Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7dd86eee-6500-308b-a482-b45ea2454ad5.roa
File:                     7dd86eee-6500-308b-a482-b45ea2454ad5.roa (raw, json)
Hash identifier:          VJQTAOz1vK6ywqmp1/BxHtDdXg0StJsZcy/QCIskzBQ=
Subject key identifier:   51:C8:19:EE:11:E1:45:94:E1:19:71:99:CD:25:DA:C1:DA:15:05:1C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E009E165D0175DD5E319C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7dd86eee-6500-308b-a482-b45ea2454ad5.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.20.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:09:e1:65:d0:17:5d:d5:e3:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=eed94772-d125-408a-a29c-4b8d121fd998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:44:41:b8:d0:bd:ad:f2:0f:77:9b:65:0c:
                    3e:84:2c:39:96:24:8c:4b:67:f2:f5:eb:46:b1:13:
                    9d:0e:a1:65:19:54:23:de:6b:43:c6:d1:a1:7f:fd:
                    0b:59:bd:74:97:0e:66:e4:e3:87:01:b6:03:df:fb:
                    12:42:1f:c5:0d:68:98:71:9b:98:63:c5:93:86:74:
                    5d:00:9f:dd:b4:d9:9e:b6:82:36:58:cc:51:93:81:
                    05:e1:fb:50:59:fd:63:fa:3b:9b:98:a5:a6:bc:a7:
                    6c:95:c5:d7:dc:bf:ce:12:24:f9:f5:f1:95:9a:5c:
                    f7:8a:92:c0:b2:d2:83:23:27:5e:e9:eb:b4:3e:fb:
                    f5:d7:31:80:23:94:46:a5:ed:6f:5e:4b:1b:b2:2d:
                    f0:ee:cd:7e:80:ef:20:20:d4:fe:7b:b2:12:88:19:
                    d8:93:db:83:ff:5b:43:d4:a6:68:dc:23:5b:46:0e:
                    52:9d:14:60:8e:0c:a9:4b:27:da:e2:df:0a:8f:df:
                    73:01:2e:72:47:25:a0:6b:01:7a:dc:2a:ca:fe:a4:
                    25:86:c2:07:f2:77:d8:7b:da:f8:fe:9d:3e:d2:73:
                    a7:3e:58:86:33:af:12:30:58:58:b4:45:c4:d3:ca:
                    04:0f:1d:11:7f:5f:02:97:d1:0c:a8:88:62:d3:96:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C8:19:EE:11:E1:45:94:E1:19:71:99:CD:25:DA:C1:DA:15:05:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7dd86eee-6500-308b-a482-b45ea2454ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:3c:e7:b0:d8:58:67:43:f9:8b:a4:bc:e9:44:4e:22:81:ad:
         4f:44:cd:d2:da:f5:15:10:36:03:11:03:bd:0b:69:7a:8c:7a:
         d1:7d:2c:63:ed:4c:0a:8f:8f:c7:d6:af:3b:99:e7:58:04:ad:
         16:dd:00:26:f9:e5:eb:7e:11:28:88:19:de:6a:32:5e:73:df:
         53:9a:66:6f:b8:29:76:19:97:c5:40:43:7d:b4:60:19:20:84:
         06:50:0c:02:40:94:a6:ee:0d:b3:29:fc:79:37:cd:84:99:f2:
         54:1c:25:7d:1b:7f:ec:72:35:8d:aa:97:6f:34:34:28:c9:a5:
         1d:43:e2:53:5c:ab:97:ba:48:d8:f6:18:d3:6c:4e:1e:d7:74:
         02:5b:75:1c:a2:ce:9f:46:c9:51:c3:4b:72:b3:32:cc:83:e7:
         53:10:4d:c3:1e:d4:8c:26:0f:d0:06:e9:72:2d:17:9f:bd:ea:
         1f:fe:2e:a5:47:0c:a2:e9:1a:98:7b:08:58:86:9d:ef:a6:99:
         43:f5:b7:f7:cb:73:96:c0:1a:6c:7a:f1:96:24:b0:75:39:0b:
         b1:6c:1d:dc:77:54:17:1a:b0:69:f7:61:02:0f:22:ff:eb:24:
         06:61:96:2b:ee:c3:a2:11:01:ce:e5:23:13:70:51:c3:fb:cc:
         0a:3d:26:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4AnhZdAXXdXjGcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZWVkOTQ3NzItZDEyNS00MDhhLWEyOWMtNGI4ZDEyMWZkOTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUpEQbjQva3yD3ebZQw+hCw5liSMS2fy9etG
sROdDqFlGVQj3mtDxtGhf/0LWb10lw5m5OOHAbYD3/sSQh/FDWiYcZuYY8WThnRd
AJ/dtNmetoI2WMxRk4EF4ftQWf1j+jubmKWmvKdslcXX3L/OEiT59fGVmlz3ipLA
stKDIyde6eu0Pvv11zGAI5RGpe1vXksbsi3w7s1+gO8gINT+e7ISiBnYk9uD/1tD
1KZo3CNbRg5SnRRgjgypSyfa4t8Kj99zAS5yRyWgawF63CrK/qQlhsIH8nfYe9r4
/p0+0nOnPliGM68SMFhYtEXE08oEDx0Rf18Cl9EMqIhi05ZgVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFHIGe4R4UWU4Rlxmc0l2sHaFQUcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2RkODZlZWUtNjUwMC0z
MDhiLWE0ODItYjQ1ZWEyNDU0YWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBR1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACw857DYWGdD+YukvOlETiKBrU9EzdLa9RUQNgMRA70LaXqMetF9LGPt
TAqPj8fWrzuZ51gErRbdACb55et+ESiIGd5qMl5z31OaZm+4KXYZl8VAQ320YBkg
hAZQDAJAlKbuDbMp/Hk3zYSZ8lQcJX0bf+xyNY2ql280NCjJpR1D4lNcq5e6SNj2
GNNsTh7XdAJbdRyizp9GyVHDS3KzMsyD51MQTcMe1IwmD9AG6XItF5+96h/+LqVH
DKLpGph7CFiGne+mmUP1t/fLc5bAGmx68ZYksHU5C7FsHdx3VBcasGn3YQIPIv/r
JAZhlivuw6IRAc7lIxNwUcP7zAo9Jlc=
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:54:40 2026 by rpki-client