Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ece7effd-bbad-3bbc-951d-a66499696a77.roa
File:                     ece7effd-bbad-3bbc-951d-a66499696a77.roa (raw, json)
Hash identifier:          fcofsmegJ7krNgRXW/EayfA+Cy0IyL2om348Pz9KnF8=
Subject key identifier:   A4:7A:54:44:6E:17:56:BD:19:C9:9C:0A:10:40:3B:8C:30:30:78:78
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E73E5DFB7131CE0687620
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ece7effd-bbad-3bbc-951d-a66499696a77.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.63.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:73:e5:df:b7:13:1c:e0:68:76:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c9b843e8-bd3d-4a40-81b0-2997e34d6094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f3:ad:b4:eb:6a:dc:bf:17:d8:64:86:52:d6:
                    f6:e2:b7:bb:fb:ec:72:36:66:c4:98:68:6f:07:21:
                    34:53:a0:3f:26:79:da:28:95:c5:ab:15:05:99:e9:
                    19:df:9b:9f:d2:a4:fb:34:f9:63:b7:8b:57:0d:24:
                    2c:2e:32:6d:93:4e:75:5e:10:0a:57:97:79:11:c2:
                    75:8e:d0:24:14:f2:5a:76:05:21:2f:4c:37:8d:5b:
                    0b:99:91:00:a5:62:c3:53:ec:3a:10:0e:c8:17:c0:
                    a4:04:6b:8d:3e:05:28:93:ff:d6:16:b3:7f:ac:5c:
                    b0:40:b5:09:91:14:03:89:fb:26:61:6f:8b:47:73:
                    14:a1:a8:99:81:ec:7d:b2:3e:47:d4:a8:dd:8b:f0:
                    b3:be:ed:27:dd:dc:90:c8:14:9d:cd:2f:58:0b:7e:
                    4c:e1:23:c4:e3:67:e5:50:ad:91:52:59:13:47:ac:
                    90:2e:83:40:61:77:51:3e:53:ee:54:3a:19:6c:77:
                    64:83:9e:56:0e:b7:d8:2f:4e:3c:84:31:9c:66:eb:
                    f2:15:89:1c:e7:b0:6b:08:73:52:be:c2:07:70:c0:
                    d6:7f:9c:85:cf:31:a7:27:aa:2a:e8:e8:cf:cc:8a:
                    05:19:f8:b9:1a:9c:4a:f1:31:1e:14:18:7f:00:f8:
                    4d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7A:54:44:6E:17:56:BD:19:C9:9C:0A:10:40:3B:8C:30:30:78:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ece7effd-bbad-3bbc-951d-a66499696a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:cf:46:ac:26:3e:ff:b3:03:7f:5f:23:dc:85:6c:64:28:47:
         cf:eb:d1:63:58:db:eb:27:0d:2b:7e:48:ec:28:5f:d5:2b:bc:
         d3:62:61:27:30:9d:5c:85:03:8d:92:9e:7a:a3:ef:4d:f4:97:
         4f:1b:8c:d9:41:d9:69:0a:28:14:07:1b:eb:21:78:3b:ba:30:
         8f:20:c5:36:40:d8:bf:de:32:37:a6:d9:af:ce:75:9e:70:59:
         75:52:1b:34:c3:3f:17:8d:06:4b:30:56:08:88:de:f8:9d:c0:
         83:41:56:ed:ae:73:1a:eb:68:b0:9d:68:d2:db:12:90:b8:91:
         53:0f:8a:6f:47:5f:b3:01:bb:29:db:df:a5:20:ef:a7:bd:15:
         d8:b3:1d:f9:ae:2f:59:c5:e3:4c:34:21:3b:67:0c:0c:bf:41:
         40:38:ab:c9:c4:ff:d1:29:d2:4b:ca:66:02:0f:f0:f5:ea:69:
         e4:75:0d:01:65:ac:c2:fc:62:aa:dc:87:d6:92:0c:ef:ae:4c:
         f8:2d:08:74:74:13:26:d4:4c:f0:cd:21:1c:de:e8:1a:fb:02:
         8f:14:ab:75:43:4e:cf:e2:0c:7b:d2:f1:8f:76:20:72:ae:ba:
         5f:5c:9b:64:1e:ce:ed:af:0d:26:8e:c7:03:f8:2e:7b:ba:15:
         17:be:d7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:50:38 2026 by rpki-client