Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74a04071-e947-326b-9116-0aefe766610c.roa
File:                     74a04071-e947-326b-9116-0aefe766610c.roa (raw, json)
Hash identifier:          KM69lvQCLTB2IMYcZ79tVIyJhNqvcIYBws2q79SYqEU=
Subject key identifier:   58:90:66:90:56:EB:13:C4:FA:B3:35:EE:11:D8:AB:92:56:2D:52:20
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E3C245BA5EDCE24159940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74a04071-e947-326b-9116-0aefe766610c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.20.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:3c:24:5b:a5:ed:ce:24:15:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=77f4ffd5-72dc-4589-9619-13bcca42cc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6e:b3:a0:d8:dd:aa:de:56:45:7e:ac:02:29:
                    5f:3f:0b:e0:28:58:e8:38:0a:3e:80:e4:10:72:24:
                    a6:a7:8b:12:76:22:66:23:19:d8:ed:6f:e4:24:6b:
                    44:ab:7a:0b:e1:95:2e:03:d4:4b:50:ed:85:ce:1b:
                    51:9d:2a:16:93:34:64:84:3c:4b:93:7d:d6:86:ff:
                    0e:56:88:19:d8:4f:92:d0:d2:ac:7f:7e:9d:79:5b:
                    8b:de:c4:b0:b6:3b:00:b6:b6:69:23:41:26:5a:1d:
                    dd:07:c5:6a:a5:37:1b:58:fa:4c:17:56:12:d4:75:
                    20:15:ec:e7:94:ef:8a:41:89:3e:44:5a:f0:51:8c:
                    d0:6a:99:57:5a:0a:28:ad:c7:c5:0b:79:58:39:6c:
                    0b:50:75:6c:f7:ea:da:cb:8e:09:45:ac:77:cc:ab:
                    65:43:bb:a6:55:36:11:2c:76:9d:4a:9f:dd:76:02:
                    19:30:a5:15:61:5e:4a:2e:36:6c:1c:21:d5:a3:85:
                    2a:e3:ea:b5:60:a1:fe:31:96:8e:f5:1e:5d:d8:e1:
                    c6:d5:c8:9c:08:a3:ad:90:3e:91:ec:bf:63:77:8e:
                    41:d7:e9:c6:a2:8e:f3:f6:8d:27:08:45:f7:6e:67:
                    14:26:a5:d1:fb:fd:d6:dc:5a:d2:21:95:83:67:3c:
                    e1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:90:66:90:56:EB:13:C4:FA:B3:35:EE:11:D8:AB:92:56:2D:52:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74a04071-e947-326b-9116-0aefe766610c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:25:e9:55:98:d4:ed:6e:48:74:0e:93:d8:2e:be:ba:cb:eb:
         8e:8b:1f:1a:c7:21:88:79:58:1a:2d:cf:7e:24:07:18:9d:3d:
         e3:9a:20:81:59:a3:dc:3b:de:b9:68:08:5e:69:f9:f3:d8:57:
         97:73:06:0f:98:c4:f4:0d:8b:21:53:31:de:cd:61:07:92:6d:
         bd:15:fd:25:b4:c4:0e:d2:7b:9a:53:7a:f5:28:a5:f2:88:e5:
         0e:68:f2:fe:b6:22:1a:91:c6:af:7f:b8:b8:45:d3:8e:83:5b:
         99:0b:6f:5f:96:ee:29:70:4a:63:36:9f:73:ca:32:b6:5c:55:
         4a:6e:70:dc:73:18:55:9c:4b:78:d4:00:e7:6b:e3:67:1f:87:
         8a:69:3f:8c:6c:9e:d8:d8:a2:9a:0e:e5:9e:22:fc:97:c9:4f:
         f3:88:4e:eb:71:1a:d2:bc:64:57:67:2c:29:b1:77:82:00:97:
         b6:f9:0d:bb:50:65:40:32:2f:52:0e:5f:83:bf:80:d1:77:56:
         be:fd:dd:9f:3a:12:1e:0d:8f:45:55:45:e2:60:cb:9b:86:1c:
         50:78:67:83:69:99:e7:48:a8:88:87:eb:8d:78:2b:46:84:8e:
         4b:06:cd:c1:af:b4:c1:98:57:39:51:4f:81:1f:86:0e:75:7f:
         67:b7:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:44:46 2026 by rpki-client