Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fe02132-0b80-36a6-a779-6399e4ac9fbb.roa
File:                     0fe02132-0b80-36a6-a779-6399e4ac9fbb.roa (raw, json)
Hash identifier:          D6qsxwfmZlbi25aYG/ABQ0s4Unc3zRyRY00Jfd4pHoA=
Subject key identifier:   76:BC:18:A2:68:1F:3B:85:4A:E2:F0:3F:0B:E0:3A:D0:19:08:A7:F2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79FC0EE264C8B0C6BB2EB00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fe02132-0b80-36a6-a779-6399e4ac9fbb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        172.242.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:c0:ee:26:4c:8b:0c:6b:b2:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a7af7f5c-7781-457c-ba0c-5a16bbfb11b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:7d:4b:c2:90:9a:da:03:8d:a5:24:88:2c:
                    37:64:1c:28:c3:68:11:c7:21:fe:9d:d9:2f:83:d4:
                    38:f4:0d:69:0b:7a:ff:26:61:ce:ee:fd:18:0b:7f:
                    cb:6e:f2:f4:0f:dc:ba:4f:ab:e4:44:fb:37:e1:0b:
                    ed:01:25:96:63:2c:96:75:d9:8d:07:08:c5:36:a8:
                    98:2a:e0:cb:7d:09:0d:04:7c:08:b4:52:9d:34:f7:
                    bd:e8:57:62:ea:f5:93:76:d8:da:9a:7a:a2:45:24:
                    4a:f3:15:83:0e:89:74:37:de:80:40:1b:6f:32:72:
                    f0:6b:93:71:ee:40:fa:e0:22:19:20:03:2a:6d:58:
                    62:07:19:f9:f6:2c:d3:3f:35:be:4b:ea:cc:93:e9:
                    d9:c0:74:9e:99:66:d4:6a:dd:e2:1e:db:a3:f6:40:
                    c0:3e:2e:14:df:1e:9e:f1:1d:f1:da:8e:a2:29:d4:
                    d4:ed:f0:81:87:e3:e0:bc:44:ff:d2:3e:2c:d0:d9:
                    46:bf:dd:a6:1c:94:fc:3e:43:5f:65:16:04:eb:a8:
                    cc:14:bb:3c:55:40:29:89:3d:ac:bf:68:0a:1d:d2:
                    54:1c:03:ab:d7:2e:05:19:bb:64:9b:ff:e0:48:15:
                    52:d7:73:5f:67:df:6e:85:f6:9f:89:60:70:36:50:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BC:18:A2:68:1F:3B:85:4A:E2:F0:3F:0B:E0:3A:D0:19:08:A7:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fe02132-0b80-36a6-a779-6399e4ac9fbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:f0:b2:0f:34:db:8b:4f:62:89:f7:36:0f:22:ca:c4:0f:bf:
         84:d8:96:9e:06:48:6a:ff:e3:3b:6d:45:bd:a1:cd:d8:b2:6a:
         78:28:dc:32:40:b1:15:c1:a3:b4:bb:ee:01:e0:c7:4e:2e:66:
         c4:7e:76:8f:f1:da:bd:ce:83:86:7d:39:fe:e7:17:2b:1c:f4:
         88:fe:f7:45:d5:f1:64:4d:b4:35:2c:e2:00:8d:fd:f5:75:58:
         44:d7:00:2f:59:40:46:63:8f:38:56:9b:a2:58:f3:33:c6:38:
         55:2a:65:40:ee:48:fb:0d:28:03:75:33:e4:42:09:70:3d:95:
         66:1f:f4:c0:7a:dc:1c:07:97:bc:83:9b:62:7c:f4:ef:d0:0c:
         b3:ad:8a:f8:ce:6d:82:90:f3:0d:02:f7:02:bc:43:ab:f6:43:
         16:7f:89:d5:64:e5:68:20:b2:47:0f:be:37:85:3e:e4:9b:b5:
         c9:42:78:09:8f:d2:fd:42:dd:a6:fd:66:66:de:55:c5:ec:b4:
         65:b7:b8:f4:de:2c:f4:d5:c4:74:aa:20:90:06:28:5e:7f:7f:
         71:d1:98:ab:bc:ab:6e:20:63:7c:0f:44:21:e0:d9:e5:44:1f:
         22:48:44:1d:b3:05:53:9b:0f:3c:60:22:37:07:65:50:02:7b:
         35:9f:e7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:39:23 2026 by rpki-client