Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/edb2ab9e-4706-329c-8888-9433ab2b557e.roa
File:                     edb2ab9e-4706-329c-8888-9433ab2b557e.roa (raw, json)
Hash identifier:          7NOQXPMA0tUn4G3B1Oh7mVECN+Govrnkztep1daxrso=
Subject key identifier:   5D:AE:FE:69:EA:B9:A1:1C:6B:72:8B:80:C7:D7:9A:C0:A4:88:C8:5A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E3F3325FD38E38A41B320
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/edb2ab9e-4706-329c-8888-9433ab2b557e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.20.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:3f:33:25:fd:38:e3:8a:41:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a25c1b3c-3bff-486c-8269-8b606c3a3446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:d8:f7:15:5f:28:88:cf:8c:eb:86:87:ce:
                    c1:18:b2:e6:dd:2f:0e:47:e4:84:36:db:dd:08:5c:
                    c6:d6:2b:fb:b6:95:ae:0d:89:b6:fc:a1:65:ee:fe:
                    9b:a8:5f:80:3d:87:54:30:37:d2:24:8c:94:f1:c5:
                    46:61:85:24:94:7f:91:1e:32:97:f5:65:9f:0a:86:
                    4f:7d:73:34:28:c7:4f:72:ee:b7:a0:a8:01:d4:79:
                    0c:c2:67:30:56:ed:31:6c:62:5b:53:c1:3a:0e:41:
                    d9:4b:d2:f2:84:d1:06:91:70:46:2b:28:6d:6b:e1:
                    8e:5d:d0:11:09:b0:cb:eb:22:a8:9e:00:cf:a6:7a:
                    85:c7:9a:04:f0:61:53:7a:43:07:ee:30:39:06:0a:
                    cf:5d:9a:bc:61:16:7e:d0:e1:19:7e:fa:50:14:5b:
                    61:36:c2:f6:94:59:e1:ab:78:80:9d:39:16:a8:fd:
                    26:59:69:35:5b:04:d5:59:88:8f:76:66:78:41:16:
                    c3:eb:8c:05:5f:40:43:b0:c4:bb:61:e5:29:d6:5f:
                    c6:e8:c0:2b:62:a5:48:27:48:4e:77:7c:65:93:ee:
                    98:b1:d0:4c:b1:82:c8:30:6c:53:45:26:bf:11:44:
                    bf:3a:88:a5:40:80:4b:4c:23:95:6c:28:1f:8a:35:
                    42:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AE:FE:69:EA:B9:A1:1C:6B:72:8B:80:C7:D7:9A:C0:A4:88:C8:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/edb2ab9e-4706-329c-8888-9433ab2b557e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:13:e4:26:b2:4d:ce:7f:92:64:5a:51:df:7e:6f:bd:eb:20:
         02:7a:71:83:db:cb:20:5a:3a:ec:0f:7d:ac:7b:3a:a6:b9:bc:
         ea:b0:90:3f:18:54:42:88:63:55:7f:49:c4:07:07:3b:37:35:
         24:84:76:62:77:67:1a:b6:f6:2d:84:51:7c:25:e7:c6:d8:f7:
         df:41:f2:d1:53:79:9b:0f:c2:e3:d4:3a:31:99:0d:d8:6d:30:
         33:83:a4:d5:c2:9f:7a:2c:a0:e3:ea:5f:13:4e:62:c6:6e:2c:
         dc:47:d3:ae:dd:45:71:6f:72:37:0a:64:12:af:b0:71:47:4d:
         e9:44:fa:27:1c:c0:64:f7:b4:43:a5:32:1e:a1:45:74:ad:3e:
         74:93:1b:75:69:2f:b9:c4:24:72:d0:5b:09:ca:92:3a:1b:67:
         3d:4d:55:d0:55:f0:f3:9b:47:35:2c:ba:90:26:4d:3b:07:34:
         44:3b:b8:6b:a7:b7:2d:8f:cc:25:e4:b4:72:96:b1:aa:85:5b:
         91:66:e2:80:74:0e:19:5a:42:c2:88:a5:6b:fd:51:44:40:66:
         f9:27:31:b7:35:41:c3:62:33:4f:f7:b2:77:e9:5b:a1:9c:64:
         0c:88:c6:cb:c0:6a:74:91:4c:14:ae:02:81:93:8d:19:93:ab:
         1e:40:4f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:43:34 2026 by rpki-client