Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b067863-d0ca-35dd-b9d3-5322e5c43613.roa
File:                     2b067863-d0ca-35dd-b9d3-5322e5c43613.roa (raw, json)
Hash identifier:          IA5f8ZzoHrIqw6ilb53rXuRFMMXRgwO4AJey6dQ0/Ns=
Subject key identifier:   73:95:8F:75:76:6D:16:47:D2:4A:38:C9:EE:81:8E:6D:CE:02:6E:6B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E2A7432356B543F1568C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b067863-d0ca-35dd-b9d3-5322e5c43613.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        172.243.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:2a:74:32:35:6b:54:3f:15:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1ed1f612-f845-4628-b736-22864be4ee4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e9:16:e2:c4:25:70:b2:ee:7f:ee:25:5d:d7:
                    3e:9f:8a:e9:61:65:13:36:b0:fe:a1:06:1c:7d:7d:
                    f2:d8:d8:06:dc:68:86:3c:c4:e9:d2:74:a5:05:1a:
                    36:02:11:10:fc:d2:02:ab:a1:ef:c9:be:32:63:6f:
                    b3:35:1c:4b:7d:48:bf:7b:81:87:15:53:03:b9:a9:
                    de:52:e6:e5:d7:0e:ca:61:bf:40:9f:95:7c:81:03:
                    a9:22:4b:a4:38:3e:ed:2d:45:a3:7d:25:ce:dc:b9:
                    90:28:05:28:a2:ff:c5:72:e1:af:9c:0d:09:aa:ea:
                    4f:1a:90:ad:05:78:17:12:d3:2d:fe:44:99:44:90:
                    74:ea:b8:fe:e0:25:ce:4a:d4:3d:3c:ec:bc:02:fe:
                    ac:e9:f6:54:e4:4b:62:c2:3e:08:cb:1f:d1:8c:f0:
                    19:97:f0:19:e9:43:cb:a3:54:c0:b7:90:3d:51:65:
                    7a:9b:ba:19:1f:ed:44:d0:28:2d:ad:65:4f:55:d7:
                    97:9d:55:54:f8:34:50:e7:f7:84:e2:95:3b:f6:ae:
                    e8:fa:81:41:00:b5:72:27:c7:7b:bf:f5:78:3b:36:
                    12:54:25:76:96:5c:a1:a6:b0:3c:9f:f5:05:b0:42:
                    0e:cc:b7:70:49:dd:f9:d0:d5:0d:de:85:fc:18:fb:
                    96:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:95:8F:75:76:6D:16:47:D2:4A:38:C9:EE:81:8E:6D:CE:02:6E:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b067863-d0ca-35dd-b9d3-5322e5c43613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:da:33:a3:9c:f0:68:46:76:b8:fe:ba:f1:01:d0:f5:03:cb:
         7c:98:d2:38:d7:a3:e2:55:2d:e5:66:57:e4:58:45:22:fa:46:
         d1:57:ed:db:c3:87:65:04:09:b6:3d:f6:c1:98:9f:ff:45:15:
         34:bc:32:77:3d:af:95:92:9a:79:bc:04:f5:aa:3c:b2:2e:37:
         0b:07:a4:5c:47:22:5c:5e:28:92:0c:7b:7e:32:a1:e0:4c:70:
         94:f6:ec:08:e2:a4:f6:5b:f6:d3:3c:7a:96:ba:61:77:2e:d4:
         3e:03:2a:12:c0:ee:08:f0:54:86:2a:dc:1c:aa:ec:1b:ac:bd:
         a3:e3:1b:61:94:5a:63:a4:dc:0c:48:3f:b7:f1:03:75:77:e2:
         04:51:c8:6b:3e:43:8c:b2:47:57:77:b6:4f:a3:04:4d:8a:25:
         3c:9a:93:25:7f:51:4f:7d:e7:9e:90:8f:ea:e8:bc:9d:46:ce:
         4a:ee:fa:cf:cb:b6:d2:00:1c:a7:45:fc:cd:03:0e:bc:20:ba:
         b2:f2:a9:40:9f:e1:19:1b:35:25:36:85:5d:ca:11:f4:b8:0a:
         5e:0f:f0:6a:09:24:88:60:ba:01:4d:ac:d6:cb:ee:09:6a:9f:
         bc:39:f8:54:7f:fe:43:f8:c7:13:65:e0:95:cc:7d:90:d5:0e:
         5f:70:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:05:38 2026 by rpki-client