Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bcac6b8-46ae-3f88-85ed-15cbcb1a4005.roa
File:                     9bcac6b8-46ae-3f88-85ed-15cbcb1a4005.roa (raw, json)
Hash identifier:          bg2uLMTceSzjx4agPHJPAF6TqKuju6veAuwKCGKF3rg=
Subject key identifier:   6A:13:3B:D3:34:F0:57:DA:99:78:A8:EB:10:0A:1F:4A:6E:0A:C2:0C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E024CE396A0E466AC76C20
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bcac6b8-46ae-3f88-85ed-15cbcb1a4005.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.63.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:24:ce:39:6a:0e:46:6a:c7:6c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=95b04346-bf5b-43e5-876b-2cf3e01c6093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bc:a0:82:ee:d7:ef:86:95:33:cd:9f:90:ff:
                    46:fe:b6:43:36:2d:1b:1c:6a:ca:20:ab:66:82:74:
                    c7:ca:ab:fe:70:b1:ec:bf:e4:f3:fe:08:da:08:98:
                    5c:8a:00:46:76:19:db:a1:c4:2a:7b:d5:0d:b9:1b:
                    dd:95:97:08:79:f3:ff:45:84:f4:0f:3f:56:d7:13:
                    e8:4b:ff:11:3d:ce:36:ae:b3:02:53:48:91:b6:66:
                    7c:b6:a1:d0:ab:67:e4:8c:ee:d6:1f:c8:bd:e5:40:
                    09:20:6b:bf:fa:87:df:af:6d:57:7f:8c:c6:ad:97:
                    76:9f:72:05:bb:31:11:8a:91:f3:4c:58:44:cf:e2:
                    98:f8:f1:b5:2f:ed:59:ab:76:f5:e7:96:93:91:7c:
                    2c:79:f4:11:93:d0:8d:fc:fe:72:8e:da:06:d7:5c:
                    5d:bb:ae:d4:3a:19:ca:96:44:16:02:fd:b8:d8:f5:
                    22:fa:b2:5f:8e:5d:ca:eb:f8:ce:c1:e2:46:73:77:
                    23:f5:4f:6d:86:e1:8d:3c:39:25:5a:df:d9:dc:13:
                    d6:52:a6:b9:05:b2:27:f9:f4:7b:50:89:e5:de:21:
                    4c:8b:79:d9:ac:d1:8b:41:a5:55:ce:d8:71:42:b5:
                    3a:63:72:c6:a8:4b:bf:e4:29:32:35:2c:67:e3:8b:
                    fd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:13:3B:D3:34:F0:57:DA:99:78:A8:EB:10:0A:1F:4A:6E:0A:C2:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bcac6b8-46ae-3f88-85ed-15cbcb1a4005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ba:e3:51:7f:94:be:27:f8:31:a5:23:05:fa:d0:60:f7:76:
         1a:3c:2d:44:81:5b:d8:6f:96:8d:0d:41:6f:5b:9d:42:6d:41:
         07:ed:5a:ae:50:28:c9:94:d1:21:41:fc:d0:62:58:90:76:c6:
         a4:0f:52:87:17:27:3f:2e:36:3a:49:7e:3a:58:b9:a7:3f:c0:
         58:09:4c:ee:b4:f4:9b:5a:16:e2:1e:69:cb:94:05:1a:ab:f1:
         25:c4:e4:75:d3:09:26:b3:8d:11:af:31:78:0e:12:a7:d5:20:
         88:6a:ef:0d:5f:fa:59:a2:5b:d8:0a:f8:e8:9d:d5:8a:4b:37:
         4e:f5:d0:ea:e1:a8:66:c5:51:47:18:04:13:36:24:84:c3:a0:
         e0:4a:b8:16:8d:a9:0b:85:7b:89:ca:71:c5:56:fc:e5:b3:73:
         68:f2:2f:3b:2f:95:ee:87:7a:59:17:2e:c5:05:24:e6:8e:1a:
         7c:fd:66:6f:4c:c5:cf:86:6e:c2:79:ae:b2:23:f0:48:df:9b:
         4b:1a:23:3e:03:9a:97:8a:c5:d8:c9:10:93:90:9d:e9:1d:c4:
         e6:c0:cb:9e:c3:01:b4:1e:f0:96:0d:de:05:31:10:e6:33:3d:
         25:ad:0c:96:f4:14:33:4e:8c:3b:93:73:1c:6a:99:9b:fd:73:
         39:47:18:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:40 2026 by rpki-client