Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/1dc05d3b-5d97-310c-8346-241611fbe0f9.roa
File:                     1dc05d3b-5d97-310c-8346-241611fbe0f9.roa (raw, json)
Hash identifier:          TzJr43+08rq+vunvedzTiYKuJK+WmrUsnAOE96IKNck=
Subject key identifier:   B0:63:64:4D:4F:B5:10:10:05:15:27:27:C6:C4:16:8F:38:50:DA:35
Certificate issuer:       /CN=b93a0e00-9040-44f1-b95b-7f094433ae50
Certificate serial:       010D0C9F4328584D1F4A0D11F1B82DF8514E8080
Authority key identifier: 82:B1:E1:55:0A:42:72:D3:78:C9:CC:82:72:53:28:D3:7D:6D:19:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/1dc05d3b-5d97-310c-8346-241611fbe0f9.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     13820
IP address blocks:        84.247.2.0/23 maxlen: 23
                          84.247.2.0/24 maxlen: 24
                          84.247.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/b93a0e00-9040-44f1-b95b-7f094433ae50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/b93a0e00-9040-44f1-b95b-7f094433ae50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:0d:11:f1:b8:2d:f8:51:4e:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b93a0e00-9040-44f1-b95b-7f094433ae50
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=a695e13b-6044-4206-953f-191153bf210d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:97:44:39:78:b8:6b:29:57:51:0f:00:77:
                    d0:17:58:61:a0:b5:53:cb:f0:06:46:22:80:fb:b5:
                    1a:5f:0c:ee:a1:30:83:ae:ff:8d:20:03:46:9e:6f:
                    f5:a0:3a:05:60:6d:a4:fa:b8:e4:f1:2d:2f:3d:90:
                    77:1b:20:35:6b:0f:ab:ac:ad:a2:b2:30:04:85:7c:
                    43:9d:7a:53:0b:f0:ca:20:0f:7e:e7:e1:43:ea:6a:
                    ee:68:51:7d:c6:57:4c:82:bb:77:61:f3:33:c8:73:
                    b5:e1:5a:c1:1a:b7:25:6b:13:b6:57:2f:4d:af:f2:
                    be:8c:ad:d2:0f:80:d0:b5:d7:ff:e4:a5:9c:73:0a:
                    60:b9:88:1c:19:6b:ed:76:e7:90:11:0b:03:93:3a:
                    ef:dd:1e:97:98:a5:95:37:a6:36:7b:a1:b9:a7:14:
                    ad:ec:8d:66:1d:9b:f0:23:cd:3c:78:8c:e1:cf:18:
                    c3:b9:ba:2f:04:1b:7c:a9:9a:b9:83:b2:c0:2e:a2:
                    1c:8b:ae:4b:31:9f:a1:3b:20:a5:08:8c:5a:f7:0d:
                    37:10:2b:c3:e1:cb:9b:c1:d8:ee:9b:d9:8b:b8:c3:
                    fb:9f:f5:2a:04:85:ea:eb:9c:cf:bf:2a:22:ed:be:
                    96:71:c7:40:4b:c9:88:c2:e1:1b:fd:9c:c8:d7:3f:
                    76:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:63:64:4D:4F:B5:10:10:05:15:27:27:C6:C4:16:8F:38:50:DA:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/1dc05d3b-5d97-310c-8346-241611fbe0f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50/b93a0e00-9040-44f1-b95b-7f094433ae50.crl

            X509v3 Authority Key Identifier:
