Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4786074a-8f2d-35fb-b998-aa42a6beb510.roa
File:                     4786074a-8f2d-35fb-b998-aa42a6beb510.roa (raw, json)
Hash identifier:          TBjTcGtGzEn8i+KPTKvFuUnJK3xPTOuaKeXW6bVO+4Y=
Subject key identifier:   22:C8:D8:BE:E8:E0:86:EB:0A:2E:A8:BF:F2:E1:40:3F:1B:F6:43:B2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E82544BCCC1A94BE09BC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4786074a-8f2d-35fb-b998-aa42a6beb510.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        198.45.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:82:54:4b:cc:c1:a9:4b:e0:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d385bbf1-8caa-40f9-a75b-3bcb321c9652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:09:87:67:8f:98:87:d5:c7:23:25:98:d7:e3:
                    6d:f6:eb:2b:35:b7:08:75:4c:76:97:0e:26:9c:16:
                    b6:26:fa:e2:02:4e:bf:95:05:1e:e4:88:a3:ab:8e:
                    ed:fc:5b:bb:b1:15:4d:bb:b5:ec:a7:c7:95:4a:b6:
                    e8:a4:1f:8f:ea:3f:8a:8e:d3:15:bf:8e:95:f1:e7:
                    f8:95:c6:b8:c7:c6:78:d8:ac:55:94:97:8b:23:c8:
                    bd:b3:81:7a:8d:cd:06:2c:f0:60:53:df:ab:df:5c:
                    56:37:bd:63:16:29:a4:52:98:ec:fd:1d:e1:21:70:
                    f5:58:73:4f:ed:ec:28:27:ae:0a:ee:77:64:19:f7:
                    ba:4d:eb:c0:27:87:3f:81:bc:53:d2:3e:96:1c:f6:
                    bc:97:08:47:8f:79:b0:52:02:4e:06:a0:d7:a0:f7:
                    92:c0:fa:27:05:6c:71:06:d5:68:ab:2d:d7:78:ad:
                    09:86:01:39:75:b7:7d:28:18:81:d4:92:61:d8:3d:
                    a8:42:15:64:f4:01:17:11:b9:1e:57:f1:d9:d0:12:
                    eb:f1:92:75:30:b0:48:db:ec:2e:52:70:2c:6f:8c:
                    20:c0:56:77:50:5f:bc:b3:47:8c:23:a7:a2:86:ee:
                    b7:6c:5d:9f:a5:b7:dc:55:d1:3b:ad:b6:9a:b4:95:
                    10:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C8:D8:BE:E8:E0:86:EB:0A:2E:A8:BF:F2:E1:40:3F:1B:F6:43:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4786074a-8f2d-35fb-b998-aa42a6beb510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:68:2a:b2:9e:75:2b:8b:fc:c0:4a:15:03:16:e3:9f:87:3e:
         01:85:85:d5:4a:54:69:2a:07:0c:0e:06:8e:3d:bd:87:cf:a3:
         f2:d4:1f:cd:e1:cb:4d:2a:fe:d9:eb:2e:66:e0:dc:41:10:07:
         e5:ad:45:91:b5:65:df:1f:11:11:1b:69:5c:af:5b:98:56:e5:
         8c:58:3e:10:9f:15:fd:62:83:26:3e:47:af:bf:a2:e1:2e:54:
         f0:4d:be:c7:2e:83:6a:d6:8f:0b:31:f0:a3:02:16:ae:02:d9:
         50:a0:1d:5c:cc:25:ce:fa:4e:b4:2e:c6:fa:33:3b:15:43:f2:
         fe:6f:75:74:7a:d0:66:15:7a:cf:2d:01:82:f9:9f:e6:18:6f:
         d4:7b:2f:54:03:a0:e5:f8:18:20:40:9e:ae:76:4d:47:5e:18:
         b7:96:47:b1:51:b4:6b:c9:8b:b9:de:32:43:5b:e8:23:94:8e:
         d9:d5:d8:98:19:b0:b4:30:dd:84:fb:e1:13:8a:f4:a3:81:26:
         94:a2:b6:e8:89:23:70:81:eb:2f:59:a8:e8:55:0a:42:c5:7a:
         c4:cb:19:51:d0:b6:15:9d:2c:14:db:2d:56:cb:37:2e:ae:b9:
         94:c2:64:37:5c:33:12:7a:1c:60:d1:ae:59:03:01:23:82:d1:
         3e:ec:6c:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnoJUS8zBqUvgm8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDM4NWJiZjEtOGNhYS00MGY5LWE3NWItM2JjYjMyMWM5NjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQmHZ4+Yh9XHIyWY1+Nt9usrNbcIdUx2lw4m
nBa2JvriAk6/lQUe5Iijq47t/Fu7sRVNu7Xsp8eVSrbopB+P6j+KjtMVv46V8ef4
lca4x8Z42KxVlJeLI8i9s4F6jc0GLPBgU9+r31xWN71jFimkUpjs/R3hIXD1WHNP
7ewoJ64K7ndkGfe6TevAJ4c/gbxT0j6WHPa8lwhHj3mwUgJOBqDXoPeSwPonBWxx
BtVoqy3XeK0JhgE5dbd9KBiB1JJh2D2oQhVk9AEXEbkeV/HZ0BLr8ZJ1MLBI2+wu
UnAsb4wgwFZ3UF+8s0eMI6eihu63bF2fpbfcVdE7rbaatJUQBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLI2L7o4IbrCi6ov/LhQD8b9kOyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDc4NjA3NGEtOGYyZC0z
NWZiLWI5OTgtYWE0MmE2YmViNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVoKrKedSuL/MBKFQMW45+HPgGFhdVKVGkqBwwOBo49vYfPo/LUH83h
y00q/tnrLmbg3EEQB+WtRZG1Zd8fEREbaVyvW5hW5YxYPhCfFf1igyY+R6+/ouEu
VPBNvscug2rWjwsx8KMCFq4C2VCgHVzMJc76TrQuxvozOxVD8v5vdXR60GYVes8t
AYL5n+YYb9R7L1QDoOX4GCBAnq52TUdeGLeWR7FRtGvJi7neMkNb6COUjtnV2JgZ
sLQw3YT74ROK9KOBJpSituiJI3CB6y9ZqOhVCkLFesTLGVHQthWdLBTbLVbLNy6u
uZTCZDdcMxJ6HGDRrlkDASOC0T7sbEs=
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:44:07 2026 by rpki-client