Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/874651fe-9d9b-31da-8b16-7953e2aaf597.roa
File:                     874651fe-9d9b-31da-8b16-7953e2aaf597.roa (raw, json)
Hash identifier:          VIVVa8GE+BPGTp8TvjVauD1pwx9lyIkCgzoOLssw9uc=
Subject key identifier:   8E:FB:62:DA:A4:45:60:0D:66:F5:DE:71:EB:C0:99:B6:E8:75:F5:4F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79FD8BB5BD44112EFF81780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/874651fe-9d9b-31da-8b16-7953e2aaf597.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.20.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9f:d8:bb:5b:d4:41:12:ef:f8:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4d5f18dd-74b4-4bdb-8168-e334fa4bc769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e0:6d:ab:cb:1e:e0:6d:d3:19:85:63:70:24:
                    0a:01:34:93:b0:de:f5:02:bd:81:ce:d4:d8:95:ed:
                    c6:67:c5:21:a2:7a:32:8e:bb:08:61:17:11:ad:58:
                    6f:a2:94:39:ec:d6:4f:d0:44:b7:99:37:cd:c2:a4:
                    53:98:a8:f9:63:ce:98:80:de:19:78:b5:b1:2f:1a:
                    a3:db:c0:c0:bd:22:61:24:68:a1:e4:ac:fc:21:47:
                    a7:e4:e5:63:9c:ef:da:29:46:95:e1:08:d5:1a:af:
                    43:92:1a:45:24:09:2d:6c:6b:6e:3a:db:a0:c7:b8:
                    9d:ef:1c:87:62:86:94:b3:34:bf:5a:70:f8:60:7a:
                    bc:09:0a:49:8c:7a:de:21:a4:74:fa:ea:a1:ea:84:
                    3f:1d:13:e4:9d:40:3d:a3:1c:e5:ac:c1:4b:e2:8d:
                    f1:68:1a:ee:b1:b8:6d:34:27:fe:bc:75:bd:78:52:
                    5d:2f:a4:55:4d:10:e2:05:29:8d:62:a3:27:da:11:
                    12:bc:70:ac:8f:c2:92:74:fd:c9:5d:5d:b3:bd:84:
                    e5:86:3a:71:06:09:6f:05:41:c5:00:9b:3b:21:a7:
                    73:4c:ae:c3:b8:76:ac:49:7d:71:35:29:53:7f:9b:
                    82:ff:76:5f:96:83:21:05:62:98:65:aa:5f:16:8c:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FB:62:DA:A4:45:60:0D:66:F5:DE:71:EB:C0:99:B6:E8:75:F5:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/874651fe-9d9b-31da-8b16-7953e2aaf597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:13:fa:4d:fe:af:90:70:61:9c:d9:57:bb:28:84:02:7c:20:
         c3:af:06:72:0d:ce:ce:86:c6:20:a7:9d:1d:07:03:47:e2:1a:
         44:8f:dd:ff:d2:a5:2c:8b:33:3f:b2:d9:94:ea:18:76:37:fa:
         c2:3e:67:94:68:c5:a8:1e:f8:d4:df:a3:f5:e2:90:6b:0d:67:
         0e:f3:31:42:80:b4:1d:09:bf:7b:68:06:fa:31:dc:a9:4c:f7:
         44:cf:83:84:d1:f1:1a:ee:87:ee:be:02:83:4f:5e:eb:c2:cc:
         a3:4b:05:9b:7d:00:cd:9a:1f:9d:d3:c4:69:29:f5:2b:12:62:
         3f:ed:df:b1:22:4e:aa:f2:85:ab:fd:68:f3:cf:96:bc:ca:90:
         c1:5c:e3:df:ac:ad:e1:e7:5a:3d:d0:d6:5f:89:51:f6:75:d8:
         e3:f9:85:93:0a:81:74:4c:df:60:0c:c0:b9:f5:8a:72:ec:5e:
         61:37:27:28:3c:cc:2f:2f:b9:50:f1:56:95:71:3a:46:8a:5f:
         e8:dd:12:10:8e:b5:20:17:79:85:57:2c:ce:ac:4e:36:08:20:
         3c:85:79:c9:63:25:d5:ea:de:d2:1d:ba:a0:eb:69:36:7c:dd:
         89:94:fb:b1:0f:95:bc:6a:90:3f:28:84:36:4b:7d:bf:19:e2:
         86:6f:c5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:32:29 2026 by rpki-client