Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f28b0d3c-b2d9-35b9-9e6c-fb49647404ac.roa
File:                     f28b0d3c-b2d9-35b9-9e6c-fb49647404ac.roa (raw, json)
Hash identifier:          vFLhFaFKpF6aBwjBz6ioHf+Q+dzZMYslsQ092U6+h2o=
Subject key identifier:   1A:35:CD:EE:73:42:2C:CE:F2:58:B8:3A:06:38:51:55:26:74:EE:F7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79FE2C9C4988F21DB17CAA0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f28b0d3c-b2d9-35b9-9e6c-fb49647404ac.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.20.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:e2:c9:c4:98:8f:21:db:17:ca:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fd67342e-0ee8-42f5-8fb0-1b8683ffc53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:56:27:8b:49:36:90:b0:b6:8b:65:d4:3a:8b:
                    d8:95:76:75:db:19:cd:2c:84:b9:b8:00:71:a4:e4:
                    99:64:39:5b:66:96:aa:4d:e9:98:3a:e4:40:e2:15:
                    9e:ea:35:8c:9a:74:c9:f9:ba:9e:6a:e3:d2:2b:17:
                    f1:fb:53:bc:ed:15:05:68:35:55:a8:63:16:24:dc:
                    5c:60:4e:57:4d:35:46:8d:f4:7f:70:e6:34:f4:f9:
                    de:cc:31:ec:73:51:b1:da:a5:9c:d7:f9:64:9c:92:
                    c5:f5:f4:cb:c7:04:fb:14:9c:9d:da:b7:b5:35:7a:
                    68:93:78:13:1b:e3:80:82:6d:01:27:13:b2:b2:7b:
                    3d:31:19:ff:e5:ae:37:4e:70:bc:81:9a:bc:e6:f3:
                    62:e7:af:77:64:aa:63:5d:48:f5:2d:f8:bc:d9:a6:
                    7b:b9:e0:48:b6:0a:70:06:ff:c1:2f:0c:6d:3f:c2:
                    31:c0:f8:6d:92:3e:b3:db:c1:12:8a:06:fb:bf:0a:
                    08:d2:be:53:fd:7f:6e:23:52:5b:0f:e1:24:86:f9:
                    e7:47:c9:82:02:7f:88:e8:32:62:c3:84:88:c9:45:
                    95:3d:e0:37:bb:e9:76:f8:85:c7:bd:a8:86:37:b5:
                    14:0a:9e:6e:ed:4f:63:d3:11:b9:79:89:c0:4f:ad:
                    13:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:35:CD:EE:73:42:2C:CE:F2:58:B8:3A:06:38:51:55:26:74:EE:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f28b0d3c-b2d9-35b9-9e6c-fb49647404ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:66:f3:86:bb:d0:e6:93:14:e6:5a:99:01:56:02:aa:e1:b5:
         c7:6a:7c:97:ab:d9:7f:da:b5:5e:41:1f:dd:4d:0b:b4:f2:5a:
         00:70:50:f3:ac:c2:cf:a8:cf:fc:bf:00:e9:10:19:3f:9f:47:
         8b:b6:2f:fd:b6:a1:a0:4d:9c:6b:d3:ab:d7:8d:51:62:40:ab:
         b4:a1:87:92:6f:9b:ee:b6:ef:74:ab:7b:56:d6:62:3e:30:ed:
         cb:3a:6d:54:a8:bc:17:2e:74:ac:37:ec:54:51:e5:13:66:ab:
         c7:9e:12:c8:7b:f7:38:87:4e:b1:22:4c:da:64:8d:ab:34:e9:
         5c:5c:bc:4f:51:a7:37:3f:0e:67:a3:ac:cc:67:1a:59:d7:61:
         1d:6d:af:90:b7:5f:f1:c5:53:c9:9c:5a:82:13:2b:84:1f:58:
         b7:35:62:8e:ba:49:24:b7:c5:74:bf:a6:04:15:ae:17:83:dc:
         5f:07:4a:2e:a3:0f:d1:7f:ff:7e:cd:24:a5:7f:77:b3:c4:ee:
         91:ca:d3:65:a8:83:50:ed:b6:a8:fb:c1:6b:6d:e2:fe:44:87:
         13:fb:7f:7c:1e:d2:21:e4:fd:8d:6b:f9:9b:3e:53:0b:d4:87:
         7a:3a:7c:fc:15:06:0e:5b:95:04:9f:c5:39:3e:85:9f:23:b2:
         03:43:b1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:57:23 2026 by rpki-client