Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e063393a-feea-31d8-a0f0-955038576b9d.roa
File:                     e063393a-feea-31d8-a0f0-955038576b9d.roa (raw, json)
Hash identifier:          YaZWydEDVFi9UgP+moORkPj5LP719hG20zkOFhQK1cY=
Subject key identifier:   4F:6A:C3:90:E2:CE:53:23:EF:CE:CD:F0:B3:10:2C:51:A2:80:F3:00
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E5050F402424DF429BC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e063393a-feea-31d8-a0f0-955038576b9d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.21.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:50:50:f4:02:42:4d:f4:29:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ef4a2ee0-9474-4a7b-86c1-4715f3e9a55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bd:60:72:66:fa:b3:d6:e4:10:85:4b:53:d5:
                    54:a6:97:2e:d9:ab:d4:18:bc:68:1f:f4:e3:cb:b8:
                    38:b8:26:03:e6:97:28:ca:8b:d1:ca:6a:44:f1:cc:
                    8e:fe:15:b7:8b:c1:a1:e1:f1:6f:5f:ab:c8:be:1a:
                    0d:e2:02:45:64:81:b2:d3:63:77:6b:b9:b9:a7:96:
                    b5:be:11:78:8f:23:2f:9d:89:5d:13:9f:ff:63:16:
                    08:4b:bf:4b:c4:b4:d0:65:d3:d8:fb:d5:08:15:8a:
                    59:8e:e8:0c:b5:f8:9c:c4:a9:fc:06:e9:2f:e1:d9:
                    de:9d:ac:f3:19:b0:90:cf:aa:94:29:58:48:33:cb:
                    d5:40:eb:11:4c:a2:42:d7:a4:76:23:73:b9:49:c2:
                    d8:00:eb:a2:a7:d8:4d:30:12:e5:c2:e3:b0:e5:a4:
                    b7:42:a8:14:7b:22:6f:e2:f0:74:23:6c:23:05:52:
                    c2:aa:d2:35:7f:cf:09:0a:8c:dc:95:2d:b0:0b:59:
                    9d:a6:a1:c4:13:8d:f9:f0:fa:82:57:05:e6:76:bb:
                    1a:55:df:e6:b7:01:d7:12:aa:43:c1:a3:b4:14:a9:
                    4a:1b:22:ae:45:83:a5:3d:0b:b6:0c:7b:ee:3f:3b:
                    e3:0f:a2:eb:48:57:78:73:de:ea:30:d4:aa:43:77:
                    db:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6A:C3:90:E2:CE:53:23:EF:CE:CD:F0:B3:10:2C:51:A2:80:F3:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e063393a-feea-31d8-a0f0-955038576b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:6a:8a:34:bb:bb:d8:8e:78:e7:1e:cd:5d:4e:b8:63:5f:64:
         15:84:5e:e9:9b:3d:b6:b7:3f:ce:aa:92:28:5f:f8:1a:1c:9e:
         2e:45:05:24:cb:da:85:4d:e0:17:de:d4:67:56:ac:bb:39:0a:
         bf:c8:e1:7e:4b:43:a0:f3:8c:6f:c7:df:e3:57:bf:43:71:82:
         3b:46:5a:ff:9f:7d:f2:38:dd:61:78:9d:c5:f5:cb:3e:bc:80:
         31:b1:c9:12:20:0a:bb:ec:13:a6:4e:40:be:db:33:31:1b:de:
         49:8c:89:41:65:f7:c6:51:8f:73:30:8b:66:7a:04:21:ea:3a:
         ed:c1:b6:12:4a:3b:e4:eb:46:35:05:1d:c0:bb:2d:7d:30:ae:
         17:45:ed:cb:ac:03:2d:85:69:91:ba:2b:26:78:8d:30:77:7d:
         b3:24:c3:82:e9:c2:2e:11:e5:76:4c:ea:64:ae:66:9e:29:86:
         cb:b7:40:c8:b1:a3:b2:eb:1f:f6:1a:b4:f6:bc:64:75:21:ba:
         08:c1:b2:3a:b9:4d:56:16:47:e6:36:55:b9:51:8d:54:f5:71:
         05:75:64:c3:d9:c4:2e:f2:97:2d:6d:05:85:c7:43:8e:67:51:
         cb:fb:2e:61:d2:ab:f7:00:ae:39:d6:01:8c:57:f6:08:b4:d3:
         8d:65:c5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:44:12 2026 by rpki-client