Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ec9884e0-b98a-3cc8-945c-1aa8658d490a.roa
File:                     ec9884e0-b98a-3cc8-945c-1aa8658d490a.roa (raw, json)
Hash identifier:          N40NIpJKVVPCWvGe/c+L8zCxrsBwNRivxLgqrmEEDIc=
Subject key identifier:   C1:59:76:E4:B7:F2:47:C9:52:5B:67:6C:46:17:4E:18:8D:4A:7D:57
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BA82E481D655BA1981100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ec9884e0-b98a-3cc8-945c-1aa8658d490a.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        184.21.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:a8:2e:48:1d:65:5b:a1:98:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=dc8e1b4c-a2e2-43e6-b1ee-1ba8cb917db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:6b:f2:a2:75:d6:2a:99:2f:07:d8:dd:bd:
                    86:3e:ce:d1:c4:3b:43:b6:4d:b7:31:14:8b:e6:9c:
                    0f:c5:bc:50:55:ca:9a:ff:48:71:0b:d6:ac:96:65:
                    31:77:f8:8e:ae:62:3d:75:d9:e7:bb:09:7d:fc:b4:
                    ed:69:1b:e3:f0:66:6c:4d:fd:60:e1:f6:ac:99:f2:
                    22:fd:c7:7c:d0:06:05:0a:43:89:39:66:1f:a6:ae:
                    cd:0c:d5:30:69:e5:d5:cd:c4:5b:31:a0:70:42:2d:
                    3b:5a:e1:fe:fb:04:2a:e2:19:8a:61:ee:18:1d:1e:
                    cf:c6:43:d0:0e:dc:98:05:64:58:82:3b:d7:17:53:
                    b7:8a:38:f2:62:8a:4b:d4:0c:dd:b3:da:bd:6c:68:
                    ee:ca:2d:1d:9c:fd:58:87:e6:99:26:cf:98:18:e4:
                    f3:62:b8:f8:70:4d:ba:cb:e3:aa:e9:2e:7b:d7:00:
                    2a:6d:5c:54:90:01:57:28:27:07:f0:4d:c0:6a:80:
                    dc:41:d3:f2:6f:16:83:e3:9e:c7:e2:94:08:12:79:
                    27:b6:3e:97:e8:b8:22:92:d8:20:7a:ed:cb:fe:2b:
                    e4:e4:f6:8d:d1:92:4c:c2:fa:c9:1d:c3:1e:c3:94:
                    0a:81:d0:3b:41:c9:93:0f:b9:46:02:37:92:c4:8d:
                    87:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:59:76:E4:B7:F2:47:C9:52:5B:67:6C:46:17:4E:18:8D:4A:7D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ec9884e0-b98a-3cc8-945c-1aa8658d490a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:26:5e:a2:4a:5b:19:60:1c:e8:43:4d:85:f8:2f:0c:f7:74:
         72:f0:c5:15:56:7a:83:89:6c:6d:5a:1c:bc:44:dc:a2:80:76:
         f8:a9:65:c4:05:70:1d:4e:a5:4a:2f:b6:78:6f:0b:37:23:76:
         d1:94:58:4d:9a:6b:5a:09:8b:0e:a1:62:67:a3:d5:52:62:ef:
         0c:41:e0:06:94:a2:da:34:de:58:82:56:5f:6d:3a:76:87:41:
         0f:24:97:7c:56:8c:be:0a:f5:ba:67:18:30:64:a7:e4:41:4c:
         7c:75:c1:ab:1c:02:9b:3c:8f:80:de:66:93:ef:1d:e7:65:67:
         ef:96:29:5d:64:e0:cd:49:54:b5:79:90:f1:3c:9e:8f:8a:91:
         2f:d7:76:50:fb:3d:f9:0f:5b:40:e3:76:6c:2f:74:28:50:e2:
         c6:26:05:45:22:eb:c4:48:c1:66:7a:94:1a:d7:58:82:a0:19:
         43:66:ef:61:2f:14:90:dd:49:59:b6:43:d1:2c:6f:cc:e0:fc:
         94:c4:36:30:79:8f:a2:d0:79:48:16:2e:bd:26:91:ba:cd:b1:
         cb:87:5c:bf:15:0c:a2:58:69:c6:39:59:80:b3:c6:90:e0:a0:
         f4:83:24:06:6e:9c:cf:71:9b:40:8b:6f:ba:a2:5b:f8:19:6b:
         c9:52:71:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm6guSB1lW6GYEQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
ZGM4ZTFiNGMtYTJlMi00M2U2LWIxZWUtMWJhOGNiOTE3ZGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXNr8qJ11iqZLwfY3b2GPs7RxDtDtk23MRSL
5pwPxbxQVcqa/0hxC9aslmUxd/iOrmI9ddnnuwl9/LTtaRvj8GZsTf1g4fasmfIi
/cd80AYFCkOJOWYfpq7NDNUwaeXVzcRbMaBwQi07WuH++wQq4hmKYe4YHR7PxkPQ
DtyYBWRYgjvXF1O3ijjyYopL1Azds9q9bGjuyi0dnP1Yh+aZJs+YGOTzYrj4cE26
y+Oq6S571wAqbVxUkAFXKCcH8E3AaoDcQdPybxaD457H4pQIEnkntj6X6Lgiktgg
eu3L/ivk5PaN0ZJMwvrJHcMew5QKgdA7QcmTD7lGAjeSxI2HdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMFZduS38kfJUltnbEYXThiNSn1XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWM5ODg0ZTAtYjk4YS0z
Y2M4LTk0NWMtMWFhODY1OGQ0OTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEmXqJKWxlgHOhDTYX4Lwz3dHLwxRVWeoOJbG1aHLxE3KKAdvipZcQF
cB1OpUovtnhvCzcjdtGUWE2aa1oJiw6hYmej1VJi7wxB4AaUoto03liCVl9tOnaH
QQ8kl3xWjL4K9bpnGDBkp+RBTHx1wascAps8j4DeZpPvHedlZ++WKV1k4M1JVLV5
kPE8no+KkS/XdlD7PfkPW0DjdmwvdChQ4sYmBUUi68RIwWZ6lBrXWIKgGUNm72Ev
FJDdSVm2Q9Esb8zg/JTENjB5j6LQeUgWLr0mkbrNscuHXL8VDKJYacY5WYCzxpDg
oPSDJAZunM9xm0CLb7qiW/gZa8lScZQ=
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:25:56 2026 by rpki-client