Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3e58f66-9820-3c7a-bc33-4bf86da69d65.roa
File:                     e3e58f66-9820-3c7a-bc33-4bf86da69d65.roa (raw, json)
Hash identifier:          JzzcwM3pRgDVASw6BekcTjXqyuV3bouZKc+Jg2YXXc8=
Subject key identifier:   01:41:69:6E:9D:27:BF:75:AB:12:11:8C:95:DF:F3:7A:88:63:BD:39
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983FE22043C6B72E372D8E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3e58f66-9820-3c7a-bc33-4bf86da69d65.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        184.20.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:fe:22:04:3c:6b:72:e3:72:d8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b259c216-2bf5-4582-af3c-299fb77e3420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:42:f4:12:e3:00:90:7e:19:76:37:58:72:e4:
                    5b:39:6a:c0:d3:9b:34:8f:63:8a:ac:bb:fc:20:c2:
                    f0:5b:3d:dc:4a:d4:30:ea:fd:44:c8:4b:d3:7e:eb:
                    b2:97:04:ab:cb:98:60:64:88:62:b6:dc:4e:22:5b:
                    20:95:5c:e1:f5:e1:c0:ff:3c:04:f7:e6:dc:7b:f1:
                    14:5b:90:d8:b5:79:0c:34:fd:c9:bf:dd:3c:99:83:
                    48:d6:b1:6d:8c:e6:c5:93:2e:ce:21:52:5b:01:c8:
                    02:a3:79:15:78:a8:07:44:55:9f:fe:02:31:52:5e:
                    b7:b1:5c:9a:b5:e8:06:65:d5:ac:40:20:78:c7:85:
                    43:18:1c:25:e1:c3:15:45:a2:30:dc:8e:20:b3:76:
                    9b:f6:d6:59:54:d2:55:6d:87:ee:20:5c:a9:87:84:
                    3d:d4:b6:96:4f:6e:b4:c0:96:b4:4f:d3:af:21:99:
                    ee:89:9d:ce:0c:1c:39:04:2b:e1:aa:b8:9a:3c:63:
                    33:be:e0:2a:16:1a:be:89:5e:5d:82:11:0c:2e:95:
                    78:a5:83:62:89:2b:b0:6d:15:c2:e9:62:3f:b4:9e:
                    60:0f:75:d5:dd:9d:8b:b4:59:01:d1:90:2a:a6:d2:
                    cc:64:d1:e8:a2:dc:23:96:ec:2f:8c:7d:6e:64:cc:
                    fc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:41:69:6E:9D:27:BF:75:AB:12:11:8C:95:DF:F3:7A:88:63:BD:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e3e58f66-9820-3c7a-bc33-4bf86da69d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:1a:00:ea:84:4c:9a:95:6b:36:a7:ef:c1:39:f2:2a:b7:f9:
         50:62:64:25:d5:36:d6:45:1d:f0:ab:fd:8e:ff:69:db:b7:40:
         33:75:61:94:c4:e6:7f:67:74:87:1a:83:de:a9:17:30:29:11:
         8b:19:38:c7:71:28:a6:f2:77:ba:0a:32:de:46:b8:cf:cc:39:
         07:39:fa:1a:af:c3:79:f7:d2:ad:f7:77:d2:63:dc:e6:22:8a:
         b2:3f:a8:85:7d:f2:9c:48:31:d5:88:d3:1f:06:54:5e:19:50:
         64:8e:82:ce:65:9c:7e:ee:b1:e5:c2:5e:62:99:a7:66:cb:85:
         9c:91:10:78:8d:01:96:cf:38:e2:43:52:4f:19:0b:4f:7c:ff:
         6f:32:80:a2:d3:4b:69:06:ab:07:d8:90:2c:2e:c2:88:c1:1a:
         f8:1e:97:9b:67:af:22:24:c7:14:b0:e3:42:e2:8e:5e:82:8a:
         77:1d:a4:ec:fc:25:1b:21:76:f1:a8:9b:70:ea:c0:b1:ee:61:
         c4:ad:75:84:5f:b1:43:a4:d3:b6:00:a3:49:bb:22:20:83:09:
         4c:d7:31:da:13:3e:6b:c4:fa:f5:bc:96:43:7f:1d:33:bf:39:
         01:cb:a3:27:98:29:6c:4f:5a:b4:9f:39:28:ef:05:c5:9b:94:
         e7:32:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:13:16 2026 by rpki-client