Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8436be2-c6c0-36ca-8dcc-b74965736429.roa
File:                     f8436be2-c6c0-36ca-8dcc-b74965736429.roa (raw, json)
Hash identifier:          1TyZAIzUQ+vFv7JOdTSEBbLio8iiEMmoqOVJJOdz8Y8=
Subject key identifier:   45:75:29:3A:C8:7F:0C:BA:EF:5E:53:75:59:6E:3E:1D:D0:9B:8D:1E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E01604B942C1476DB3CA30
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8436be2-c6c0-36ca-8dcc-b74965736429.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.62.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:16:04:b9:42:c1:47:6d:b3:ca:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=74be9c24-d002-4084-838d-c8a16b14dd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:12:31:5f:3a:7e:7e:8d:e1:de:cc:4d:47:78:
                    12:d6:25:e7:0d:22:db:c4:5c:4c:a5:15:ca:dc:8c:
                    ce:5d:71:63:d6:f3:02:4a:61:0c:65:b3:70:b4:81:
                    67:37:dd:25:7d:e0:10:ea:1f:d7:0e:cc:af:d8:f7:
                    96:08:70:5d:67:41:36:e9:0c:2e:18:16:93:f8:58:
                    b9:cf:01:6b:7f:35:ca:95:04:5b:c1:a5:29:44:09:
                    67:34:57:0e:b5:cd:b9:5d:cc:f9:d4:ca:37:b1:ff:
                    fc:6f:f2:8a:c6:42:20:11:82:1b:71:a2:50:ed:33:
                    4c:ca:0d:5a:bc:0c:d1:d5:e9:f4:fc:5c:38:66:61:
                    f3:0f:d5:88:15:5a:74:99:42:25:d7:56:c9:7f:14:
                    55:80:d1:e3:b0:69:c1:ba:c7:af:3f:db:ab:43:70:
                    ac:a8:5e:4e:83:b9:19:62:2b:b9:6b:75:cc:59:e3:
                    3e:2d:0a:8f:a6:0f:93:8a:a5:ab:f4:62:a0:33:ca:
                    b0:72:d9:c4:40:2f:4f:b2:34:6c:df:0b:e9:12:a2:
                    fb:cb:b0:d2:79:0b:90:fe:67:60:86:7e:d2:64:49:
                    3c:59:af:cc:d6:4b:3e:b4:c4:3d:10:7f:f9:f2:7d:
                    9f:14:ce:89:de:21:e9:47:c3:b2:2f:09:26:36:68:
                    16:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:75:29:3A:C8:7F:0C:BA:EF:5E:53:75:59:6E:3E:1D:D0:9B:8D:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8436be2-c6c0-36ca-8dcc-b74965736429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b0:d6:54:20:25:88:48:22:3a:fd:ed:4c:7b:b5:28:d5:7b:
         ee:c3:fc:ae:11:32:e3:cf:15:f7:7e:21:54:17:47:42:af:40:
         67:0a:ce:bc:a5:2f:2b:30:d2:4b:4f:57:55:e4:71:50:b7:24:
         b7:95:43:02:ca:8e:4a:cf:0c:9d:b2:98:56:34:0c:11:22:4d:
         3e:13:52:06:e2:ad:6e:9a:60:50:af:80:4a:f9:d4:bf:5d:9d:
         61:2e:f0:3d:d4:6f:bf:6e:ef:65:10:a2:0f:38:dd:22:f5:fc:
         b1:d8:73:cf:db:15:8b:01:b0:5f:df:fc:9a:b8:40:3e:26:68:
         86:ee:9a:fc:8a:85:3c:19:da:85:6c:0c:0b:e1:f9:5b:03:73:
         a4:af:9f:00:34:e8:b1:57:2e:80:01:65:bf:d3:82:da:a2:1c:
         f6:14:e0:d0:b9:82:4f:32:57:b7:d3:42:1e:a1:46:e3:85:5e:
         bd:5d:59:b4:04:83:37:7a:1f:9b:a0:ca:26:53:bf:90:ef:57:
         7f:11:34:2c:11:40:23:ce:5d:83:6b:0e:d0:ee:49:53:7b:62:
         e7:9b:b6:bd:75:f4:a9:56:ed:de:11:9a:18:5f:6e:7f:47:4a:
         a0:48:a2:b5:28:35:5e:13:b2:aa:ff:80:1b:ed:45:d5:4e:b6:
         21:a2:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:07 2026 by rpki-client