Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42702935-3d9e-3550-bf58-ac2ef322d4e8.roa
File:                     42702935-3d9e-3550-bf58-ac2ef322d4e8.roa (raw, json)
Hash identifier:          UAKaiTSh5O4mAfo6M16y1o9qxOqffBYstFDOXuOPgPQ=
Subject key identifier:   69:1F:E5:6D:23:99:1D:00:0E:FC:C3:AF:0C:7D:D7:E1:83:34:C3:41
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B8C7408BBAF8E8D87A580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42702935-3d9e-3550-bf58-ac2ef322d4e8.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.197.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:8c:74:08:bb:af:8e:8d:87:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=f1c31856-7851-4124-a4a4-bddbb8cf75a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:40:dd:e7:d6:fb:e7:23:53:22:a4:9b:de:
                    77:cd:93:e1:76:14:07:e8:70:70:eb:53:29:8d:ce:
                    39:54:da:0d:1f:86:6f:79:84:57:ae:5e:d6:d1:4b:
                    33:96:f7:49:5a:03:18:38:bf:a1:c0:53:7b:a0:88:
                    e7:74:bf:43:e6:94:48:8d:52:85:64:53:e3:e3:9e:
                    9e:ff:c0:69:29:4f:84:ba:7f:12:48:6f:36:e3:39:
                    d7:a5:b2:ca:7b:da:7f:f9:a5:da:c2:2f:cd:45:e9:
                    1d:ae:2a:1c:6d:5f:09:ef:00:0e:6b:12:15:84:2b:
                    02:6e:9d:68:07:04:f2:1e:3b:7c:df:5d:46:f2:53:
                    74:3f:f9:ac:07:d4:1c:c7:6c:76:37:a2:90:73:59:
                    0f:99:02:9b:d0:f4:d7:d2:72:6e:89:96:8e:af:04:
                    b9:30:2b:89:58:b1:ee:69:2c:e5:f5:b1:40:d1:b4:
                    dd:6e:ca:0c:f5:91:4c:af:ce:bf:49:cd:83:9a:df:
                    c5:e4:f5:16:a7:ed:58:16:dc:29:5c:ef:7d:af:9b:
                    bb:a8:b7:3f:28:06:ce:7d:a1:3d:7f:2f:b6:a2:cd:
                    1b:fb:a8:7d:c0:a3:83:3a:56:4e:ae:f8:d6:35:b0:
                    7c:51:c5:cf:f2:84:9b:d1:7a:2a:a3:96:0d:e0:a7:
                    20:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1F:E5:6D:23:99:1D:00:0E:FC:C3:AF:0C:7D:D7:E1:83:34:C3:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42702935-3d9e-3550-bf58-ac2ef322d4e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:28:e6:9a:3d:2d:83:4e:72:0d:7b:e4:aa:52:f3:15:d1:c2:
         f3:6b:69:3e:e9:e8:3b:3e:cd:c2:13:16:11:76:94:08:5f:b3:
         f7:a0:62:e6:d8:11:4d:54:41:cf:29:fc:7d:86:26:67:3e:22:
         f9:0b:2c:b7:30:6a:b4:a1:2e:c5:51:15:35:9e:2c:7e:94:91:
         3c:10:74:df:48:5a:18:24:91:9b:84:84:32:47:4f:c4:d6:18:
         cb:07:28:5c:df:a3:86:a0:fa:00:80:3e:fb:a7:5e:30:11:80:
         e0:c6:a4:88:4a:6f:5d:2b:77:a6:f7:8f:f2:df:9d:c3:af:b4:
         86:f9:c1:6d:17:f3:fd:89:9d:5a:9d:f9:67:8a:5c:d4:7c:40:
         a5:27:1b:18:79:37:bf:94:30:32:b0:f2:2d:dc:e4:f1:00:20:
         4b:7f:4b:ea:4a:78:86:82:6a:5c:1e:16:f1:49:5e:99:6d:69:
         45:9e:4b:17:d4:03:0a:d7:29:a1:9f:53:a7:a8:95:42:ea:db:
         87:4c:29:82:a9:a8:b0:96:48:eb:d8:27:28:a0:5b:fe:41:73:
         f6:b3:9a:22:0c:bd:5e:a8:72:f6:90:1c:21:b5:63:ef:00:d7:
         b9:4b:d9:02:bf:41:44:ac:a0:df:51:6d:5f:18:c7:9c:38:f4:
         9f:9a:3a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:23:36 2026 by rpki-client