Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d0cc599-036f-31d8-9f5e-71ed90960227.roa
File:                     5d0cc599-036f-31d8-9f5e-71ed90960227.roa (raw, json)
Hash identifier:          whE0PdeGotcZHQ5G225EaO0B/XRdfV4L+cODetVIls4=
Subject key identifier:   03:A5:58:8E:FA:E4:EA:43:EE:1B:F2:7B:FA:4B:73:C5:43:45:29:81
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E265D69322A43F07DC800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d0cc599-036f-31d8-9f5e-71ed90960227.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        172.243.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:26:5d:69:32:2a:43:f0:7d:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ceea86c7-716a-46a2-8fe2-dce8f9daade3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:86:d6:20:3f:db:03:e8:23:a4:ce:ab:6e:a1:
                    60:16:7a:73:ae:63:bb:4b:11:48:1b:ff:5f:7e:ba:
                    8b:4e:f9:ed:84:dd:d2:e9:ad:c8:c2:f1:54:b8:30:
                    ae:87:2c:a5:a2:81:f3:cf:8c:66:f0:0d:00:85:54:
                    b1:26:25:26:11:51:28:e4:67:b8:a9:98:9e:86:33:
                    ac:5a:27:ba:16:6c:c8:ff:0f:ab:9a:e0:de:45:51:
                    25:a3:fe:a1:58:e4:b5:43:7d:70:5f:b8:2c:59:92:
                    a9:e7:12:b3:40:59:94:50:a7:27:40:ad:20:17:57:
                    c0:41:b7:3b:0e:81:49:6d:b9:b9:1f:c2:d0:02:28:
                    7e:20:36:cf:bc:c9:19:ff:8c:89:f7:78:30:57:4b:
                    0e:f1:1f:f1:c9:94:ec:52:f6:9b:7d:d7:da:6c:0f:
                    64:c0:22:d9:ff:83:39:eb:e2:35:cf:10:b8:4e:b2:
                    f3:ba:dc:c5:01:0a:3e:3c:33:07:95:b2:56:86:9a:
                    13:e0:5b:4a:3f:6c:b6:4d:35:b5:ea:19:2f:8a:0e:
                    cb:5e:d4:04:68:fb:07:95:c8:d7:a0:7a:ab:e8:70:
                    fb:88:f6:53:fb:e4:76:40:1d:75:ee:69:ed:bc:d0:
                    f4:1b:f9:13:7a:7b:3c:98:a8:37:36:85:30:6d:cf:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A5:58:8E:FA:E4:EA:43:EE:1B:F2:7B:FA:4B:73:C5:43:45:29:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5d0cc599-036f-31d8-9f5e-71ed90960227.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:c8:45:cb:f2:38:95:d7:34:a5:dc:d7:bf:61:22:ae:b7:9f:
         6c:ef:31:61:da:97:55:0e:c8:ac:df:59:e6:64:0e:25:af:fd:
         d6:93:d1:e1:e3:f6:86:db:8e:d9:f6:68:8a:45:d1:df:46:60:
         d5:52:43:48:44:25:40:59:7c:cf:50:c7:37:61:a7:2d:53:73:
         de:1c:05:fc:7a:27:9f:36:d2:a6:31:0b:64:ce:7f:a6:29:43:
         de:8e:ca:1d:3e:c1:58:7f:21:73:44:71:e0:dc:37:93:bc:c1:
         ac:c8:9d:57:c3:d4:14:f5:b9:60:45:df:7b:da:df:46:42:fe:
         8e:e7:85:be:07:82:31:70:43:df:1f:a7:7f:fe:6a:39:33:d4:
         5d:05:bb:9b:d6:65:3f:11:db:a5:34:04:86:a2:33:b3:03:e3:
         01:a9:82:0f:e8:d4:41:1b:bd:75:a3:a1:e2:15:e9:d9:3f:8e:
         c3:bc:a7:57:b3:65:b0:15:27:b1:97:81:e7:3a:ab:12:d4:cd:
         a7:e2:b7:86:7a:ca:f9:94:ea:7e:5c:b1:16:9b:1b:8d:8a:32:
         1e:89:1e:dc:38:8e:7a:46:06:3c:6b:0f:e7:93:8b:3f:e6:13:
         40:bd:e5:b7:3e:36:11:e2:4f:47:ea:e2:e1:67:d0:51:d1:1c:
         a4:7f:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:03:47 2026 by rpki-client