Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04d19465-8716-36e7-9064-d31117e6b001.roa
File:                     04d19465-8716-36e7-9064-d31117e6b001.roa (raw, json)
Hash identifier:          K7JccCWz1TuTQj95I2M+BRKd2pQPV/nKSVY3ziClTg4=
Subject key identifier:   DE:E0:B2:79:B0:63:24:06:65:54:5A:82:FA:1F:1C:9D:E5:01:4A:55
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B95DAF51810B91F99F800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04d19465-8716-36e7-9064-d31117e6b001.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        172.242.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:95:da:f5:18:10:b9:1f:99:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=47b170f9-dbce-406a-9c17-70cdeab5bd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:4a:8a:a3:d4:10:fe:02:b6:0a:93:cd:d4:
                    4c:59:4e:10:c8:bc:cf:16:e9:76:ee:b5:de:b5:1d:
                    8f:b8:18:e4:be:db:7e:46:c7:aa:f8:2b:ee:ec:c0:
                    57:d7:98:2e:24:58:80:07:ed:e5:f1:82:94:e1:5d:
                    32:06:e7:27:08:78:ef:5c:7d:88:98:26:88:0a:af:
                    e9:5f:12:03:dd:12:1f:13:7a:2c:f0:db:55:12:67:
                    21:77:64:02:60:90:4b:48:f2:d0:3c:06:5e:ef:5c:
                    5d:e7:87:62:4c:96:85:28:13:f5:11:a2:2e:93:da:
                    87:6f:84:31:7d:04:62:8e:e7:c4:ec:93:77:84:17:
                    b6:de:40:25:f8:b4:5a:10:a8:68:3b:f6:79:42:f5:
                    62:bc:67:5a:d8:10:77:89:2d:4f:88:7f:6e:84:c8:
                    b2:2e:60:46:86:f9:0e:bd:04:c9:97:d7:f1:e9:0e:
                    31:b6:63:85:f2:a9:d0:a2:ec:4c:2e:45:2f:38:20:
                    65:5d:b4:0d:ca:b1:bd:91:82:98:49:ab:b7:ab:aa:
                    78:20:91:e0:3a:a8:cc:d6:fd:48:74:ac:68:e6:12:
                    ba:d9:48:98:b3:80:ba:9f:09:89:c2:63:7e:df:7c:
                    6e:df:cb:20:af:89:48:1e:84:28:15:2f:4c:a8:ca:
                    89:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E0:B2:79:B0:63:24:06:65:54:5A:82:FA:1F:1C:9D:E5:01:4A:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04d19465-8716-36e7-9064-d31117e6b001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f3:19:22:14:a2:51:d2:ab:f2:4b:a4:88:86:21:d6:40:4f:
         93:78:93:ea:48:50:d6:19:55:71:8a:5b:80:fb:ba:a8:8b:a4:
         a2:7c:4e:48:4c:19:b5:b9:e9:d0:8e:81:10:f4:7e:5f:14:7b:
         c3:bc:d3:c7:f4:e1:05:44:ff:8b:6c:df:4b:54:00:8d:b2:a6:
         94:8e:87:d8:62:29:b3:8b:ed:5b:bc:f8:87:7d:7b:36:cf:b1:
         02:7f:24:f7:f1:69:75:94:b0:d3:78:fb:f6:27:33:fb:eb:a3:
         7b:ca:f1:62:b6:6c:28:f8:88:70:77:43:30:75:e6:7b:9b:a1:
         23:f4:81:b4:a0:c9:91:ff:42:cb:9f:d2:e2:92:54:82:e4:0c:
         5a:40:bb:7d:77:58:05:c0:88:e1:62:d4:22:3b:c0:ca:4e:c9:
         03:7e:c3:8c:03:e5:71:c7:0c:72:ef:06:4a:61:45:04:51:7e:
         8a:fc:c9:64:32:09:75:95:17:a6:2b:29:d1:14:cc:43:d6:ca:
         da:f9:4f:5f:79:e7:13:7a:a6:00:65:1b:a0:08:c8:f6:4b:28:
         7b:9d:1f:64:82:65:9b:63:c0:c1:ea:39:06:97:4e:9a:f7:05:
         76:a6:88:37:81:92:b0:83:fd:c0:4c:ad:10:18:b4:da:0f:cc:
         0e:34:dc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:27:23 2026 by rpki-client