Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fcfb374d-198c-38c6-82df-442b0db62f9e.roa
File:                     fcfb374d-198c-38c6-82df-442b0db62f9e.roa (raw, json)
Hash identifier:          byUU/7itvqrr6Syro9Mqe25uGffe66D/tTo9zY2Ab9Y=
Subject key identifier:   33:32:85:32:A2:3C:17:D6:B2:67:47:86:04:EF:CA:2B:2D:4C:D4:DD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E3B051427DE67AF188A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fcfb374d-198c-38c6-82df-442b0db62f9e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.20.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:3b:05:14:27:de:67:af:18:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3d5c3d17-34dd-4ac8-b8e0-691c3ae3c4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:73:c4:3c:02:6a:1a:e9:e9:33:9b:30:71:d1:
                    f3:b3:ff:5e:f2:d3:68:b5:17:d1:8e:0d:bf:3a:ae:
                    b9:97:d4:51:62:07:82:5f:e2:f7:f9:6a:90:31:f6:
                    27:53:47:3d:d4:c7:4e:8e:3d:09:01:85:d9:a4:1a:
                    88:67:c7:cb:d4:ba:a1:ee:e8:a9:05:ca:5a:d6:69:
                    b6:88:82:4c:9a:be:b7:9c:30:01:2d:42:a3:0d:30:
                    ad:80:b4:63:10:84:7f:82:12:4c:0c:12:0b:3e:2a:
                    8f:35:65:c1:4a:91:fa:63:53:31:9a:0d:96:f6:47:
                    a8:1d:a0:1e:7e:20:95:d0:d4:96:cf:fe:ff:65:0f:
                    ac:a9:55:5c:73:cc:91:da:57:93:e0:8e:00:91:a9:
                    7d:f1:31:ae:fa:6d:30:65:ed:36:0f:41:64:78:b7:
                    f7:0f:ef:72:47:5f:c3:14:69:32:8a:54:1f:7a:b7:
                    af:1c:e4:e2:53:32:f5:21:eb:5a:08:a3:b5:56:bf:
                    97:4a:82:41:5d:27:33:2e:1e:19:c2:7a:08:d5:66:
                    58:bc:9e:5f:c8:74:42:ad:5c:c3:3b:3f:43:0b:85:
                    c9:0d:0b:44:01:87:8b:c5:ef:9c:01:a4:23:b1:f0:
                    9b:d9:21:22:d3:fb:c7:0d:75:52:73:a8:a7:2e:6a:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:32:85:32:A2:3C:17:D6:B2:67:47:86:04:EF:CA:2B:2D:4C:D4:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fcfb374d-198c-38c6-82df-442b0db62f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e5:ce:a1:86:94:6b:0c:81:a0:b2:83:2f:e9:87:8e:dd:b4:
         08:69:ba:e6:31:54:40:cb:0b:34:de:d5:b3:7a:bd:0d:fd:f7:
         00:3b:45:a0:e8:26:15:be:04:a5:4a:c2:97:e4:8b:11:f4:1f:
         bf:ab:8d:81:50:1b:ed:6d:b2:c3:30:0c:f9:4d:b3:df:32:62:
         96:c9:ed:10:6b:7e:9e:23:e5:06:94:4d:6b:54:d3:3f:20:95:
         95:36:22:c1:ea:8a:c6:08:3a:6d:9e:cc:13:11:9f:a3:de:a4:
         56:a7:69:6a:eb:18:cc:f4:3f:fd:42:d5:09:42:0e:ee:a3:19:
         14:f5:68:b3:36:60:79:64:67:8c:e1:e8:f1:de:ed:bb:d6:62:
         f9:fc:47:52:62:64:fc:f9:a9:4a:32:e3:92:0e:73:5b:60:88:
         e3:18:97:97:4d:0f:7e:1f:a3:8a:bd:e5:15:f8:d4:02:30:de:
         7a:cd:4d:f5:49:bb:7a:f7:e5:61:48:f7:61:5e:a8:c3:c7:63:
         b5:b9:9f:0c:3f:b4:49:0b:6e:56:93:4b:9d:b5:b6:63:67:86:
         75:80:0d:fe:ee:eb:ed:1c:99:0f:53:ef:35:f1:67:d5:55:ec:
         31:38:f1:5f:3d:fa:67:6b:06:18:e4:53:ab:4c:7d:c6:85:e8:
         25:1a:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:17 2026 by rpki-client