Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/06900718-2f5e-309f-a9c9-4e9b30c0648a.roa
File:                     06900718-2f5e-309f-a9c9-4e9b30c0648a.roa (raw, json)
Hash identifier:          7TGzKkFopxO23qo5KLBLMpgZzRaZnAD9O6bOyUQv+O8=
Subject key identifier:   F0:E0:0E:1E:1B:D8:9F:1D:46:1E:C9:47:25:2D:3E:CA:F4:FB:80:E0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C1D2539122FC87B0A6860
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/06900718-2f5e-309f-a9c9-4e9b30c0648a.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        172.243.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:1d:25:39:12:2f:c8:7b:0a:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=a5fa0634-4a43-48d8-86ae-56b6a82b8062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:9b:2a:ac:3b:e5:64:85:0a:0d:b1:af:bb:
                    1f:cb:7e:8e:91:d9:e4:c0:c3:6b:c1:03:34:b3:56:
                    49:30:48:6a:7a:2e:8e:53:a1:0f:ed:c6:e8:54:45:
                    b2:73:d9:74:cd:77:8c:c9:5b:fd:85:c4:4c:4d:1c:
                    f8:38:7a:ad:7e:67:65:58:f6:49:cc:5b:8d:f5:b1:
                    0a:44:c8:1c:ff:dc:02:2d:82:73:fe:a2:3a:9b:55:
                    b2:9f:65:2f:28:e9:7d:81:c5:72:33:f0:c3:05:99:
                    db:b9:a0:00:34:0a:17:36:81:b8:4a:32:66:83:97:
                    2a:0c:10:d6:4f:4f:c1:55:33:76:43:bc:c1:82:07:
                    6a:8b:ae:60:d7:7a:a3:0f:9b:14:f9:10:de:c4:51:
                    62:a5:5a:fd:7e:84:5c:a2:41:21:3e:f9:57:8d:47:
                    2b:c2:38:54:a4:97:2f:a7:2f:bf:53:62:d5:04:a5:
                    7d:36:70:b9:85:68:40:0a:9f:44:98:f2:d0:61:5f:
                    76:2c:cc:aa:b1:e3:29:4b:28:a4:c7:e7:2f:0d:4e:
                    1e:cd:c6:dd:d9:da:9b:d5:03:05:52:ee:6b:af:c1:
                    f1:95:92:d6:ef:41:47:5a:2f:45:0a:1b:8b:68:a1:
                    31:2b:0e:c6:04:3c:0c:0c:56:5a:c7:59:70:b1:f2:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E0:0E:1E:1B:D8:9F:1D:46:1E:C9:47:25:2D:3E:CA:F4:FB:80:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/06900718-2f5e-309f-a9c9-4e9b30c0648a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:90:d1:a6:8f:a8:93:fa:59:7c:3d:86:78:e9:60:91:ec:6f:
         20:54:ee:39:f7:01:ca:5d:43:98:8a:7b:16:29:01:f1:72:fa:
         fc:ed:c1:20:41:d9:ac:49:fa:36:35:d9:dd:94:88:61:07:2b:
         3f:6d:57:c2:ba:27:0e:43:74:56:13:36:58:93:b6:84:d7:be:
         32:df:ed:ff:20:7b:c1:2f:32:ce:45:93:d8:a2:90:b5:55:d1:
         79:5b:97:45:25:83:24:1d:d5:90:e3:9f:16:c2:b1:08:19:63:
         6b:6d:a6:cf:73:f8:38:fc:e7:94:37:da:b3:43:4f:77:26:b5:
         4c:b0:05:51:70:9d:91:92:40:33:20:b9:fa:64:91:94:aa:3c:
         0b:21:7a:8e:c9:12:31:52:7b:6f:96:c5:9d:03:19:c4:d8:59:
         2e:55:a1:2d:21:91:3c:93:54:d4:b1:35:77:a2:ea:d0:ff:88:
         94:56:13:fe:ad:34:6d:e6:09:3f:33:3c:06:65:ef:52:68:ec:
         49:4e:f5:49:63:d5:fc:d7:fe:c4:56:a8:d8:77:dc:5c:50:59:
         ea:34:bd:0e:cc:a3:6d:14:36:b3:bc:b5:2e:45:c8:f0:38:09:
         9c:2f:54:39:98:c5:52:36:0f:9c:e6:30:f5:1f:e2:9e:46:32:
         85:12:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:22:47 2026 by rpki-client