Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b54d34ff-3e96-37cd-a3f9-34325985087c.roa
File:                     b54d34ff-3e96-37cd-a3f9-34325985087c.roa (raw, json)
Hash identifier:          jhjjqc7MGIoJmfdnlhn9+cF5vQdZCzQrxKibGi0w+CM=
Subject key identifier:   85:FD:CE:13:2B:39:55:8C:6B:3E:D8:1C:24:D9:9A:AF:F0:FE:4B:4A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0CF1270A342ABE7040D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b54d34ff-3e96-37cd-a3f9-34325985087c.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.62.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:cf:12:70:a3:42:ab:e7:04:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=f70c439e-2a68-4d6e-b06f-8d565400dd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:09:63:fc:0a:b4:cb:72:81:49:52:e1:49:
                    2f:60:44:53:00:9a:cf:03:e9:f3:99:d2:94:10:d4:
                    e1:53:42:b3:e1:82:9c:db:60:80:8d:4c:df:5d:28:
                    21:7b:67:38:b3:c8:d0:9f:7b:be:48:79:4f:98:77:
                    40:c6:0f:54:78:d7:7b:17:4e:ac:8f:99:eb:da:c7:
                    0a:de:f4:95:7f:b9:c5:97:1b:dd:6e:26:26:ae:fe:
                    d5:54:93:e9:2f:d7:88:51:10:e1:8c:f3:65:5d:56:
                    d2:56:32:b3:9c:b1:8a:a9:74:b5:af:43:fb:1a:78:
                    34:c6:35:b2:5f:ee:26:f6:30:87:33:07:c5:d5:d6:
                    40:04:83:d8:8e:1a:10:0d:d2:97:22:58:38:58:40:
                    d5:b6:e8:b5:e0:cf:fa:10:f4:12:0c:81:4a:a0:3b:
                    7f:8c:c0:b7:1b:7e:cf:03:a6:b1:fd:6d:2b:5a:a7:
                    f6:91:9d:5f:77:60:af:04:d9:df:d6:58:dc:f9:39:
                    0c:5c:0d:e3:54:7f:19:5a:08:a0:da:a4:ed:9e:8b:
                    e1:49:40:b2:da:7d:cf:1b:b5:f5:bb:47:15:e4:a7:
                    25:c9:88:54:fe:60:14:6d:9a:50:d3:21:28:7e:a5:
                    6b:37:a0:b3:40:ef:c3:c1:5a:5a:22:7d:75:99:44:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FD:CE:13:2B:39:55:8C:6B:3E:D8:1C:24:D9:9A:AF:F0:FE:4B:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b54d34ff-3e96-37cd-a3f9-34325985087c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:1d:cd:b3:f5:32:a6:74:01:1d:9d:1c:eb:ba:cb:bd:fa:37:
         b4:b1:68:81:34:4a:1c:ca:6b:0f:bd:ca:e2:22:b6:d4:e7:55:
         0b:18:7f:bc:5e:c3:88:c3:2e:ff:f4:c6:c2:13:94:e1:c6:0d:
         d3:d4:aa:66:22:79:82:e0:86:9e:de:57:7c:55:43:b7:cd:a5:
         86:50:4b:de:10:56:6c:12:01:d3:fa:f8:55:8e:45:ef:bb:14:
         49:da:32:40:c4:9b:c3:11:d1:57:28:9f:f0:8a:95:ba:74:b3:
         3b:90:bf:37:64:e4:34:49:37:99:46:96:e6:0b:c7:a5:dd:78:
         0e:37:89:36:eb:f7:cf:27:1c:ce:8c:38:6d:9c:11:ab:24:5f:
         6e:fb:b8:15:6b:60:d3:86:55:96:f8:49:23:9b:47:b3:98:26:
         ef:18:0c:5a:1b:b7:1e:cd:4e:b2:91:c6:44:03:5b:e2:4d:c4:
         f4:f1:03:23:d5:2e:27:72:01:b4:97:e2:0d:4b:84:c3:10:68:
         bb:2c:b0:93:df:9b:da:8e:18:3c:8a:06:aa:28:99:42:39:91:
         6d:37:b2:82:44:0a:e0:5a:bf:e0:9f:08:9b:88:33:a8:fc:43:
         09:97:6d:21:e5:22:03:5f:56:69:02:ba:08:67:44:ab:dc:b6:
         d7:09:ba:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:13 2026 by rpki-client