Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e372d79d-f0b0-3e91-9265-b783bfc49ae7.roa
File:                     e372d79d-f0b0-3e91-9265-b783bfc49ae7.roa (raw, json)
Hash identifier:          jgFUBP82bb7fafwxCh5OZPGCydh/Rv0o8621lu/tT9w=
Subject key identifier:   8E:73:2C:F7:8C:B4:DB:05:34:DE:7D:01:30:C3:AF:06:8B:CA:DA:E8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C35CD7B4005F97090D180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e372d79d-f0b0-3e91-9265-b783bfc49ae7.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        198.45.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:35:cd:7b:40:05:f9:70:90:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=77efd3da-ec9c-4f14-8684-d4056cb3e285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:ab:b4:fe:ec:73:12:7e:d6:9f:eb:dd:b9:
                    07:a6:df:a4:8e:b5:bf:2a:8d:9f:1b:bd:25:13:a4:
                    40:ef:b6:f7:4d:0c:6e:9f:f6:53:a2:27:e9:b5:8d:
                    c3:21:ad:3b:8f:4d:56:7d:8d:d6:1c:a9:3f:2f:93:
                    00:e9:eb:fa:42:af:5d:36:34:b3:10:c4:34:27:24:
                    c3:b6:19:4f:77:94:82:15:75:c8:ee:cf:7e:9b:36:
                    bc:ca:d0:a3:47:d7:43:5c:6a:ad:32:cf:0a:09:38:
                    46:d5:b1:59:84:91:89:da:f6:23:0e:8a:d9:e9:f3:
                    32:cc:63:28:0e:69:ae:a6:f2:4c:a1:32:ed:41:81:
                    4d:ed:ce:6e:19:e6:b8:a5:21:83:65:6b:c8:c4:b1:
                    e5:f8:85:96:4d:b5:31:89:94:7f:63:7e:81:3d:b5:
                    63:33:98:29:81:1a:b2:5f:b3:cd:a2:a3:8d:52:12:
                    f5:91:1f:30:a9:92:f8:f1:21:82:22:15:18:3c:1d:
                    86:b7:41:81:f1:dd:bc:7e:a6:87:27:d2:48:27:03:
                    35:11:0a:04:d0:a7:f6:4f:22:ac:e2:7b:94:92:50:
                    56:76:48:b3:81:56:ad:38:80:aa:31:ed:99:81:f0:
                    b3:a5:dc:45:75:57:8c:44:a2:b2:30:1a:01:d2:99:
                    84:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:73:2C:F7:8C:B4:DB:05:34:DE:7D:01:30:C3:AF:06:8B:CA:DA:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e372d79d-f0b0-3e91-9265-b783bfc49ae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:6d:e9:5e:0e:87:00:83:0c:1c:76:76:f9:e8:36:88:bb:da:
         eb:50:62:f1:6d:e8:08:c4:08:b1:dd:e1:78:34:2e:36:ed:69:
         d0:8e:be:bb:06:2b:fb:61:70:59:15:77:64:c6:be:bf:02:e6:
         bf:ee:d1:c9:dc:0c:a1:7e:90:99:01:0e:c9:7a:b7:f1:01:50:
         3f:93:d2:13:75:44:05:0c:8b:9b:35:3b:b0:89:bc:a1:41:f4:
         63:06:f0:62:a0:92:bf:53:9f:e2:c2:de:91:59:a3:27:d3:ee:
         56:d0:fb:f3:3b:44:04:f7:52:56:3d:83:12:dc:93:9a:75:2c:
         d5:2e:63:2c:5d:30:25:ef:dc:8b:11:b0:be:f5:5c:ac:0a:1c:
         21:da:d7:20:3e:2b:c7:70:c0:ea:1f:b1:1d:1f:34:1d:31:e9:
         d8:bf:18:93:02:cc:68:82:44:cc:7f:48:c2:9d:ec:be:88:cd:
         3b:27:ed:0c:11:96:43:89:1a:be:4d:18:e7:b8:93:5f:00:13:
         a8:3a:7b:13:65:a6:e2:b2:9e:e2:f3:a1:97:35:31:cd:25:b1:
         19:29:79:94:1c:1f:d6:9c:5b:85:6a:86:83:fc:12:a3:7e:e8:
         f2:89:6b:f6:da:34:74:77:0b:9d:63:7d:69:7c:93:7a:a3:2e:
         2b:f0:0d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:35:47 2026 by rpki-client