Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63c71b83-972c-3cf9-ab46-d124eda1b634.roa
File:                     63c71b83-972c-3cf9-ab46-d124eda1b634.roa (raw, json)
Hash identifier:          JU5xGAZKXRIc7YFIl6y4XA7y7G/PuV8flRJ/4aMVVZg=
Subject key identifier:   6C:45:5C:B2:33:D9:23:F6:B5:02:93:33:A3:C2:19:F0:B3:23:52:5F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79EFA057782B18CF975F460
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63c71b83-972c-3cf9-ab46-d124eda1b634.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        67.54.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:fa:05:77:82:b1:8c:f9:75:f4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8cc1b37b-1f40-4092-86a0-796ecfbb9b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b7:73:fc:b6:d7:47:a9:68:b5:5d:d6:60:ed:
                    25:85:14:a5:48:24:ac:9d:a7:35:96:43:38:62:65:
                    59:98:c9:51:04:e1:1b:7b:5e:cd:7e:73:1f:80:74:
                    09:f2:2a:87:3e:72:07:7c:1f:00:be:43:78:a1:ea:
                    b8:71:98:f5:0b:e6:72:90:91:84:e3:af:47:ac:e2:
                    be:af:c1:89:36:30:ba:02:2a:0b:38:81:c8:77:9f:
                    00:56:0d:29:0f:8b:c9:8b:b1:ea:7d:da:d0:b9:54:
                    bf:66:e1:c1:a7:f1:28:02:16:9c:22:02:99:6c:60:
                    d9:7a:40:f8:97:a4:58:ac:a2:c6:8f:92:86:4f:36:
                    c7:11:61:14:15:00:cd:bb:44:55:a4:97:ad:8b:45:
                    2b:79:ae:34:d2:a6:5c:20:96:41:76:05:b2:2a:64:
                    21:9d:c5:87:fe:d0:d4:07:79:b8:0c:44:d8:cd:f6:
                    79:16:6b:6e:98:55:be:cd:80:d7:94:ac:d5:7f:f2:
                    7e:58:7d:df:ba:d2:40:02:87:57:b7:06:fa:ce:55:
                    0c:34:a5:12:e1:7a:35:dc:3d:e3:d0:c5:c8:3b:52:
                    77:f3:a0:60:75:be:87:54:00:d0:1e:dd:e2:a3:81:
                    15:66:49:cc:e9:25:97:3a:33:d5:88:3b:a5:d0:e4:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:45:5C:B2:33:D9:23:F6:B5:02:93:33:A3:C2:19:F0:B3:23:52:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63c71b83-972c-3cf9-ab46-d124eda1b634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:fb:26:6a:01:ba:64:f3:ce:a5:6f:fd:21:df:f4:41:12:
         77:4a:29:25:21:ac:98:18:ae:e3:99:05:f7:db:08:15:9e:83:
         b8:03:5e:15:93:48:14:44:3d:e9:97:01:1c:e8:8d:b6:37:f1:
         30:ab:f6:09:c6:b4:15:f2:46:0d:71:91:7d:68:39:08:e8:2a:
         d6:bf:ac:d5:c5:1f:bc:a8:3d:af:09:d5:3e:04:cc:b6:69:a8:
         36:17:91:58:45:98:ae:d3:bb:67:2d:d4:db:ae:f2:40:65:37:
         5e:0b:48:f6:68:95:76:1d:0e:55:f6:b9:48:bf:ae:04:0f:f6:
         dc:8c:9a:e2:37:ff:30:d7:5b:84:4c:c1:cb:e1:50:11:33:74:
         e1:0b:8a:fe:24:2f:51:03:3e:ce:56:eb:44:92:fe:8d:59:77:
         12:83:5c:6c:f6:9f:23:fd:f2:af:5b:db:53:48:0c:26:18:3a:
         c9:41:a8:09:18:03:25:38:6a:be:fd:48:d5:ce:95:2c:b7:a6:
         44:5b:dc:63:1b:dc:1d:71:d9:64:79:cd:65:60:a9:86:cf:14:
         4d:86:9a:6c:fa:41:83:a8:96:5b:db:0d:92:f6:9d:b7:18:a8:
         5f:71:f9:fe:fb:18:f5:a9:4a:92:62:b8:08:85:fa:8e:10:14:
         38:ff:ca:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:43:59 2026 by rpki-client