Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c36cfe7-c4b9-3983-abad-113fbe2831cd.roa
File:                     7c36cfe7-c4b9-3983-abad-113fbe2831cd.roa (raw, json)
Hash identifier:          mkAdRtLP6VIDCvcYNDZQFPGmzzZ5rKB6d3qnOoxwc4Q=
Subject key identifier:   24:B0:A9:21:A2:32:94:9F:3A:B6:BD:82:E2:00:FC:25:9B:90:44:98
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BB39AF0AC8AB48A31A980
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c36cfe7-c4b9-3983-abad-113fbe2831cd.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.63.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:b3:9a:f0:ac:8a:b4:8a:31:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=a090741b-ac5c-492e-88aa-8f43937189f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ff:0b:1c:50:c1:db:dc:5f:65:b3:10:67:1b:
                    25:0b:f2:48:72:4c:c2:e2:a3:9c:28:58:73:e2:af:
                    21:a5:d0:8f:4a:1b:55:a6:69:40:ce:98:89:a3:4b:
                    cd:65:2d:a2:fc:6f:09:af:82:08:76:58:a4:5f:07:
                    d4:cf:e7:45:09:18:ab:a1:eb:d6:0a:c7:d7:9f:ce:
                    2b:60:56:3c:c5:57:6b:b3:bc:0e:56:dd:f9:7e:f0:
                    5d:b8:7b:a2:65:36:59:4c:1c:bc:60:04:92:91:45:
                    ec:8f:04:ff:40:38:2b:35:0b:3a:5a:85:ab:53:d1:
                    6c:bc:89:2b:f1:74:25:25:8b:2d:76:10:36:d2:7e:
                    c4:f1:0a:e5:2d:20:99:54:f5:2f:ff:a5:b1:16:52:
                    bc:cd:56:fb:70:47:a3:be:f5:fd:4c:5c:00:41:bc:
                    fd:7f:64:b0:b0:ea:77:6f:ae:1f:a9:41:f7:cb:08:
                    cc:15:07:d5:bb:34:68:58:96:bb:92:27:98:30:a4:
                    80:44:23:5f:42:8a:9c:c0:76:be:df:b7:3d:f7:03:
                    e7:b3:0c:83:13:fe:29:e4:76:5c:80:37:25:d1:89:
                    ee:64:a9:e7:7b:bf:2d:cf:8b:12:bf:bc:92:39:3d:
                    fa:0a:c2:d2:91:a1:c1:66:c7:df:05:b6:bb:73:9a:
                    a8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B0:A9:21:A2:32:94:9F:3A:B6:BD:82:E2:00:FC:25:9B:90:44:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7c36cfe7-c4b9-3983-abad-113fbe2831cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f4:e2:6d:40:72:af:bc:be:db:e7:17:02:d8:4a:94:d4:70:
         3c:a4:aa:ef:c3:46:7c:96:10:33:f3:98:9c:1a:a3:ad:82:c0:
         6a:45:21:fa:e0:43:d4:c7:93:42:62:df:35:06:c7:4f:d2:cc:
         7c:a6:cc:80:8b:b3:9e:07:09:17:a3:e2:05:95:16:9e:37:d1:
         e6:16:41:19:6b:1e:8e:6c:a0:8a:c3:0c:71:be:a9:de:dc:e7:
         4a:ca:40:52:a8:cc:ad:7f:29:0f:90:08:9c:41:81:d8:fc:c8:
         64:47:37:5f:c1:de:9f:49:c2:85:e8:69:33:9f:0d:04:40:7d:
         d5:8a:98:30:3f:10:87:21:c4:5c:ca:7b:4b:db:3c:ae:a3:c4:
         89:bc:f0:b0:88:f5:b3:90:f4:93:55:1a:8b:25:33:30:c2:fe:
         e3:46:a4:19:65:12:fd:e5:fa:fd:e0:18:fa:ba:7d:6b:01:a7:
         2e:00:48:60:fd:93:a7:21:00:b1:80:6a:b8:57:83:80:d1:2f:
         8d:e2:ca:30:37:c4:f2:e5:ac:5b:01:4e:89:4a:c2:a8:9d:d5:
         fe:51:48:cd:0e:d0:d3:d5:56:67:bc:5a:82:58:95:42:a1:ee:
         37:54:13:bb:d8:81:65:97:9b:ea:c3:67:f0:94:54:cd:92:ad:
         ee:cf:33:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:26:14 2026 by rpki-client