Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33271add-0348-3765-b5da-157fa92afbdc.roa
File:                     33271add-0348-3765-b5da-157fa92afbdc.roa (raw, json)
Hash identifier:          YXgYW1N+xP6/ZCfmfa3kCbPJ0bgke1vBA6YxRWCS4v4=
Subject key identifier:   C6:47:DE:DB:C4:44:48:92:7D:61:19:29:5D:F2:BD:DD:3C:39:A8:43
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B9AF084C39CA5A12C3700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33271add-0348-3765-b5da-157fa92afbdc.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        172.243.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:9a:f0:84:c3:9c:a5:a1:2c:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=8a89b707-7741-4c90-adf0-78be589f31df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d4:2f:f5:38:88:32:6f:54:0f:69:e0:cd:22:
                    e1:f8:80:d3:77:be:81:5e:08:b5:b6:0b:0d:da:34:
                    8c:3e:e3:26:e6:93:23:ba:f5:45:21:99:6b:9d:56:
                    6c:52:b8:19:e9:95:19:48:d8:af:06:41:e3:6b:5e:
                    c2:1e:fd:05:d4:06:9d:45:db:51:2d:03:69:0c:6a:
                    d6:2c:f4:36:7d:05:dd:ad:22:df:ae:c1:f1:8f:f9:
                    e7:ee:ac:de:21:e5:61:fe:93:3e:cc:ac:ab:f9:c8:
                    d9:66:d6:02:80:eb:6f:a2:40:7f:fd:2c:2b:61:79:
                    ad:b1:d7:5b:98:2f:0b:19:05:68:48:14:b4:57:16:
                    3c:66:0b:b2:6c:84:7e:45:23:cf:ca:08:86:db:96:
                    76:bd:6a:b4:36:5f:f7:c7:2d:e1:a6:89:8e:d8:a1:
                    42:12:1c:99:1f:3f:24:39:c5:e1:98:db:d4:7e:d2:
                    75:12:6c:7a:7f:ed:6a:c8:92:d5:66:38:1a:b2:0e:
                    38:cb:6f:41:6c:3d:7c:d2:55:f4:0a:a4:e0:a6:80:
                    e9:43:d6:4c:f4:36:84:3f:13:cc:2b:da:c8:cd:bc:
                    9d:35:9b:f3:ab:d1:1b:28:d9:ad:d0:c2:e7:74:74:
                    31:f0:5a:f4:2b:2b:cb:81:dd:88:66:53:67:c3:21:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:47:DE:DB:C4:44:48:92:7D:61:19:29:5D:F2:BD:DD:3C:39:A8:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33271add-0348-3765-b5da-157fa92afbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:88:aa:5f:a8:b5:39:c5:ba:7a:b9:20:c1:c4:b0:ff:74:5b:
         f1:f0:64:4e:dc:71:0d:f6:0f:f9:4f:21:63:4b:88:da:29:1f:
         8c:57:2b:de:28:ee:15:19:ba:5f:88:15:e3:69:88:cf:c4:e5:
         ff:c4:24:85:b1:5d:72:a6:ea:cc:47:e9:18:ed:7d:f3:f7:fa:
         0e:2a:71:8c:79:fd:53:ed:1a:16:cb:25:1c:f9:b0:9c:87:c4:
         f2:37:97:ed:7e:98:36:5d:fb:6f:f7:9e:cc:6b:0e:3d:cd:0b:
         63:de:4f:92:35:77:6f:03:a7:a3:3d:c8:e1:5e:5a:f7:3a:b3:
         94:7e:32:ea:d5:98:df:90:f4:63:52:f5:1e:a0:3b:bb:84:d1:
         bc:fd:39:8f:1b:d5:b5:07:2e:78:8a:0b:44:e2:07:22:5f:5e:
         8f:28:ff:fe:f2:e3:3e:fa:29:b3:db:1d:c7:f9:e8:af:10:eb:
         08:05:01:3b:b1:2f:ef:8b:56:09:8b:fd:2e:22:79:60:4c:26:
         4f:63:ac:37:dc:03:7b:56:bc:b4:d8:97:8a:50:d9:53:e5:5c:
         03:82:2e:53:93:15:73:3f:e1:82:2d:d6:8b:f6:a1:64:85:5e:
         83:2a:17:57:48:e0:81:de:03:45:5a:c8:55:03:dc:3f:8f:1a:
         06:f8:38:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm5rwhMOcpaEsNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
OGE4OWI3MDctNzc0MS00YzkwLWFkZjAtNzhiZTU4OWYzMWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotQv9TiIMm9UD2ngzSLh+IDTd76BXgi1tgsN
2jSMPuMm5pMjuvVFIZlrnVZsUrgZ6ZUZSNivBkHja17CHv0F1AadRdtRLQNpDGrW
LPQ2fQXdrSLfrsHxj/nn7qzeIeVh/pM+zKyr+cjZZtYCgOtvokB//SwrYXmtsddb
mC8LGQVoSBS0VxY8ZguybIR+RSPPygiG25Z2vWq0Nl/3xy3hpomO2KFCEhyZHz8k
OcXhmNvUftJ1Emx6f+1qyJLVZjgasg44y29BbD180lX0CqTgpoDpQ9ZM9DaEPxPM
K9rIzbydNZvzq9EbKNmt0MLndHQx8Fr0KyvLgd2IZlNnwyG0/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMZH3tvEREiSfWEZKV3yvd08OahDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzMyNzFhZGQtMDM0OC0z
NzY1LWI1ZGEtMTU3ZmE5MmFmYmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPM6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAWIql+otTnFunq5IMHEsP90W/HwZE7ccQ32D/lPIWNLiNopH4xXK94o
7hUZul+IFeNpiM/E5f/EJIWxXXKm6sxH6RjtffP3+g4qcYx5/VPtGhbLJRz5sJyH
xPI3l+1+mDZd+2/3nsxrDj3NC2PeT5I1d28Dp6M9yOFeWvc6s5R+MurVmN+Q9GNS
9R6gO7uE0bz9OY8b1bUHLniKC0TiByJfXo8o//7y4z76KbPbHcf56K8Q6wgFATux
L++LVgmL/S4ieWBMJk9jrDfcA3tWvLTYl4pQ2VPlXAOCLlOTFXM/4YIt1ov2oWSF
XoMqF1dI4IHeA0VayFUD3D+PGgb4OPI=
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:24:22 2026 by rpki-client