Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/eb572f04-9954-326a-ae86-3c2d4e3360c1.roa
File:                     eb572f04-9954-326a-ae86-3c2d4e3360c1.roa (raw, json)
Hash identifier:          S6J299HUUvE2aGtLIamGrKDpGWcZxmx6RwmsexD2AjQ=
Subject key identifier:   78:91:F0:43:BD:E2:96:66:A5:42:46:D1:C9:42:08:3B:0E:79:6F:31
Certificate issuer:       /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial:       010D0C9F4328584EA7916125E4BD6B2047419400
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/eb572f04-9954-326a-ae86-3c2d4e3360c1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400597
IP address blocks:        217.149.97.0/24 maxlen: 24
                          2602:fb1b:61::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:61:25:e4:bd:6b:20:47:41:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a17c24b5-ab24-471c-8758-be480fe8474f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:a9:71:b7:6b:d7:8c:36:5c:62:69:9a:39:
                    ea:25:52:7b:4d:76:a4:9a:af:19:6c:27:5c:04:f6:
                    a6:8b:61:b8:9d:11:c8:16:4a:7c:1a:50:81:35:29:
                    20:9a:ca:17:e0:83:43:23:92:5d:a5:9b:cf:35:f0:
                    09:5a:c5:5a:d5:72:92:72:21:51:86:e3:22:b7:45:
                    9d:cc:82:1a:d6:3b:45:49:f2:89:cc:dd:6f:12:2b:
                    71:bb:ab:47:4f:63:17:4e:1d:e9:83:6a:eb:8a:83:
                    af:5d:0b:d9:88:a3:dc:5c:f4:9e:ab:f2:8d:d2:11:
                    2d:b8:5d:6e:e4:a0:d5:e0:08:ce:1c:91:24:d6:f7:
                    c9:52:46:65:9b:7b:3a:03:5b:57:c8:52:24:89:62:
                    53:26:83:6e:dc:98:46:53:37:a9:dd:31:42:c5:65:
                    3a:ee:d5:d0:31:88:6f:c8:d3:9c:cb:68:25:d6:03:
                    b2:59:12:6c:52:22:8b:e5:3d:bf:df:c6:33:44:d8:
                    b3:be:e2:e3:37:47:32:4f:75:59:02:cf:de:01:b6:
                    2c:b6:f8:b0:a5:8d:ec:39:ce:ea:b8:e5:03:56:4e:
                    2e:ca:bd:19:98:0a:4f:fb:45:4b:2a:d9:b2:b2:ba:
                    fa:d2:5e:ab:f4:43:0d:0e:62:8a:42:1a:d0:0f:47:
                    e1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:91:F0:43:BD:E2:96:66:A5:42:46:D1:C9:42:08:3B:0E:79:6F:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/eb572f04-9954-326a-ae86-3c2d4e3360c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.149.97.0/24
                IPv6:
                  2602:fb1b:61::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:62:eb:b9:48:67:47:11:15:c6:49:0d:11:53:3d:3a:c8:b1:
         22:24:b4:e0:0c:45:74:02:90:94:bf:99:02:99:0a:c2:a3:03:
         d6:d9:22:eb:50:83:5d:ca:2b:9b:2e:5b:d3:0a:27:77:2f:2c:
         67:7f:1f:76:aa:f6:ce:61:6c:12:21:4f:0d:ba:29:36:af:4e:
         74:1f:20:5d:99:05:eb:10:73:4c:3d:8c:24:b3:7d:46:da:34:
         71:55:e1:83:f0:d7:ce:97:ef:6f:ba:7d:96:44:99:f2:4f:c1:
         e0:0e:df:ed:77:8c:00:4c:82:4e:7f:18:77:1e:a7:a7:c8:7f:
         00:13:38:52:49:5e:13:db:4c:6d:69:f8:be:68:3a:4f:78:0b:
         91:12:88:4a:8f:16:37:18:6d:43:c7:83:0b:3d:90:7d:dd:9d:
         7a:b1:f1:fd:d9:f5:20:04:bb:ae:21:c0:04:c6:b3:b4:05:6c:
         35:18:55:f3:bd:ee:f1:7d:a2:32:a9:cc:6b:09:86:21:3c:30:
         46:be:ec:00:8a:3b:ca:27:f6:42:2c:d3:9d:eb:d3:2b:e9:3f:
         83:5a:1d:62:03:18:f4:73:4a:9a:9d:a5:26:e7:9a:88:28:2b:
         68:f3:9a:b6:d0:27:32:40:f2:ce:bf:92:8e:e8:6b:60:9c:eb:
         3b:12:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:23:47 2026 by rpki-client