Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99ff9f39-6f61-39f0-bfa6-efc77101bacb.roa
File:                     99ff9f39-6f61-39f0-bfa6-efc77101bacb.roa (raw, json)
Hash identifier:          wBvFgDjM8evoYfj+zBoo4x0xLaz2N8ZuChLQEFmPk6M=
Subject key identifier:   32:7C:5F:0E:BC:F0:D5:00:8D:1E:78:5B:64:17:13:0D:77:4E:A5:34
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C36DE2A4A1B3DD79E4480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99ff9f39-6f61-39f0-bfa6-efc77101bacb.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        198.45.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:36:de:2a:4a:1b:3d:d7:9e:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=8d60844e-36d9-45cb-8766-bbb603784bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:4b:19:0e:04:ec:3a:01:88:0b:ab:4c:8c:
                    32:1c:83:13:4b:4d:11:2a:a8:ea:a1:2f:9e:01:79:
                    d4:8f:e2:fc:43:ed:c1:48:48:5c:34:93:c4:3b:25:
                    c8:0d:da:20:15:94:45:dd:d0:12:b0:2c:2b:3c:21:
                    8c:56:64:49:45:6b:27:d7:7b:10:f5:fb:79:a2:7a:
                    22:63:4f:58:9f:f2:0e:f4:ad:a1:09:f2:20:ff:07:
                    74:d4:e6:20:ea:03:b9:17:c3:bc:70:e8:75:26:a0:
                    88:a7:8e:69:b7:fb:12:54:2e:3d:68:3a:81:26:d8:
                    7c:a4:c1:70:6d:ea:f3:83:3c:81:bc:ec:c3:99:db:
                    57:3a:64:21:d8:5c:84:59:d8:20:de:ec:df:aa:b2:
                    d6:12:36:00:6e:2a:9e:87:41:84:1a:64:bb:08:ff:
                    b4:cd:5e:22:76:5c:15:af:82:b8:d3:ee:0d:d5:53:
                    c6:36:e3:74:1c:08:f4:bb:1d:f6:a5:63:f0:73:0e:
                    10:e7:71:3a:a0:93:7e:51:5e:c7:2f:3c:45:b2:7e:
                    3f:03:b0:ee:fc:65:24:88:e1:01:ef:3e:95:d0:4a:
                    6e:22:3c:b6:e5:33:b9:61:29:fe:e7:06:60:78:0f:
                    ae:07:01:be:c8:09:80:77:a3:6f:a5:55:27:92:09:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7C:5F:0E:BC:F0:D5:00:8D:1E:78:5B:64:17:13:0D:77:4E:A5:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/99ff9f39-6f61-39f0-bfa6-efc77101bacb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:65:25:c5:bc:f8:3b:d8:15:50:08:c5:d2:b6:63:a8:2f:69:
         25:5b:90:08:8d:12:d8:d0:90:fe:6c:3e:f4:20:ab:1d:56:17:
         d6:f0:97:4b:33:9f:a0:49:b9:3b:64:0f:19:3d:88:2c:ba:56:
         58:2e:f0:ed:78:6c:8e:6b:14:f5:53:92:ce:49:1b:e3:98:fb:
         c6:9f:00:e9:91:a0:23:5c:26:70:6b:1d:3a:73:cb:98:5d:c1:
         b1:8f:f7:9c:0b:ac:9b:19:d4:dc:d2:dd:8e:df:e7:32:49:85:
         cb:40:fe:5c:1f:1b:db:8e:17:05:b2:de:27:0a:4b:cc:0b:71:
         eb:fb:cb:86:6e:b3:fd:58:38:17:75:f6:45:af:e3:2c:21:db:
         ff:2a:4e:ef:59:02:1e:08:45:b2:cc:4f:a6:60:fe:95:4b:02:
         27:a2:6b:2f:9f:90:44:57:9e:c1:15:61:6f:a5:d5:a0:79:72:
         71:90:f3:7f:aa:cb:55:4d:d0:5d:17:a3:5f:4e:df:d7:65:91:
         ff:31:35:08:f7:45:80:94:83:29:54:cc:ee:ae:33:8f:f7:29:
         39:6b:7c:9b:00:8c:fd:5c:73:15:ac:50:f0:b3:b3:14:f0:6e:
         cc:df:63:94:c0:61:4e:c3:3e:69:b1:09:cb:8a:46:e0:01:63:
         d1:15:61:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:23:28 2026 by rpki-client