Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e3d5e6d-1223-3dcc-b042-f4563f0e7bef.roa
File:                     8e3d5e6d-1223-3dcc-b042-f4563f0e7bef.roa (raw, json)
Hash identifier:          aIUeOU2/eG4DCHaPDCBGMFRS3PsQwpuZe/wVrJj9OLo=
Subject key identifier:   5F:2E:9B:6E:D4:EC:FD:0B:FF:78:31:58:86:1F:28:05:94:DE:E5:4B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E09DB46F76B0859FDE1180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e3d5e6d-1223-3dcc-b042-f4563f0e7bef.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.197.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:9d:b4:6f:76:b0:85:9f:de:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=63bba9a2-3a0b-461d-97c1-cd30cb1bee40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:72:45:fa:5b:9c:ba:ae:b5:e5:ff:57:f8:c2:
                    03:9f:8b:58:ff:72:e0:c7:c5:eb:d5:3f:fc:69:53:
                    ef:18:5e:11:90:c7:d6:ff:1c:06:59:44:68:5a:7a:
                    39:2d:01:bb:c0:83:43:0f:4b:f1:e2:7a:dd:fe:80:
                    fe:94:df:24:8d:e4:59:57:62:e4:b4:0a:8f:80:73:
                    72:71:67:af:2f:00:7b:29:19:76:27:5f:53:20:8a:
                    0f:ed:82:63:94:d6:ff:4f:61:40:3f:f3:04:ca:62:
                    3a:29:48:11:6f:49:d8:eb:9c:60:5c:d9:cd:e8:7c:
                    8f:bd:55:91:ec:65:c7:15:bd:65:3e:f6:54:40:94:
                    3a:90:7d:f1:91:6a:94:3a:a6:1f:5a:3c:50:1a:72:
                    e7:35:a4:86:a4:8b:96:c9:7a:c4:87:7f:68:68:74:
                    81:2a:f1:6c:d1:65:26:f8:90:01:5f:49:cb:0f:3b:
                    e9:fe:05:47:e0:90:5e:89:44:05:c7:af:5b:15:95:
                    af:08:54:82:13:99:30:20:6b:41:f4:7f:89:5c:46:
                    53:40:8c:bf:b4:a1:06:b5:2f:bb:0e:2f:fe:80:c4:
                    31:33:4f:c4:05:f0:85:50:4e:00:5f:fc:89:af:d1:
                    a0:f5:84:45:c6:5f:f0:11:51:51:72:2b:5a:a7:f3:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2E:9B:6E:D4:EC:FD:0B:FF:78:31:58:86:1F:28:05:94:DE:E5:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8e3d5e6d-1223-3dcc-b042-f4563f0e7bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:82:3d:cb:8a:d6:2b:4e:94:36:a8:36:4d:a3:1a:e8:5d:b5:
         8d:ba:11:f2:cb:9f:09:2d:94:70:e4:56:17:42:8b:90:78:ab:
         91:0c:08:c6:67:23:9b:2d:90:e0:e9:84:13:7c:30:0f:1f:28:
         ea:ee:08:56:76:ac:0c:4d:42:0c:e2:29:2f:0c:75:8d:0d:fc:
         6a:b1:06:50:b1:86:be:64:7e:fc:a3:1d:ef:2f:48:d1:98:e2:
         e6:4c:a9:b3:c3:d8:a4:62:9c:34:27:98:ea:63:f4:5f:15:f5:
         ce:9b:af:80:70:5f:f9:e6:63:07:a6:3e:be:48:dd:18:9e:5f:
         ef:d4:ab:e8:5c:ef:c0:66:57:87:6d:f4:94:1f:79:9c:81:da:
         2c:75:fb:3a:6f:52:0a:fc:42:79:34:53:ee:09:0d:55:bd:66:
         14:ba:df:dc:34:a7:d0:18:3a:f5:71:11:8f:17:8b:32:6a:01:
         9b:98:09:c1:73:8a:6a:50:70:fc:d6:21:54:93:a1:c0:27:12:
         e7:43:46:55:6b:1e:cc:36:27:83:b0:5f:55:05:cd:78:fe:27:
         7b:51:e9:6f:82:6f:3d:3b:0d:34:d1:52:1e:b9:6b:b6:6f:5f:
         c9:34:a6:2d:63:f8:2f:51:22:e5:93:c2:34:a0:bb:5c:ec:ea:
         9c:5a:ed:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:23 2026 by rpki-client