                keyid:82:B1:E1:55:0A:42:72:D3:78:C9:CC:82:72:53:28:D3:7D:6D:19:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b93a0e00-9040-44f1-b95b-7f094433ae50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.247.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:6b:3d:8a:c6:c0:a5:3e:4f:d6:5e:de:10:bb:05:90:4d:e9:
         4a:48:a3:7f:63:b5:38:72:73:e8:dc:2c:19:d6:f2:cc:71:a3:
         7c:af:1b:66:74:83:43:1f:6a:3c:9e:84:b6:3a:ab:c1:0e:09:
         4c:3a:81:fe:f0:29:a1:46:02:6e:ca:0d:cf:dc:51:d5:7c:ce:
         44:00:82:ad:9a:11:76:20:4d:db:05:a2:c0:29:66:3d:fd:b8:
         4e:b6:54:7e:e1:df:f9:f5:96:ae:f9:86:4d:1a:4b:48:93:35:
         ae:55:b3:65:12:7f:a3:3b:68:3b:c4:41:ca:58:75:4f:ca:24:
         3f:ad:f7:7b:8f:ee:56:d3:96:75:e7:bf:06:e5:8e:5c:38:e0:
         da:00:7b:b7:85:ca:a7:30:d4:8e:e1:d8:16:2d:91:03:08:15:
         c9:7e:22:08:a2:06:e8:f2:ca:15:c8:49:d0:7d:4c:b2:35:73:
         a3:4c:c8:a7:e2:f5:0d:aa:77:eb:ad:f0:e9:08:42:ec:27:7b:
         e8:98:d6:76:89:57:dd:15:72:17:7e:4c:78:13:9d:52:11:83:
         05:0f:26:fb:ed:54:ad:40:1e:74:f9:5c:fc:21:31:e5:b9:c7:
         d8:ec:8b:24:c9:d3:00:da:5e:7c:5c:76:f5:1d:94:cd:0a:11:
         97:58:bf:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSg0R8bgt+FFOgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjkzYTBlMDAtOTA0MC00NGYxLWI5NWItN2YwOTQ0MzNh
ZTUwMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
YTY5NWUxM2ItNjA0NC00MjA2LTk1M2YtMTkxMTUzYmYyMTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs++XRDl4uGspV1EPAHfQF1hhoLVTy/AGRiKA
+7UaXwzuoTCDrv+NIANGnm/1oDoFYG2k+rjk8S0vPZB3GyA1aw+rrK2isjAEhXxD
nXpTC/DKIA9+5+FD6mruaFF9xldMgrt3YfMzyHO14VrBGrclaxO2Vy9Nr/K+jK3S
D4DQtdf/5KWccwpguYgcGWvtdueQEQsDkzrv3R6XmKWVN6Y2e6G5pxSt7I1mHZvw
I808eIzhzxjDubovBBt8qZq5g7LALqIci65LMZ+hOyClCIxa9w03ECvD4cubwdju
m9mLuMP7n/UqBIXq65zPvyoi7b6WccdAS8mIwuEb/ZzI1z92ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLBjZE1PtRAQBRUnJ8bEFo84UNo1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOTNh
MGUwMC05MDQwLTQ0ZjEtYjk1Yi03ZjA5NDQzM2FlNTAvMWRjMDVkM2ItNWQ5Ny0z
MTBjLTgzNDYtMjQxNjExZmJlMGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjkzYTBlMDAtOTA0MC00NGYxLWI5
NWItN2YwOTQ0MzNhZTUwL2I5M2EwZTAwLTkwNDAtNDRmMS1iOTViLTdmMDk0NDMz
YWU1MC5jcmwwHwYDVR0jBBgwFoAUgrHhVQpCctN4ycyCclMo031tGaMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iOTNhMGUwMC05MDQwLTQ0ZjEtYjk1Yi03ZjA5
NDQzM2FlNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVPcCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtrPYrGwKU+T9Ze3hC7BZBN6UpIo39jtThyc+jcLBnW8sxxo3yvG2Z0
g0MfajyehLY6q8EOCUw6gf7wKaFGAm7KDc/cUdV8zkQAgq2aEXYgTdsFosApZj39
uE62VH7h3/n1lq75hk0aS0iTNa5Vs2USf6M7aDvEQcpYdU/KJD+t93uP7lbTlnXn
vwbljlw44NoAe7eFyqcw1I7h2BYtkQMIFcl+IgiiBujyyhXISdB9TLI1c6NMyKfi
9Q2qd+ut8OkIQuwne+iY1naJV90Vchd+THgTnVIRgwUPJvvtVK1AHnT5XPwhMeW5
x9jsiyTJ0wDaXnxcdvUdlM0KEZdYv3A=
-----END CERTIFICATE-----
Generated at Sun Mar 22 09:33:32 2026 by rpki-client