Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c01ee83-f05c-3b17-a1fc-cad0c7fe4f65.roa
File:                     1c01ee83-f05c-3b17-a1fc-cad0c7fe4f65.roa (raw, json)
Hash identifier:          fwAs7Fxu4ez9Ffh4NfeYrpNBQqVtyE8a87lhvt0blTE=
Subject key identifier:   CD:92:7F:84:60:12:9F:C2:13:A2:3B:52:E5:44:BC:F7:0B:15:23:20
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0BB71A9A2EB2B94CABC60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c01ee83-f05c-3b17-a1fc-cad0c7fe4f65.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        172.243.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:bb:71:a9:a2:eb:2b:94:ca:bc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=b49e8c0e-38d6-41c8-940e-db201054075c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:e5:e2:8f:40:5e:0b:b7:80:91:e1:26:18:
                    91:f8:2d:8c:04:48:66:1a:0c:5c:d4:85:7a:e5:57:
                    9a:19:59:8b:18:1b:b9:1c:4d:3a:6c:06:d2:31:58:
                    90:e0:3b:3e:41:e3:9c:fb:de:f4:19:4a:a5:d0:aa:
                    3a:21:bf:0e:5a:b5:bb:f0:94:fc:35:3a:ba:1b:6d:
                    20:8e:c0:e4:ca:48:9f:54:a3:52:ae:3b:39:b3:3f:
                    27:1b:94:8c:69:24:e1:e6:d8:5a:1e:64:4f:94:c5:
                    a8:22:ca:5d:5e:ba:ba:32:27:f4:90:3d:9a:6f:2f:
                    81:ac:28:bc:4c:a4:dc:0a:0e:4f:63:8c:7a:f4:9c:
                    17:c9:fe:8f:05:4e:c4:00:fa:43:b7:b1:bb:07:f0:
                    4e:5c:67:f8:bb:8d:2c:93:b5:53:af:73:4d:12:b2:
                    29:11:02:96:03:dd:fc:82:db:6e:fe:ea:8f:f5:3b:
                    06:6a:c7:6b:1f:b0:c3:4e:9a:8a:fc:11:da:a9:68:
                    fe:3a:6e:fb:31:31:2e:85:33:3a:75:9d:3e:60:32:
                    77:72:8c:70:1e:e0:e1:ca:21:06:74:88:cc:11:0b:
                    63:96:3a:27:fb:5e:6c:65:e7:aa:5c:bc:d4:f0:d4:
                    4d:b6:41:6c:f6:a4:05:e0:50:ff:c1:8e:1b:81:29:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:92:7F:84:60:12:9F:C2:13:A2:3B:52:E5:44:BC:F7:0B:15:23:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c01ee83-f05c-3b17-a1fc-cad0c7fe4f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c8:e3:9f:35:fc:bb:e0:59:af:53:50:a3:f8:38:ca:6b:31:
         4d:26:7f:65:a8:54:da:ea:a7:8a:e1:83:4f:ea:43:bb:2e:21:
         39:d0:90:2e:f2:90:a0:59:f5:19:f0:89:cf:a8:94:7c:2a:72:
         5a:32:a2:34:a1:56:e1:d1:c1:c4:29:c3:29:5b:e9:37:6a:bf:
         09:02:95:9e:12:a0:78:27:77:39:01:cd:70:82:a0:4f:73:72:
         00:3d:e6:e1:cf:f9:be:d9:c9:67:b2:b5:d6:a5:49:7e:11:b6:
         45:c0:6a:3a:3d:19:67:82:ed:b0:b3:14:83:8b:8a:e9:e4:de:
         5a:70:07:8b:bf:68:26:51:69:9c:98:67:64:4d:97:a3:4d:22:
         d7:50:ec:a3:c2:cb:49:94:d4:e7:86:9b:59:88:d5:b7:03:81:
         e1:5f:c3:dd:5c:b0:2b:e5:26:e4:36:db:e2:78:97:a6:76:a3:
         5d:ab:38:4c:10:9f:c8:9f:71:da:98:11:36:0d:eb:7a:e5:bc:
         29:68:bd:9e:de:9c:1c:07:60:b4:79:66:18:76:8d:6c:a5:ca:
         c5:5b:bc:a9:52:7c:78:b4:5f:3f:f1:f3:3e:14:dd:e4:e8:c8:
         7c:ef:03:67:13:18:90:d4:9e:0a:3f:64:3f:ce:74:65:3a:69:
         88:49:04:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4LtxqaLrK5TKvGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
YjQ5ZThjMGUtMzhkNi00MWM4LTk0MGUtZGIyMDEwNTQwNzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnvl4o9AXgu3gJHhJhiR+C2MBEhmGgxc1IV6
5VeaGVmLGBu5HE06bAbSMViQ4Ds+QeOc+970GUql0Ko6Ib8OWrW78JT8NTq6G20g
jsDkykifVKNSrjs5sz8nG5SMaSTh5thaHmRPlMWoIspdXrq6Mif0kD2aby+BrCi8
TKTcCg5PY4x69JwXyf6PBU7EAPpDt7G7B/BOXGf4u40sk7VTr3NNErIpEQKWA938
gttu/uqP9TsGasdrH7DDTpqK/BHaqWj+Om77MTEuhTM6dZ0+YDJ3coxwHuDhyiEG
dIjMEQtjljon+15sZeeqXLzU8NRNtkFs9qQF4FD/wY4bgSlHPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM2Sf4RgEp/CE6I7UuVEvPcLFSMgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWMwMWVlODMtZjA1Yy0z
YjE3LWExZmMtY2FkMGM3ZmU0ZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXI4581/LvgWa9TUKP4OMprMU0mf2WoVNrqp4rhg0/qQ7suITnQkC7y
kKBZ9Rnwic+olHwqcloyojShVuHRwcQpwylb6TdqvwkClZ4SoHgndzkBzXCCoE9z
cgA95uHP+b7ZyWeytdalSX4RtkXAajo9GWeC7bCzFIOLiunk3lpwB4u/aCZRaZyY
Z2RNl6NNItdQ7KPCy0mU1OeGm1mI1bcDgeFfw91csCvlJuQ22+J4l6Z2o12rOEwQ
n8ifcdqYETYN63rlvClovZ7enBwHYLR5Zhh2jWylysVbvKlSfHi0Xz/x8z4U3eTo
yHzvA2cTGJDUngo/ZD/OdGU6aYhJBM4=
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:51:59 2026 by rpki-client