Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ec1e51d-6725-3407-9b6c-11caa275e537.roa
File:                     2ec1e51d-6725-3407-9b6c-11caa275e537.roa (raw, json)
Hash identifier:          Wd3CUbcyQg2t8HpNBHxb84r5dE805+JP6Uf8tays+ck=
Subject key identifier:   E1:91:EC:33:B1:E3:1E:DA:66:07:09:FA:92:BF:51:1B:A0:4F:CB:73
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79FBCCF34FA61094AA3E100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ec1e51d-6725-3407-9b6c-11caa275e537.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        172.242.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:bc:cf:34:fa:61:09:4a:a3:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a3148332-18fa-4de8-b02f-7c98f7786be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:48:a6:95:1b:08:91:ec:69:aa:9c:4c:e2:
                    d2:9b:d2:5f:46:07:45:0f:f4:87:b1:c0:0e:69:29:
                    15:66:5c:19:0f:59:67:11:45:72:3b:0c:32:c9:c7:
                    27:aa:cf:ad:a2:15:37:47:a6:60:a8:a8:2c:2e:af:
                    b6:9d:e7:56:29:59:0f:ef:be:55:8d:31:a6:c5:09:
                    09:5f:e4:71:20:73:b9:90:74:48:30:a2:65:ca:6e:
                    da:df:9d:77:42:de:49:f5:6f:22:52:1d:16:27:af:
                    95:89:16:f6:e4:6e:c4:e8:e4:83:e8:5f:ee:2f:2e:
                    2a:ac:e6:54:ea:86:b8:f0:1e:ac:73:0c:52:b5:d5:
                    5a:8e:7c:b7:77:00:79:3e:ba:e0:ed:4e:0b:56:cf:
                    07:29:e5:ec:bd:bf:e7:93:aa:f5:58:38:4b:cf:fd:
                    70:82:d7:40:d1:27:ee:ab:94:e7:ec:ce:e2:e6:0e:
                    b0:d5:2e:9c:44:08:10:41:e8:75:8e:27:4d:47:51:
                    64:de:4a:6e:05:12:7b:03:57:f9:3d:d4:eb:af:f8:
                    9e:05:02:d7:f2:f7:4a:e2:c8:e6:45:7d:d3:64:ef:
                    0f:56:36:51:57:41:bf:0e:3d:df:e5:b1:9a:69:3a:
                    e6:24:1d:10:a0:a4:43:37:24:8e:e9:3a:66:3e:28:
                    fd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:91:EC:33:B1:E3:1E:DA:66:07:09:FA:92:BF:51:1B:A0:4F:CB:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ec1e51d-6725-3407-9b6c-11caa275e537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:6f:3d:d8:a6:18:08:4b:f0:0a:04:39:6a:f8:50:b8:53:00:
         5b:49:7f:93:21:24:90:6f:d8:df:7f:ae:e8:3a:fc:cc:69:10:
         91:02:2c:7d:b0:f7:d9:88:58:49:ae:cd:37:5c:a9:72:20:c7:
         e4:39:0f:b6:c1:23:61:91:61:52:86:b7:6f:17:af:a6:a2:3e:
         28:e5:80:cf:9e:92:45:5b:1c:5a:df:31:51:d7:85:43:05:4b:
         0d:95:cd:18:8a:d1:1c:00:2f:f5:bb:09:27:bd:7f:84:4c:3d:
         e7:3e:53:20:71:bb:d9:de:9d:76:04:6c:2c:a7:d7:d8:7b:19:
         ee:74:a2:04:1b:38:1b:3a:42:0f:6b:10:47:1c:94:42:5f:2c:
         72:41:ee:74:c7:c6:98:79:f5:bd:26:3a:28:d2:d6:0a:dd:13:
         6d:0b:31:24:5a:fc:f5:d5:01:da:9d:c2:6f:1c:66:32:db:da:
         33:de:ca:b2:fc:ce:2a:de:db:c0:a6:0d:67:ef:fb:74:e8:d3:
         3f:6e:40:19:aa:c2:3e:16:ff:b2:bf:27:50:43:35:87:67:43:
         92:70:e8:ff:c4:7f:77:e1:f2:38:31:b4:1c:04:f6:57:23:d4:
         be:bf:8c:fd:a5:8b:e4:93:19:db:7e:71:7b:b8:fa:3b:4d:08:
         f2:fa:88:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:06:22 2026 by rpki-client