Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e84d193b-3fba-3666-8930-53cc3c9a973b.roa
File:                     e84d193b-3fba-3666-8930-53cc3c9a973b.roa (raw, json)
Hash identifier:          SbYCW2cQ52XArPUw0GF7OT/UzQ4Xe08NmG4Ubu70oaM=
Subject key identifier:   DE:AE:E5:D3:16:D8:21:DD:A1:63:2D:5A:EF:85:4A:82:51:7A:47:F4
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B97C5914A50043664D400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e84d193b-3fba-3666-8930-53cc3c9a973b.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        172.242.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:97:c5:91:4a:50:04:36:64:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=07b33874-f02c-4975-b476-4a5888a522c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c8:22:0c:3f:a4:8c:98:db:97:d4:4b:db:a7:
                    1c:75:ca:e2:f9:c1:d2:e9:61:90:a5:7c:b8:82:53:
                    c8:59:53:89:10:7a:c0:3b:ed:8e:3f:1a:05:bb:22:
                    2e:b6:78:ef:4a:f4:ba:0b:b4:bc:1f:01:d2:5c:57:
                    ba:47:3c:1d:aa:1d:dc:6c:1a:43:51:4a:43:bb:07:
                    60:57:c8:01:1e:7f:04:2a:9b:88:0e:c4:ca:0e:c7:
                    47:6e:5e:38:32:11:ab:b8:d5:65:f8:a2:55:65:2c:
                    64:d4:a5:6b:c7:05:46:90:df:ce:11:69:13:f3:02:
                    68:77:27:ca:a2:7b:60:f9:bf:b2:e3:a0:45:b2:60:
                    f6:b9:cd:10:0f:2b:91:a8:bd:0e:0e:48:74:12:2e:
                    69:ff:ca:6b:57:1f:83:0a:d1:15:98:eb:30:17:a3:
                    73:8d:4a:af:8c:32:53:55:26:8b:79:f3:df:e4:b1:
                    d9:3d:29:ec:fe:99:5d:57:e5:a2:b6:6d:55:7c:de:
                    1c:1d:07:52:20:b9:e3:e0:d5:2e:13:a1:73:66:2c:
                    b8:5d:cd:99:71:54:f1:0c:09:7e:29:dd:3f:b3:66:
                    83:63:6d:79:09:b6:8c:56:26:a3:b1:ba:b6:ee:a0:
                    61:c4:29:15:71:22:52:e9:e5:58:95:30:74:bb:a3:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AE:E5:D3:16:D8:21:DD:A1:63:2D:5A:EF:85:4A:82:51:7A:47:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e84d193b-3fba-3666-8930-53cc3c9a973b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:40:cd:21:cc:a0:ff:ec:ab:ca:8d:d3:db:5f:3c:ff:f8:5f:
         37:8b:c9:93:51:1b:cb:c1:48:38:95:51:39:1f:bc:80:4d:4d:
         2b:52:d3:76:a0:7c:46:45:32:30:90:81:1d:6c:7a:38:3e:29:
         37:84:46:4d:a8:66:14:ba:2f:63:82:d2:3b:a1:f5:00:a4:96:
         ed:26:93:a3:92:15:24:66:1b:aa:fc:b4:84:78:27:cd:56:4c:
         93:35:49:62:76:da:14:c5:be:b3:9a:8a:50:c5:83:49:b6:07:
         18:42:77:ba:52:7b:74:d8:2e:81:2f:e5:53:45:a8:f1:e9:9a:
         9b:ab:2a:bf:2f:f3:c5:42:1d:f1:32:b3:17:dc:ff:c9:b2:c4:
         9a:0e:ac:b9:5f:d2:ac:5e:86:6e:c7:48:92:81:2a:1e:f9:86:
         bb:7b:a8:d9:a9:0b:9c:91:c6:0a:99:c6:b2:7f:92:41:bf:09:
         71:0c:e7:63:bc:ec:dd:5c:4a:eb:ff:83:ab:64:60:a5:0b:7d:
         00:b2:24:59:88:ca:54:96:f5:95:b5:7b:a9:26:31:db:cb:ae:
         48:13:7f:ba:46:60:e9:63:8d:2a:5b:a6:1d:de:54:c5:b2:1d:
         63:df:3a:2a:92:ea:e0:80:4d:ed:07:c9:24:1f:7f:96:b0:db:
         04:07:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:24:52 2026 by rpki-client