Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5502b859-d951-3cc1-965c-4b7ec3e6649e.roa
File:                     5502b859-d951-3cc1-965c-4b7ec3e6649e.roa (raw, json)
Hash identifier:          6yBChhEyyUJi2r73NFdRd4Rl04kPhE597GvvRTw9uK4=
Subject key identifier:   05:08:C2:81:7A:BA:4D:9F:F2:C4:92:A4:F6:AF:44:4D:35:75:D6:6B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79FCB8271D7DA698C686260
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5502b859-d951-3cc1-965c-4b7ec3e6649e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        172.243.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:cb:82:71:d7:da:69:8c:68:62:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bae4c4ed-887c-460c-9171-e2c13e4bafd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:33:95:82:9f:64:d4:b5:1a:94:84:52:85:98:
                    75:3e:85:ab:d9:fe:98:ed:38:91:6e:0f:74:57:fb:
                    d3:3e:d7:ce:d1:0f:ef:5b:a8:1c:e1:16:d7:95:40:
                    49:60:c8:bd:33:cb:3a:d3:6a:4a:60:4a:39:b2:06:
                    af:f1:58:0d:13:a1:d1:d7:fc:da:03:9e:69:16:30:
                    4b:d9:fc:a4:9a:43:e8:73:92:ec:e1:be:2f:c2:35:
                    c0:20:55:d8:85:ef:05:ef:a2:0d:7a:e3:05:2f:fd:
                    4d:29:74:d9:01:56:af:4a:f7:c5:43:95:1e:30:38:
                    c7:d2:98:73:7c:88:48:05:9a:6e:e3:e8:3d:84:70:
                    09:65:cb:e2:71:a0:44:37:9d:2b:34:d0:0b:ed:a2:
                    40:08:a8:d9:d3:15:5e:87:50:00:c4:c6:a5:93:14:
                    3b:98:65:2d:1c:3e:08:58:6c:d1:eb:3c:b8:2e:5e:
                    89:dd:6c:28:2f:76:1c:20:a1:16:aa:5a:a5:b3:65:
                    69:d7:2d:49:07:08:44:30:7b:38:88:d5:44:a3:d9:
                    3f:f5:e9:1c:5a:57:38:56:67:db:c8:93:47:f6:52:
                    2c:a3:63:02:59:b5:02:7c:2b:21:07:8c:8c:fe:4b:
                    c3:33:91:31:f3:41:be:f4:1f:51:1b:5b:f4:3d:5f:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:08:C2:81:7A:BA:4D:9F:F2:C4:92:A4:F6:AF:44:4D:35:75:D6:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5502b859-d951-3cc1-965c-4b7ec3e6649e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ac:4a:00:36:6a:b9:97:3e:c1:90:82:9e:17:4d:61:08:2e:
         27:a3:3e:4a:b1:23:70:93:02:8b:cf:c6:f9:2f:64:92:ad:ba:
         49:7d:33:cb:02:23:2d:f8:13:7a:49:9e:39:d4:d1:dc:0b:f8:
         d0:7b:97:32:2a:97:cb:9d:5a:d3:b3:7f:0b:d3:4b:ce:d9:10:
         e1:46:40:d8:d2:1f:85:72:af:51:a7:be:6f:6e:fe:dc:78:78:
         b3:e2:49:87:03:ac:86:d9:a3:24:31:25:9a:cc:cf:1d:56:30:
         35:a1:18:c3:ad:2e:df:e8:33:77:10:7f:44:5f:29:7e:82:da:
         7d:a4:53:35:b2:99:5d:d4:54:79:79:16:c6:37:9e:ee:8c:ed:
         88:2f:64:cb:ed:03:32:c8:a5:6f:6c:78:5b:2c:9f:8d:a1:45:
         fe:52:d2:94:e9:51:d1:4b:fb:fc:9f:0e:3a:76:67:e5:51:ca:
         09:a9:b6:f0:d1:da:85:cf:6b:d6:3c:77:eb:1b:bf:90:11:4e:
         f2:5a:89:52:05:58:16:f6:aa:76:b5:33:16:e7:67:73:94:18:
         a4:f7:25:21:f2:28:55:1c:20:7c:12:49:6a:f5:ab:06:d8:47:
         d8:6a:f8:27:48:2e:07:cb:a7:a3:b2:62:c4:ed:ac:d7:76:b7:
         dd:0f:22:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:43:58 2026 by rpki-client