Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e13179d-6153-3cf2-ac19-281576527cd7.roa
File:                     7e13179d-6153-3cf2-ac19-281576527cd7.roa (raw, json)
Hash identifier:          s8rG4GcinXIeryPvmf5qppfKdL0jgk3+t+XBGziKpX8=
Subject key identifier:   C0:23:64:6A:4F:58:C6:54:4B:6E:66:D4:65:A9:FC:82:0D:62:14:C8
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BDC5E59576FABB5356400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e13179d-6153-3cf2-ac19-281576527cd7.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        67.54.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:dc:5e:59:57:6f:ab:b5:35:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=74a3bd7e-1a62-40bf-b9c6-4d48cd21c319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:c4:75:f9:88:c9:c4:7f:52:de:b6:aa:fa:
                    66:0e:fd:2f:3e:fd:f7:21:13:84:1d:3f:95:78:55:
                    45:ac:53:5a:e4:19:87:b5:7c:6d:37:86:25:97:0c:
                    f4:05:63:1c:73:44:74:b7:23:97:d3:f3:f6:71:c6:
                    3b:54:1b:b3:50:97:e3:54:52:17:75:31:21:14:cc:
                    5e:52:43:44:86:45:96:1c:3d:b8:6d:6c:33:a7:8d:
                    d2:45:77:64:4b:3a:6e:c6:9e:d9:57:12:e9:35:57:
                    9d:e7:41:b6:43:92:87:ca:02:07:a6:22:4b:22:f3:
                    f6:2b:03:56:a3:81:3a:e4:74:8e:bd:fb:9f:4e:1d:
                    02:a5:03:2d:31:b2:50:a7:f3:ec:22:83:bb:5b:47:
                    5e:bb:d1:ca:d0:cf:65:77:27:c7:0d:79:9b:bc:cb:
                    28:da:4f:40:55:31:e4:1b:02:24:29:d2:56:b9:be:
                    19:c6:db:11:8c:49:88:72:eb:db:94:db:cd:71:b1:
                    1c:93:bf:30:74:7a:10:8b:9a:93:9e:b9:9a:bd:99:
                    be:d3:e8:bb:29:26:fd:bb:23:03:38:bf:71:53:5e:
                    a9:58:35:72:ae:a3:23:f6:1d:da:62:74:a5:14:2f:
                    63:b4:bf:23:56:3c:6b:1d:fb:89:15:1e:18:f3:25:
                    d6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:23:64:6A:4F:58:C6:54:4B:6E:66:D4:65:A9:FC:82:0D:62:14:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7e13179d-6153-3cf2-ac19-281576527cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:53:fa:3b:31:81:9a:29:0e:ef:1c:b1:26:e2:1a:8c:2f:77:
         13:1d:47:81:2a:24:ed:0c:a2:c6:f6:4f:0f:1a:1f:98:9b:d1:
         7f:70:9c:81:26:cf:d3:6f:51:cb:6f:d6:30:e4:3b:8a:42:3f:
         4a:10:63:e7:0c:54:3c:d5:68:b7:18:25:00:4a:3a:13:18:70:
         43:ff:46:4c:90:6f:bc:c9:84:5e:a1:d8:3d:2e:40:c2:88:5a:
         cc:97:9b:c1:4a:c9:94:10:10:b4:bc:01:50:43:a6:36:03:cd:
         29:67:1f:45:67:94:7d:9a:c4:03:3c:36:51:8c:9e:54:ff:f1:
         35:f6:52:2c:c6:56:41:7a:fc:8a:6b:0b:c0:4a:72:4d:b5:9d:
         e7:49:8e:2b:05:d2:26:63:3a:ce:5b:8b:0f:c0:51:63:ed:ee:
         e4:22:d7:01:07:1b:23:f5:37:05:fa:90:79:f8:52:34:4f:83:
         32:c3:97:ae:7e:9d:f2:ca:e7:40:0e:64:7f:e9:56:16:bc:8a:
         40:63:8c:bc:0c:b8:2f:c7:a2:36:35:f7:dd:35:2f:99:fe:9e:
         dd:7f:71:cc:db:44:f3:5a:97:60:50:35:a5:a4:6a:35:ef:8f:
         72:f0:8d:d3:66:36:e7:fe:41:a0:6d:07:c0:9a:d3:a3:b9:45:
         cb:94:4f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:27:19 2026 by rpki-client