Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14b2c634-3c52-31a5-b354-a6a662443b39.roa
File:                     14b2c634-3c52-31a5-b354-a6a662443b39.roa (raw, json)
Hash identifier:          MWm3mnZJeVYWiYQI9bgLfCvleJBcA8DdD66V88OT9bE=
Subject key identifier:   DB:C6:27:A4:2F:C6:C1:46:A2:BE:FA:77:17:C5:29:4E:60:6B:FF:A6
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B8CAB48F91C37669BA460
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14b2c634-3c52-31a5-b354-a6a662443b39.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.197.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:8c:ab:48:f9:1c:37:66:9b:a4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=12378372-d655-4bc3-9c41-c8444eebacc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:30:07:3d:55:36:cc:cd:a5:e4:9d:8d:01:99:
                    d1:18:1e:2d:58:21:e2:b0:61:01:15:41:04:2d:d6:
                    15:0d:03:cc:8d:e5:7f:aa:5f:c7:9b:05:9b:03:e0:
                    f8:a2:4b:9f:38:7d:de:58:64:78:3d:d3:a0:4e:a3:
                    c8:73:1c:95:c0:62:bb:0c:da:a9:04:e3:c3:a9:ef:
                    3b:fd:21:cf:3c:5f:59:90:57:75:7c:9d:25:26:3d:
                    a0:0e:41:51:94:99:a3:80:3c:f9:c5:84:fb:54:1e:
                    82:b1:83:80:f9:e9:82:40:30:23:24:9b:57:ca:26:
                    de:f7:cb:41:64:08:65:c8:0b:5b:bc:aa:23:47:73:
                    a3:f6:d6:3a:5f:b9:08:cf:ca:8c:bf:69:0b:2e:00:
                    33:74:db:f6:00:90:6c:ed:33:12:ce:9e:00:16:c8:
                    63:c4:61:78:e9:36:c4:cb:70:99:b5:26:6e:b2:df:
                    70:bd:3f:8a:97:50:8c:00:d4:e1:25:1b:14:92:2b:
                    4f:de:6f:a4:de:98:d6:66:fa:c0:0c:4e:97:29:d2:
                    f1:72:f9:c2:05:5f:9d:79:bb:21:45:82:30:7a:b0:
                    0e:97:57:42:94:e8:f6:2b:02:9f:31:5a:5e:ca:03:
                    44:f7:ba:07:4f:d1:98:9d:07:5c:5d:8e:fd:1d:67:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C6:27:A4:2F:C6:C1:46:A2:BE:FA:77:17:C5:29:4E:60:6B:FF:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/14b2c634-3c52-31a5-b354-a6a662443b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:6c:0c:d2:e0:bd:1d:ee:55:87:bf:50:c0:c1:da:70:23:fa:
         9a:29:c0:d7:2c:31:e9:73:40:49:0e:3f:7b:a2:74:c8:61:34:
         30:87:24:8e:7f:5a:be:e6:9c:c8:df:07:b2:62:e5:99:e5:98:
         31:32:7a:c4:52:14:8b:2b:10:57:25:28:b0:be:0c:91:fc:22:
         0b:cd:fc:cb:e2:fd:07:7d:0d:f6:92:bf:f5:17:4b:36:b2:7a:
         9b:c6:5b:56:a0:f0:58:e9:13:bc:e8:ea:92:35:0d:e0:98:7b:
         73:c2:4e:a4:4e:28:21:6b:3c:0b:06:91:4d:c7:7f:3a:d2:69:
         43:5f:d5:db:1b:7b:4f:13:0f:b2:28:28:33:7b:d9:62:ef:9d:
         70:c1:2b:f0:42:aa:78:11:2f:76:fa:b3:83:e0:29:50:ae:11:
         bd:a8:65:7a:da:d3:0e:f1:aa:77:3d:e8:27:e4:68:14:43:3f:
         26:38:25:a7:e5:78:a7:c9:23:76:e3:c0:73:b5:58:2f:35:c8:
         9a:97:ec:e4:48:d5:76:53:f3:27:7a:2c:2d:16:9e:c9:4e:c9:
         2c:f6:66:a4:2d:ee:04:ec:30:0a:4a:9d:a7:5e:48:32:83:22:
         2b:71:29:d9:fb:4d:33:31:87:b1:5f:69:f5:76:06:3b:7e:25:
         ba:3f:e0:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm4yrSPkcN2abpGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
MTIzNzgzNzItZDY1NS00YmMzLTljNDEtYzg0NDRlZWJhY2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DAHPVU2zM2l5J2NAZnRGB4tWCHisGEBFUEE
LdYVDQPMjeV/ql/HmwWbA+D4okufOH3eWGR4PdOgTqPIcxyVwGK7DNqpBOPDqe87
/SHPPF9ZkFd1fJ0lJj2gDkFRlJmjgDz5xYT7VB6CsYOA+emCQDAjJJtXyibe98tB
ZAhlyAtbvKojR3Oj9tY6X7kIz8qMv2kLLgAzdNv2AJBs7TMSzp4AFshjxGF46TbE
y3CZtSZust9wvT+Kl1CMANThJRsUkitP3m+k3pjWZvrADE6XKdLxcvnCBV+debsh
RYIwerAOl1dClOj2KwKfMVpeygNE97oHT9GYnQdcXY79HWeiDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNvGJ6QvxsFGor76dxfFKU5ga/+mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTRiMmM2MzQtM2M1Mi0z
MWE1LWIzNTQtYTZhNjYyNDQzYjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8XAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKJsDNLgvR3uVYe/UMDB2nAj+popwNcsMelzQEkOP3uidMhhNDCHJI5/
Wr7mnMjfB7Ji5ZnlmDEyesRSFIsrEFclKLC+DJH8IgvN/Mvi/Qd9DfaSv/UXSzay
epvGW1ag8FjpE7zo6pI1DeCYe3PCTqROKCFrPAsGkU3HfzrSaUNf1dsbe08TD7Io
KDN72WLvnXDBK/BCqngRL3b6s4PgKVCuEb2oZXra0w7xqnc96CfkaBRDPyY4Jafl
eKfJI3bjwHO1WC81yJqX7ORI1XZT8yd6LC0WnslOySz2ZqQt7gTsMApKnadeSDKD
IitxKdn7TTMxh7FfafV2Bjt+Jbo/4H8=
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:26:38 2026 by rpki-client