Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a89153c0-f3fb-31ad-8258-df6163370df5.roa
File:                     a89153c0-f3fb-31ad-8258-df6163370df5.roa (raw, json)
Hash identifier:          18TVHOyDKXyIPQwYe4v3uGNDd8Cm48gCNcPnpmQzzyY=
Subject key identifier:   FB:C3:FB:4D:02:9E:CB:DE:4E:30:48:E0:01:12:CA:AD:2F:99:57:16
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E0F830FB48F9CAF7E9280
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a89153c0-f3fb-31ad-8258-df6163370df5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        172.242.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:0f:83:0f:b4:8f:9c:af:7e:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7d0c8e75-3f29-4a15-8875-d1e543be1ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7c:59:24:9e:80:71:9c:72:56:0e:78:a3:04:
                    ce:b5:f5:a5:36:5f:4e:71:3b:5f:1a:c4:fc:ad:86:
                    93:47:e4:e3:ef:6c:98:a5:3c:b6:91:c8:22:99:44:
                    b7:3f:b2:d1:d9:17:09:b3:43:3c:2b:ae:e9:70:49:
                    8e:ce:6c:85:fe:ba:64:8d:d3:bf:8c:d0:5a:6c:33:
                    74:49:e8:44:0d:49:a4:7b:88:a6:c5:05:a3:e3:d4:
                    4a:88:97:0b:98:29:37:ad:ba:df:d2:06:fb:15:15:
                    0f:ab:38:16:55:3d:c5:34:61:68:89:62:20:66:7e:
                    d5:a1:c4:99:d1:43:db:07:f1:7c:b0:f6:d1:6a:fe:
                    74:de:b6:91:8e:b4:87:f6:91:0c:92:24:9d:fa:96:
                    5f:ec:c7:cc:d6:fe:7b:c4:e7:49:00:05:d3:bc:f8:
                    50:1b:69:c0:38:ce:e7:19:b3:95:5f:c9:28:b5:d3:
                    fc:8b:8b:3d:d1:11:98:e0:50:b6:a8:82:56:a8:79:
                    d9:17:60:bf:36:85:f8:49:3e:d5:b9:bb:99:a4:ef:
                    4c:aa:46:83:39:70:00:c9:3d:71:de:49:81:9a:e3:
                    22:c7:f4:29:67:9a:cb:cc:16:69:50:70:b5:17:01:
                    f1:66:74:4f:dd:6d:4e:d9:86:81:0d:78:40:ee:0e:
                    87:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C3:FB:4D:02:9E:CB:DE:4E:30:48:E0:01:12:CA:AD:2F:99:57:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a89153c0-f3fb-31ad-8258-df6163370df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:70:1b:12:94:8e:85:36:75:74:2d:0a:91:e8:0e:89:92:a7:
         cb:18:5b:82:c1:8c:d4:e3:58:77:42:4a:ad:a8:ee:fc:29:f6:
         51:eb:08:d9:22:61:10:fd:ee:26:a9:d5:84:a5:e7:26:ab:5b:
         a1:e7:c5:a4:5d:15:5f:3a:72:3b:57:87:c9:45:8e:49:e3:0a:
         6a:b9:d1:be:5d:48:d9:15:7e:4d:dd:3b:6b:85:d4:35:41:09:
         ce:16:7e:27:fe:92:b8:9e:c3:a1:f9:e1:a7:11:3e:8b:02:68:
         a3:14:76:0c:a0:b9:48:4e:0c:5c:50:52:ba:92:70:b6:b7:87:
         7a:0a:db:08:a1:5e:45:10:5c:c4:c2:c1:68:66:4a:c9:bf:13:
         3a:0c:f1:4d:50:50:e1:bf:8d:46:3b:6e:1f:3d:fc:45:c6:d6:
         04:67:01:0a:6c:4d:16:4d:e1:3d:21:b6:a0:3f:bc:07:3d:da:
         1b:82:b5:35:25:1f:64:40:e9:ef:43:a0:f6:c8:c2:8c:6a:bf:
         04:19:13:bf:86:98:08:c8:36:86:6c:83:8a:95:17:ef:9e:50:
         bf:08:9e:59:b4:59:41:60:36:dd:0d:3b:80:6c:81:41:3d:45:
         76:53:86:97:6f:32:39:23:57:0b:5a:e1:a8:9e:bd:78:b5:46:
         c3:26:62:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:43:13 2026 by rpki-client