Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cd72c28-4083-32c2-99e5-9a052b9f2d26.roa
File:                     1cd72c28-4083-32c2-99e5-9a052b9f2d26.roa (raw, json)
Hash identifier:          eVzdGEYZXtwopMaSu3oAeXVRiFjJ1g2x7nTb5DqHO6E=
Subject key identifier:   47:9A:AF:DE:94:33:36:3B:45:1B:40:5E:4E:03:11:31:F4:C6:79:5B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BACF8817FD1B9C7B49EC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cd72c28-4083-32c2-99e5-9a052b9f2d26.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.62.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:ac:f8:81:7f:d1:b9:c7:b4:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=4589019a-4363-4221-ac97-8b51d6d69bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e7:7b:a0:ad:6a:99:fc:c1:2f:78:cb:e0:72:
                    48:cc:41:4d:14:34:1d:a2:27:d9:3e:b2:68:3a:00:
                    13:6f:24:36:11:2f:d6:4b:48:b5:a4:47:30:d5:d5:
                    a7:49:06:b5:be:59:e1:08:ce:e8:48:0e:7f:1d:d2:
                    93:ac:08:50:b6:8a:c9:c6:1d:9e:5c:e1:f1:84:d1:
                    74:31:98:d4:60:d4:04:f4:67:b5:a6:7e:93:9e:b8:
                    a3:12:41:a7:9a:2e:19:1f:25:8c:00:46:f5:7c:b9:
                    f5:bb:21:3f:27:2a:f3:bc:80:70:8c:c4:b1:f4:57:
                    ad:56:59:9f:32:0f:72:cd:36:34:97:1d:75:af:c4:
                    f6:34:c5:40:fa:c1:d3:69:f6:32:fd:7b:fb:d9:41:
                    cd:f4:b2:e8:3b:41:44:4c:88:b8:b0:64:6d:11:0a:
                    59:ca:12:bc:95:f9:06:66:cf:51:b4:2f:8f:f3:0c:
                    52:77:9f:92:96:dd:65:61:cf:0c:42:a5:ae:e8:1a:
                    45:aa:c9:b3:3f:b0:17:b8:4b:43:89:74:cb:76:50:
                    07:a1:56:8c:4d:98:5b:5c:b1:05:91:7e:53:f3:46:
                    32:ba:b4:d2:1d:4b:7a:93:91:35:db:a4:6a:dd:11:
                    ac:2a:02:a2:9d:52:1e:63:87:11:55:a7:a2:28:29:
                    9b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9A:AF:DE:94:33:36:3B:45:1B:40:5E:4E:03:11:31:F4:C6:79:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cd72c28-4083-32c2-99e5-9a052b9f2d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:a7:66:52:82:ce:b6:ef:5f:29:cd:f0:bb:e6:de:d2:15:d5:
         a4:bc:08:a7:35:ae:36:21:24:f5:b1:a8:f7:bc:ef:0c:1c:c4:
         52:c3:61:cf:b8:0a:85:d2:34:0a:7e:04:2f:2f:32:df:14:db:
         42:40:4b:d8:99:50:ef:a6:e3:b6:5c:63:2b:68:7d:53:81:40:
         23:e0:68:72:9a:bc:37:85:95:40:dc:84:4f:45:9c:b5:f5:a6:
         ea:44:51:80:36:76:b0:a3:16:30:fe:16:8d:a0:77:2b:04:06:
         7c:d7:15:16:37:57:fd:9d:24:ba:ba:99:ab:68:4d:1b:f8:c1:
         b1:53:6f:eb:b6:d7:7a:07:9c:9b:da:5f:21:fd:4d:a6:ba:11:
         47:35:a3:8b:c1:af:61:6a:e9:ce:6c:39:66:31:4f:e4:82:dc:
         0e:91:69:12:d1:5e:6d:48:89:67:6a:c9:b4:9f:69:11:e7:9e:
         9a:cb:88:73:dc:fd:e3:d4:d7:84:1b:89:59:2a:ee:eb:29:0a:
         2d:58:02:e5:0f:18:ca:69:7c:c8:a1:8a:ff:b1:e2:7d:2c:70:
         dc:31:ac:5d:06:47:f7:72:3f:4a:54:74:69:bd:d2:d0:0a:7c:
         ec:cd:57:02:18:64:cd:16:b5:32:e6:63:b2:73:55:f0:24:96:
         61:81:5f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:23:42 2026 by rpki-client