Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/981941e9-04ed-3370-8f84-f1ee140edc86.roa
File:                     981941e9-04ed-3370-8f84-f1ee140edc86.roa (raw, json)
Hash identifier:          ClkO4TGXY/KVRIo4mNcIOrrtmsq4DlhkqvFihiJuIgc=
Subject key identifier:   02:06:4F:F4:6B:F8:E6:D1:AA:53:F2:28:15:9E:46:D3:47:36:5E:FB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C1D88765BB3CF7BD04E80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/981941e9-04ed-3370-8f84-f1ee140edc86.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        172.243.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:1d:88:76:5b:b3:cf:7b:d0:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=0c4374dd-60dd-49e1-a6bb-c7f5fd03b081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1a:fa:18:b5:97:92:3e:8e:71:09:23:ee:44:
                    21:fc:6a:ae:d2:b6:93:2b:d8:3e:a3:a2:db:53:2b:
                    6a:17:9a:fa:e6:65:e1:aa:0b:45:5f:80:8e:f9:f1:
                    0f:32:e6:74:b3:81:8d:8b:c1:35:e4:17:1c:8e:29:
                    d0:ac:79:b2:3b:8b:8d:52:c4:0b:44:29:b5:28:65:
                    da:da:9f:8a:14:c5:a7:d6:06:83:83:38:60:84:2e:
                    2b:18:c9:9e:9b:f6:66:54:59:75:02:a8:94:1e:d0:
                    b9:48:1c:35:85:03:d2:ac:f9:53:e5:40:1b:3b:1f:
                    02:93:56:d8:f9:ca:d7:98:f3:42:40:0e:41:88:6e:
                    a2:6e:25:1e:2f:9b:f0:e2:d2:34:ef:3e:9c:6a:d0:
                    00:99:78:2a:8f:99:9f:32:1a:37:78:10:f9:a1:28:
                    1d:f1:3b:4a:09:b4:bd:4b:33:17:cc:05:a7:ca:bd:
                    a7:c3:ce:e5:62:ad:09:30:6f:e0:fc:11:16:00:f2:
                    a2:a0:12:00:63:b5:a5:75:0c:da:e7:78:a9:a6:9a:
                    71:52:5c:20:a7:4f:9d:9d:e4:0d:f2:6b:e7:8d:11:
                    2e:f0:21:f5:b6:da:c3:ca:5e:0f:42:0e:59:55:23:
                    04:3d:5f:30:86:93:76:02:a7:d3:ff:93:1f:fe:ae:
                    e1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:06:4F:F4:6B:F8:E6:D1:AA:53:F2:28:15:9E:46:D3:47:36:5E:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/981941e9-04ed-3370-8f84-f1ee140edc86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:32:8f:e2:c6:f9:2a:95:e8:a8:a1:08:d2:72:ef:80:eb:5f:
         04:87:22:30:da:15:e3:b5:67:4d:65:dd:42:ed:31:0b:d6:29:
         89:7a:61:75:76:e4:2e:30:ec:a2:44:4b:24:9a:0c:65:af:c2:
         f6:54:8c:bb:83:8b:b9:a4:6c:64:c8:72:60:fb:3d:66:3a:64:
         65:3a:3a:0f:7f:3c:02:4c:f7:10:94:3c:71:c2:43:43:db:85:
         d0:99:84:7a:70:9f:a3:54:90:bd:bc:86:a5:50:bf:07:7a:95:
         20:da:3f:ab:8a:3d:2d:d8:4d:61:1e:58:d5:a9:b6:db:a9:b7:
         46:a0:d5:2f:a1:b1:09:ea:2e:50:b6:98:aa:25:17:fd:43:09:
         05:23:ff:42:12:c7:8f:08:9d:39:53:61:47:df:08:3d:96:29:
         b8:b1:d8:51:65:46:a3:bf:02:62:85:03:ac:5f:53:e4:7a:c4:
         26:9e:3c:45:94:7a:83:ee:e3:f3:cb:f3:20:c9:0c:16:82:2e:
         fa:e2:73:4c:32:3f:24:d6:c6:e1:f6:2c:b9:6a:8e:bb:30:dc:
         87:1f:a9:da:14:1a:b3:1a:5e:b3:1e:3c:13:e9:98:12:0b:ea:
         3e:d3:d3:25:83:9d:5c:23:05:81:3b:cc:ad:7d:de:91:6c:ee:
         27:ea:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:27:39 2026 by rpki-client