Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fa1dd27-05ba-3ce5-9800-24e264fda965.roa
File:                     0fa1dd27-05ba-3ce5-9800-24e264fda965.roa (raw, json)
Hash identifier:          okurs4HHsza986hN2DTtvDpV0ETnudr/fEtDy3KBims=
Subject key identifier:   65:59:DE:E8:88:C4:7C:2F:04:E0:7A:C2:1D:09:92:0A:D6:23:95:2D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C27EB77B96EB2918A2E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fa1dd27-05ba-3ce5-9800-24e264fda965.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.21.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:27:eb:77:b9:6e:b2:91:8a:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=7b5ca1c7-1233-45c2-b80e-50b86ee7db78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:71:93:ac:a1:a4:d5:22:1b:4a:5f:44:f9:
                    95:1c:2f:30:6e:9e:b3:68:94:23:7c:46:03:03:5d:
                    09:6e:d4:0d:d9:97:a4:ad:d9:35:39:00:d1:11:cc:
                    b5:62:a8:a0:de:98:f8:fe:a8:9f:68:d5:8d:cb:dc:
                    f5:a7:cc:7d:38:db:69:fe:96:cc:ce:f4:e8:b3:f0:
                    a6:f6:72:1d:1b:f3:a2:f4:b3:17:b5:03:3c:a0:71:
                    80:c8:f5:fa:10:f2:64:ec:45:2a:ef:0f:60:ef:36:
                    44:15:19:aa:c9:1d:c0:47:a1:86:00:00:dd:48:d5:
                    99:a6:43:84:1a:4f:05:c7:ae:12:52:74:57:ef:91:
                    48:45:8e:cf:54:52:f0:ee:4c:09:3f:0e:0d:6a:70:
                    c8:35:e5:27:10:a3:ff:ef:73:64:5f:6e:f3:ec:86:
                    63:43:79:f6:59:d5:43:8e:be:2a:01:d3:e9:75:56:
                    37:2b:a6:2e:69:44:f3:93:f0:18:bc:fa:11:68:6f:
                    49:77:ee:dd:5a:f7:60:45:67:6e:03:41:67:08:0b:
                    7e:ca:53:fb:78:8f:f4:d5:b7:70:21:b5:60:9e:d7:
                    a4:8f:61:ae:4c:c0:e7:47:49:a1:d1:17:f7:8b:bd:
                    7c:df:ef:c1:af:ab:93:19:f0:af:b5:5a:6a:26:64:
                    37:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:59:DE:E8:88:C4:7C:2F:04:E0:7A:C2:1D:09:92:0A:D6:23:95:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fa1dd27-05ba-3ce5-9800-24e264fda965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d9:39:fb:0f:8c:62:f7:c6:ba:25:80:6d:7a:cd:58:d9:04:
         99:02:db:bc:e6:51:ef:0b:c4:b5:2f:24:a1:f1:63:78:3d:c1:
         72:ff:13:e3:f7:a9:0b:c6:d6:dc:6e:5b:9a:44:9d:e9:bd:45:
         27:ef:c6:6f:6c:88:89:5b:79:8a:c5:c9:72:60:34:38:36:04:
         5a:b8:e4:78:f1:21:b8:09:fb:99:85:82:b9:29:1a:48:bb:ad:
         cd:32:c6:31:6c:f8:ce:11:18:9b:e9:f3:31:be:eb:6a:bd:1b:
         b0:b6:d1:0b:4e:a3:8f:d2:e1:79:df:0e:35:ce:4b:93:75:2b:
         a7:22:1d:2e:be:77:4b:99:19:d3:ad:8a:fa:f1:68:ac:69:87:
         e2:6e:91:be:04:e3:fc:91:4b:ce:94:ad:01:9a:3c:19:22:8e:
         72:b4:18:78:c9:9e:37:d4:4e:5e:dc:81:14:8a:99:60:3f:d7:
         a4:64:2e:23:0b:b3:15:4f:10:bc:55:3f:41:b7:48:69:d9:8e:
         a9:80:ab:b5:0e:44:17:4b:d0:e3:c3:88:bc:9e:d3:b4:97:10:
         3f:af:dd:67:b0:e9:c6:60:29:e5:96:6b:d0:37:2c:2a:64:91:
         49:20:7a:71:5b:2c:2d:70:7d:2d:25:39:74:f4:0c:40:41:f4:
         b5:14:c8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:24:02 2026 by rpki-client