Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cb1347-1871-37e3-b974-20f869f40c52.roa
File:                     a6cb1347-1871-37e3-b974-20f869f40c52.roa (raw, json)
Hash identifier:          dRoHkWXWYMdCAKaKkaMsus9UJw59ePF4SeW/fhi+Yy8=
Subject key identifier:   A0:DC:8B:0D:9D:88:3B:E0:6C:3C:19:B6:4F:A8:67:E8:93:33:35:35
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C196047B1DFAE8276EB40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cb1347-1871-37e3-b974-20f869f40c52.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        172.242.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:19:60:47:b1:df:ae:82:76:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=2e1ebe6e-4ee1-419a-9225-52b5106a7cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:11:4e:00:28:d7:2a:65:6f:21:91:94:39:
                    f4:56:58:3a:69:73:ae:6b:39:ca:2e:82:4c:ff:a4:
                    e5:3d:a6:23:ab:09:c7:fd:82:61:2d:d4:51:4e:07:
                    48:68:5e:f3:4a:c7:f5:88:eb:0d:ae:92:1f:f6:ed:
                    88:35:58:6d:47:ca:eb:c0:1f:af:a5:de:b3:8f:fb:
                    e6:49:ff:56:1d:90:1c:00:27:ae:b9:2a:3f:f7:4e:
                    b3:d2:f3:dc:1c:30:03:61:a9:74:25:fc:c2:7d:6c:
                    e1:55:09:07:2a:9b:6e:47:c0:ff:9b:5d:a7:6f:16:
                    88:5e:1a:cf:d1:02:ba:75:44:c5:bd:2d:db:3f:b2:
                    be:90:b3:3a:e1:2d:08:84:2b:f2:c5:1f:41:7c:1e:
                    83:fa:d5:93:37:59:d3:62:2f:69:ac:ee:9a:2f:06:
                    98:ec:e2:24:4e:43:47:76:81:5d:44:aa:58:45:79:
                    73:78:b7:9f:84:ed:f4:eb:69:85:b7:3a:73:fd:51:
                    68:f6:51:02:c5:67:62:9d:21:0f:f8:5e:0b:e3:91:
                    fb:40:54:a7:42:03:8e:a5:d4:86:ce:15:83:ce:12:
                    70:c8:d7:75:b1:71:71:a9:e6:e7:8d:c1:34:2a:00:
                    bf:33:32:e2:65:5f:79:b2:5b:cb:77:07:a1:c8:ff:
                    42:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DC:8B:0D:9D:88:3B:E0:6C:3C:19:B6:4F:A8:67:E8:93:33:35:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cb1347-1871-37e3-b974-20f869f40c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f3:f3:a7:29:99:87:5a:1f:68:27:da:3a:a7:55:3a:8e:d5:
         28:32:02:30:c3:82:42:ba:3d:98:9d:39:f9:18:dc:f3:2d:7d:
         0f:fa:32:a1:78:e1:43:e9:01:ca:5d:47:a6:9c:b3:80:72:5b:
         19:e1:69:7e:f9:d5:2c:99:6f:59:36:10:36:81:c0:6b:ad:1a:
         94:1b:8b:04:9c:97:6d:88:80:66:e3:35:f0:61:ee:89:ce:05:
         4e:93:d7:1a:44:e8:ce:d0:c2:e1:be:56:9f:bc:be:87:68:83:
         45:fc:21:fa:55:bc:35:89:40:fe:af:23:cc:d2:14:1b:41:04:
         1e:e2:fe:e0:1e:df:0d:6f:0d:f4:f6:23:20:7c:26:84:dd:95:
         de:ab:36:c3:ff:5c:0b:ea:fe:9e:49:8f:38:99:e5:44:58:d9:
         33:f1:09:d6:d2:c9:01:b7:a6:bc:76:4d:9a:02:9f:a6:47:8f:
         0a:b4:1b:ea:8a:59:0f:02:e9:9f:f8:96:53:aa:de:65:fe:f1:
         d7:61:81:f0:06:0a:86:94:02:30:f9:d6:c8:d0:e5:8a:06:e7:
         b4:b2:ff:d6:b9:fe:37:f6:f1:03:b5:9b:58:19:92:3e:7d:af:
         1a:76:14:75:a0:5d:79:f2:1d:6a:1a:ef:82:e4:60:35:09:7c:
         77:6d:c2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:26:43 2026 by rpki-client