1ccaa6-1742-3567-9abd-69e01106c1fb.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.62.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:ac:4f:ec:b4:69:d8:f2:39:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=aa821f17-768d-4998-be54-fa91eddf8ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:7f:22:df:c5:04:90:20:39:84:8b:75:34:
                    ac:28:85:3e:94:ea:34:9b:c7:81:0b:cb:09:aa:db:
                    7c:93:be:2b:79:52:d9:f3:d0:6f:f1:1c:02:44:a0:
                    84:2d:e3:23:81:54:2f:90:cf:48:21:48:25:bb:22:
                    a1:18:a8:c9:13:32:26:5a:6d:e6:62:02:dd:68:23:
                    d3:74:0f:a5:6d:d3:01:ea:a9:65:53:7d:d2:ed:77:
                    7f:18:d0:86:6b:98:ae:c4:6a:5d:95:d7:e3:80:fe:
                    3d:da:7a:e0:1c:7a:92:ff:66:e2:d3:d7:a7:28:88:
                    c1:3c:ee:c9:e5:1f:b7:25:37:be:7b:31:5a:23:fc:
                    be:1b:cf:ab:76:4b:11:1f:33:a8:9b:c6:62:77:41:
                    16:6a:07:6b:8f:59:d6:2c:a0:31:e5:33:f3:39:a6:
                    36:d4:21:ac:0d:45:28:6c:a6:53:b4:5a:0f:03:db:
                    d8:0c:ee:c4:17:c8:6a:f8:4d:f8:87:d4:2e:f1:d5:
                    1d:98:38:54:54:eb:53:a3:24:18:e3:44:03:bc:24:
                    e8:dd:ce:63:d0:8f:23:f8:ed:06:f9:ee:0f:97:04:
                    40:ff:24:dc:eb:2d:02:20:bc:21:b1:4a:16:38:0a:
                    d5:18:f9:e4:20:c0:79:a2:7e:a3:73:35:94:0b:87:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0A:2D:B7:A1:B0:92:8E:E7:37:20:AD:78:A2:5D:B6:DC:5A:C1:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/de1ccaa6-1742-3567-9abd-69e01106c1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e3:5f:53:ff:4e:27:31:1a:18:fc:a8:14:7e:01:6a:a6:73:
         b6:1d:3c:b0:da:7f:29:43:30:e2:23:7d:b8:71:18:ed:8c:a5:
         2c:ba:3d:fe:00:2e:58:e9:98:9e:5f:1d:71:46:f5:10:41:5b:
         35:4c:c2:dd:a5:ab:0a:b5:ee:a0:9a:94:09:67:1e:84:96:0d:
         93:92:da:17:38:fd:0f:34:b3:15:f5:cc:67:a6:8c:db:74:07:
         13:63:f8:2b:c8:0e:77:b9:3b:f4:e4:ff:72:24:94:50:3c:cf:
         13:2d:cf:ba:49:f7:30:3f:06:45:9a:43:f5:1e:0e:fb:a7:43:
         b0:ab:f5:74:5b:d4:9c:2e:d1:42:98:ce:69:ac:03:ad:0d:a3:
         ae:0c:ca:f8:3c:08:06:42:ae:e4:20:d8:2f:12:0f:5d:a0:2b:
         fa:28:d3:4e:10:68:5b:dd:31:1a:80:70:28:be:7c:c1:8e:48:
         73:72:cd:fc:f0:d7:1b:0b:f5:62:48:96:e4:49:18:b8:61:83:
         48:5b:85:1e:6b:32:18:42:39:2d:6e:b1:ad:56:05:a8:7f:df:
         7e:be:1e:e1:17:86:52:e8:58:83:d3:b3:67:1a:3a:c4:55:f7:
         4d:1c:c6:97:cd:49:7b:21:cf:a5:50:bb:f0:c9:10:63:97:50:
         f6:5c:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:33:00 2026 by rpki-client