Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c0be75f2-42f2-3a43-b650-22fdd3038953.roa
File:                     c0be75f2-42f2-3a43-b650-22fdd3038953.roa (raw, json)
Hash identifier:          OEceHL6ESAiUsN+Fg/PeCMCFEQ3FE6MG3C3p/Sd1Glk=
Subject key identifier:   BF:75:B2:A1:83:93:5F:B6:11:C8:40:C2:1C:AB:0D:00:FB:C6:91:34
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B5F8050E6E786217CF300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c0be75f2-42f2-3a43-b650-22fdd3038953.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        67.54.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:5f:80:50:e6:e7:86:21:7c:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=e1304761-847a-4bfc-8c47-7f622128d102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:87:bb:05:0b:1b:58:bc:86:46:46:d7:cb:
                    36:e7:8b:4e:26:5c:8f:ad:97:bd:cf:64:a8:6c:16:
                    a4:3b:8e:76:39:b7:d4:10:ad:b3:cf:14:91:f3:c6:
                    32:45:e4:27:e5:6a:a3:72:2f:63:e0:f9:a0:96:3c:
                    a9:f0:8e:6d:2a:95:24:cb:bf:88:a4:15:40:7f:a8:
                    10:b7:9d:39:f4:24:46:2f:48:24:3f:40:e6:dc:19:
                    21:c4:32:96:86:bf:4a:c7:66:29:a8:53:31:f4:70:
                    ae:11:ad:d1:87:b7:3a:f4:1e:c0:03:e7:9d:67:49:
                    b1:fc:d9:59:71:d3:f1:95:21:f6:73:2e:35:9f:01:
                    01:85:b7:bf:45:54:8b:a8:d5:74:70:36:d1:0e:fb:
                    cf:25:49:ea:9a:13:66:1f:3d:a4:d3:2d:92:ce:2b:
                    19:00:08:a0:70:e8:a2:ef:1f:1e:0e:49:93:7b:b2:
                    5b:5d:82:9f:7c:0c:bc:a8:5e:98:d5:95:e2:be:72:
                    ac:48:73:af:87:9f:79:b2:39:30:05:94:82:8f:46:
                    3a:71:a4:12:58:c1:a2:ab:2f:1d:c7:4f:88:10:24:
                    01:0c:39:f9:74:87:06:37:42:17:6b:a8:2b:84:c9:
                    fb:fc:93:a7:97:10:75:85:d2:26:50:60:cc:e4:da:
                    6a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:75:B2:A1:83:93:5F:B6:11:C8:40:C2:1C:AB:0D:00:FB:C6:91:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c0be75f2-42f2-3a43-b650-22fdd3038953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:af:fc:7f:4f:74:9a:e8:cf:74:40:2c:50:f5:06:19:11:8d:
         10:9f:f4:dc:12:9f:e1:78:50:d1:eb:59:78:8a:a6:8e:f1:2b:
         7a:82:f3:d6:e5:af:65:02:32:bb:b0:c9:bf:c0:54:9e:19:56:
         12:a5:ed:4b:63:b8:7e:e5:df:4c:e8:e6:33:f9:be:a3:99:98:
         e6:ce:98:0c:a9:d9:da:1d:9c:ab:5f:48:15:aa:12:eb:92:89:
         33:f7:81:66:85:ef:ac:86:99:be:cd:fa:6d:68:f1:09:22:e2:
         24:e1:e2:a7:ee:50:3b:83:fb:70:ad:d1:b0:1a:ae:8a:9c:aa:
         fc:60:d2:6e:d9:3c:55:21:d6:48:b6:a8:f1:eb:3a:f3:08:26:
         d6:fb:f1:b9:fb:02:54:c0:4e:9b:d5:f8:81:f8:56:f5:0e:9d:
         ec:2b:e1:98:e4:9d:df:2e:6c:a7:53:19:cd:59:28:49:1b:ed:
         72:ff:3d:b7:e2:fa:53:9f:60:51:9b:b8:ff:9a:31:19:bd:14:
         40:57:bd:d3:12:1b:c8:57:65:ef:75:23:7b:02:22:e6:12:1a:
         ef:20:a5:8d:78:e5:84:4a:f6:1d:0d:3c:23:6d:34:a2:30:d1:
         e4:b3:9a:0a:df:fc:5f:24:b5:f1:a1:91:4d:cc:ed:92:07:40:
         18:13:4a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:25:49 2026 by rpki-client