Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0aac260c-3a3a-3ab3-91b1-eb0c507e9fbd.roa
File:                     0aac260c-3a3a-3ab3-91b1-eb0c507e9fbd.roa (raw, json)
Hash identifier:          l4dppUPYAqd/MjJRgcSY3kpA+KdMwAoWPWyKbclMPyQ=
Subject key identifier:   C5:3A:66:1E:3F:2F:73:0A:B9:9D:F1:2E:44:99:7F:ED:44:89:CC:17
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BB1539BE4D113F507E700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0aac260c-3a3a-3ab3-91b1-eb0c507e9fbd.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.63.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:b1:53:9b:e4:d1:13:f5:07:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=d0b2dcb1-d8b8-427f-bd8c-1c9f13e194d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:88:e0:71:af:66:8a:d8:e1:11:98:e1:18:
                    00:81:59:5e:5f:20:20:e0:ce:e0:02:a1:c0:01:40:
                    46:88:10:1b:8d:ea:d9:06:c6:0e:99:6a:fe:80:8c:
                    93:d3:9b:8b:af:d0:1e:b2:7a:23:2c:ae:2e:9e:26:
                    f8:0a:1f:38:c8:82:bc:74:82:96:96:38:3d:16:d5:
                    19:d1:14:db:34:07:76:6a:1c:1f:6b:6e:40:ff:b4:
                    25:64:b8:ac:db:52:9d:20:c6:d1:9e:61:bd:2f:3a:
                    c6:45:78:f3:75:6a:fb:cc:bf:ac:2d:56:13:32:ce:
                    4e:ff:ed:86:c7:29:e9:d0:e6:2f:fe:a4:0f:77:5f:
                    c4:40:80:b5:7e:02:9e:bb:bb:d3:64:f0:e9:d9:b1:
                    14:20:08:66:5f:e2:05:b2:0a:5e:0f:53:94:55:d2:
                    9c:86:e1:c9:b2:92:33:ad:76:52:4a:c2:43:a3:d8:
                    e0:5d:3f:5b:25:b7:ff:0a:12:0c:98:9e:3c:45:68:
                    30:ce:61:01:1c:03:d8:02:ed:4a:ee:15:59:6f:bd:
                    3c:7c:3d:6b:b5:87:31:e7:96:2e:ae:3f:2f:fd:9a:
                    85:9c:f8:8c:b0:07:18:2d:40:67:53:88:7d:5c:36:
                    b9:32:a3:a4:d7:c6:7d:c9:a8:c3:40:49:16:c2:8c:
                    62:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3A:66:1E:3F:2F:73:0A:B9:9D:F1:2E:44:99:7F:ED:44:89:CC:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0aac260c-3a3a-3ab3-91b1-eb0c507e9fbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:0c:b7:cf:d9:ca:7f:00:74:b1:37:8d:01:71:b1:79:1d:b7:
         c3:2f:a2:93:db:58:5e:64:f4:bd:29:2c:40:4e:5b:b4:6f:49:
         80:83:e6:2e:84:57:2d:f5:55:67:c3:73:e5:45:52:fb:bf:4b:
         4d:79:12:bb:9f:32:61:c5:54:4c:24:e3:43:4f:ba:02:ce:b9:
         47:bb:82:63:2c:d3:f9:35:69:21:5b:39:2b:ee:be:76:22:0a:
         8e:66:bd:89:81:89:d1:69:fc:38:2f:ff:9c:ad:23:b9:34:73:
         12:27:47:52:d4:f5:9b:a5:bb:24:0a:ef:68:26:f3:36:a9:52:
         38:e1:7d:34:5c:a7:27:bf:94:38:a0:be:64:4e:8c:0f:e6:4e:
         b9:a6:65:9f:df:97:38:9e:c9:0e:f1:66:7f:a1:41:ee:f2:eb:
         31:29:cc:8a:ff:db:70:89:3b:2b:93:d1:6f:f7:90:c6:b3:ed:
         a9:44:7a:6e:e2:35:e4:25:24:72:9a:af:fd:53:ff:92:06:7f:
         a1:ba:f4:4f:c5:e0:9c:5c:39:f2:b1:ff:3e:a2:77:0d:15:a5:
         f7:b4:4c:e8:8c:34:ce:1b:f7:4c:65:44:1d:7e:79:2f:db:67:
         fd:fd:b1:4b:0c:cf:c5:8a:09:86:96:bf:8f:fd:88:68:f7:82:
         3f:63:4a:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm7FTm+TRE/UH5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
ZDBiMmRjYjEtZDhiOC00MjdmLWJkOGMtMWM5ZjEzZTE5NGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2yI4HGvZorY4RGY4RgAgVleXyAg4M7gAqHA
AUBGiBAbjerZBsYOmWr+gIyT05uLr9AesnojLK4unib4Ch84yIK8dIKWljg9FtUZ
0RTbNAd2ahwfa25A/7QlZLis21KdIMbRnmG9LzrGRXjzdWr7zL+sLVYTMs5O/+2G
xynp0OYv/qQPd1/EQIC1fgKeu7vTZPDp2bEUIAhmX+IFsgpeD1OUVdKchuHJspIz
rXZSSsJDo9jgXT9bJbf/ChIMmJ48RWgwzmEBHAPYAu1K7hVZb708fD1rtYcx55Yu
rj8v/ZqFnPiMsAcYLUBnU4h9XDa5MqOk18Z9yajDQEkWwoxiQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMU6Zh4/L3MKuZ3xLkSZf+1EicwXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGFhYzI2MGMtM2EzYS0z
YWIzLTkxYjEtZWIwYzUwN2U5ZmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD8CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKoMt8/Zyn8AdLE3jQFxsXkdt8MvopPbWF5k9L0pLEBOW7RvSYCD5i6E
Vy31VWfDc+VFUvu/S015ErufMmHFVEwk40NPugLOuUe7gmMs0/k1aSFbOSvuvnYi
Co5mvYmBidFp/Dgv/5ytI7k0cxInR1LU9ZuluyQK72gm8zapUjjhfTRcpye/lDig
vmROjA/mTrmmZZ/flzieyQ7xZn+hQe7y6zEpzIr/23CJOyuT0W/3kMaz7alEem7i
NeQlJHKar/1T/5IGf6G69E/F4JxcOfKx/z6idw0Vpfe0TOiMNM4b90xlRB1+eS/b
Z/39sUsMz8WKCYaWv4/9iGj3gj9jSu4=
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:24:00 2026 by rpki-client