Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9cb29714-77da-3e8a-bb3c-d39c46902976.roa
File:                     9cb29714-77da-3e8a-bb3c-d39c46902976.roa (raw, json)
Hash identifier:          9AbZNTqt96KncS2FiP7SEqt7+0l0eDrwG4YSCZSkxFY=
Subject key identifier:   6D:9C:CF:F2:72:6B:17:11:1A:D4:CB:D5:83:56:A8:7B:F6:25:30:73
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E010A5F67594578DC7F840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9cb29714-77da-3e8a-bb3c-d39c46902976.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:10:a5:f6:75:94:57:8d:c7:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=c1f5bc3a-01f4-4f03-9c10-3c0ab8086cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:7a:e4:1e:58:b4:c9:61:38:a0:4b:e3:80:
                    93:94:0d:b5:b5:a5:1e:79:52:ed:52:5e:03:f5:3b:
                    4a:2a:70:6d:f8:44:d9:5b:54:d8:ee:1f:27:5a:be:
                    54:e4:43:a3:45:83:0c:21:f4:6d:42:9b:15:23:65:
                    4d:40:d1:35:e6:32:52:16:d6:7a:d2:bf:e4:5d:a1:
                    ea:8e:b7:cd:16:3b:64:4a:13:c4:12:a8:ab:71:14:
                    08:e8:27:14:be:b9:36:b8:5a:c4:99:e9:3f:b3:06:
                    8c:ea:25:64:3f:e5:8b:16:99:71:41:dc:86:ae:f0:
                    c3:2f:bb:d0:8d:1a:5f:94:98:56:0f:70:28:a3:88:
                    37:aa:23:1e:22:98:f2:51:8b:be:28:f5:f7:24:81:
                    a8:a0:ef:47:87:82:10:ba:9d:ac:90:e3:d1:a6:d6:
                    9f:6e:0a:e2:9a:14:27:d0:15:a2:f2:65:54:8e:69:
                    4a:33:56:15:6e:75:7e:40:55:46:c3:40:ce:75:58:
                    62:6c:18:b6:5b:8e:c7:be:4c:a6:04:a5:c7:12:8b:
                    4d:1d:0d:1e:00:19:9b:13:3a:9a:fa:7c:c9:59:d6:
                    35:a7:6e:56:d0:bc:a3:0e:d5:19:f0:9a:68:34:4a:
                    fc:2d:6e:75:50:fa:51:06:65:c7:09:c1:3a:3c:2b:
                    cf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9C:CF:F2:72:6B:17:11:1A:D4:CB:D5:83:56:A8:7B:F6:25:30:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9cb29714-77da-3e8a-bb3c-d39c46902976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:28:3d:da:30:6a:74:8a:dd:66:23:e4:a2:6a:11:17:3e:14:
         b9:3b:60:dd:e0:a4:5a:db:4f:5c:63:52:00:ee:e4:2e:f1:e5:
         37:90:a5:61:7e:d2:c4:b0:c6:b8:4b:7f:cb:ae:d8:bc:2a:91:
         11:4f:13:c1:04:1b:40:b0:03:41:30:61:3c:38:57:c3:a8:0f:
         b8:d8:3f:5b:34:d9:f7:29:ce:db:f1:2f:35:a7:33:42:38:33:
         39:0d:82:a1:ed:e2:8a:3c:29:c5:99:6e:0f:f8:71:7a:f1:b5:
         96:4d:1e:f2:46:b6:4c:1e:44:de:14:69:21:9c:35:d3:ed:65:
         e5:5d:cb:23:19:d1:c9:ec:fd:d8:72:47:db:61:cc:35:3e:55:
         d8:7f:cd:a7:e9:30:be:7d:43:ae:5d:18:e6:f3:42:52:05:ad:
         5d:eb:0d:15:d6:96:b2:38:63:01:0b:e3:09:7b:a6:40:46:49:
         b0:42:70:e0:36:59:a1:f4:08:c0:ee:4c:72:9f:e4:32:3f:18:
         09:72:39:75:3f:70:fc:2c:1f:cc:81:b4:e1:e6:63:3b:68:f6:
         c8:90:6e:04:38:25:34:84:76:cb:4d:e1:a6:cd:e8:09:cc:16:
         5d:7e:6a:3a:22:b4:8e:1d:61:8c:fb:f4:34:d4:56:01:b5:18:
         84:03:58:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4BCl9nWUV43H+EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
YzFmNWJjM2EtMDFmNC00ZjAzLTljMTAtM2MwYWI4MDg2Y2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoit65B5YtMlhOKBL44CTlA21taUeeVLtUl4D
9TtKKnBt+ETZW1TY7h8nWr5U5EOjRYMMIfRtQpsVI2VNQNE15jJSFtZ60r/kXaHq
jrfNFjtkShPEEqircRQI6CcUvrk2uFrEmek/swaM6iVkP+WLFplxQdyGrvDDL7vQ
jRpflJhWD3Aoo4g3qiMeIpjyUYu+KPX3JIGooO9Hh4IQup2skOPRptafbgrimhQn
0BWi8mVUjmlKM1YVbnV+QFVGw0DOdVhibBi2W47HvkymBKXHEotNHQ0eABmbEzqa
+nzJWdY1p25W0LyjDtUZ8JpoNEr8LW51UPpRBmXHCcE6PCvP3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG2cz/JyaxcRGtTL1YNWqHv2JTBzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWNiMjk3MTQtNzdkYS0z
ZThhLWJiM2MtZDM5YzQ2OTAyOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBVvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsoPdowanSK3WYj5KJqERc+FLk7YN3gpFrbT1xjUgDu5C7x5TeQpWF+
0sSwxrhLf8uu2LwqkRFPE8EEG0CwA0EwYTw4V8OoD7jYP1s02fcpztvxLzWnM0I4
MzkNgqHt4oo8KcWZbg/4cXrxtZZNHvJGtkweRN4UaSGcNdPtZeVdyyMZ0cns/dhy
R9thzDU+Vdh/zafpML59Q65dGObzQlIFrV3rDRXWlrI4YwEL4wl7pkBGSbBCcOA2
WaH0CMDuTHKf5DI/GAlyOXU/cPwsH8yBtOHmYzto9siQbgQ4JTSEdstN4abN6AnM
Fl1+ajoitI4dYYz79DTUVgG1GIQDWG8=
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:20 2026 by rpki-client