Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/34927099-dfeb-3754-b50d-e4a3d284c3ee.roa
File:                     34927099-dfeb-3754-b50d-e4a3d284c3ee.roa (raw, json)
Hash identifier:          SUz6BF9OnCGFcFHGeE7F18o9rAEaLuMmH/+6vKQ/5SU=
Subject key identifier:   10:19:B0:5E:D1:EA:B9:89:A4:38:B7:6F:A2:81:33:A3:12:B7:D0:1A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA7A01372BE91AD6936F4F600
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/34927099-dfeb-3754-b50d-e4a3d284c3ee.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.63.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:13:72:be:91:ad:69:36:f4:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cf647509-7cf7-4786-a767-73071b4994a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:0f:9e:e2:1c:c5:b0:30:a1:fc:a8:86:b5:
                    8e:06:ca:78:1c:09:67:dc:4d:40:16:a7:eb:9a:e7:
                    2f:bc:85:e2:ad:f9:9a:9b:37:b2:33:a4:35:c3:ac:
                    c6:cc:fd:f1:ca:28:09:b5:eb:34:12:db:4e:6f:2b:
                    02:b3:13:39:9f:20:4d:db:87:36:d0:7f:5f:01:8b:
                    6e:e6:92:bd:ab:ad:b2:be:6b:cd:6f:cc:3f:34:4f:
                    16:d5:e1:f0:83:f0:38:d7:56:93:83:e1:73:5c:ca:
                    b2:d8:13:2c:97:de:78:9f:5c:71:cc:8a:1d:86:01:
                    8c:8f:07:dc:1a:67:61:7d:c2:60:02:3f:36:19:7d:
                    81:e5:eb:cb:d6:76:b9:49:0d:c2:e7:37:a7:dc:87:
                    60:5d:f1:9d:c1:84:8e:69:7c:c0:95:80:08:d8:6f:
                    52:8c:70:2a:e0:e9:6a:f1:4e:7e:3e:d7:73:ac:c2:
                    49:e0:b0:54:5a:15:62:a0:31:32:2b:d0:d9:59:2d:
                    f3:30:00:9b:e0:a5:a5:90:f2:9d:b3:95:f5:f4:97:
                    c3:bf:b5:40:c5:44:75:2e:aa:8c:b6:5f:eb:7e:85:
                    65:5d:c7:70:5d:59:5a:41:c6:bf:7e:8a:59:e1:ae:
                    00:a6:2f:d2:84:df:85:8c:34:e0:e4:fd:88:63:b3:
                    37:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:19:B0:5E:D1:EA:B9:89:A4:38:B7:6F:A2:81:33:A3:12:B7:D0:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/34927099-dfeb-3754-b50d-e4a3d284c3ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a3:1c:1c:7a:85:53:d5:3e:33:0c:18:d0:2c:9c:18:37:1a:
         ad:9e:c9:d0:22:97:ad:77:c8:41:85:b7:8e:94:b1:32:d1:94:
         5f:50:9a:83:96:e7:18:75:35:f7:bc:c1:6f:8a:c5:50:b7:49:
         9a:7c:f6:57:01:fb:97:c9:22:99:e2:c4:1a:20:ec:27:b3:00:
         0b:98:9a:f6:7c:07:3a:cd:50:7e:71:9b:a8:96:7d:f2:2e:de:
         59:45:53:9c:6e:f8:6a:17:33:db:53:74:05:28:ea:38:21:21:
         71:94:31:4c:4a:60:8c:59:83:d8:fc:22:12:71:63:22:3a:ff:
         40:94:d6:b1:90:30:9e:b4:d8:44:f4:aa:9e:0c:e8:f1:df:02:
         f7:57:8a:21:fa:87:74:43:ae:cc:ad:26:3b:d9:1a:57:31:e2:
         82:98:92:bf:1b:a0:4e:31:ac:e2:1b:09:dd:15:b9:d9:40:38:
         3e:99:b0:fd:1c:a7:76:e4:da:95:65:67:cf:fc:31:19:55:05:
         6c:9a:62:83:18:18:c6:8f:e6:15:8c:b7:66:03:5e:fa:e3:3a:
         81:ff:c2:5f:12:03:62:38:a9:58:47:d2:63:d0:72:47:8b:a4:
         ad:d5:72:b5:df:48:33:b3:56:67:ec:e2:55:b1:e8:78:cf:f1:
         dd:4d:c9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:57:18 2026 by rpki-client