Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ccc53c3-7dcb-3574-ab82-1ae1817121ab.roa
File:                     2ccc53c3-7dcb-3574-ab82-1ae1817121ab.roa (raw, json)
Hash identifier:          Ikq9tnLMLq8VvI2S/e6U6FEVu33Ayn1UXzNHWjGaQIY=
Subject key identifier:   69:19:28:DF:ED:6C:9E:9F:A3:9E:ED:91:C2:B3:40:4A:D7:7A:20:D5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9232B88AB18C3FBE824880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ccc53c3-7dcb-3574-ab82-1ae1817121ab.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     11734
IP address blocks:        184.105.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:32:b8:8a:b1:8c:3f:be:82:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=79e5f3c2-5367-4b59-8da2-ddd7c1a049ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:14:fd:12:fe:e6:66:d1:b3:3b:bd:43:8b:
                    54:38:7b:e3:55:d9:10:74:eb:b1:f6:c2:d3:1d:55:
                    00:cd:c0:17:18:69:dc:63:6f:fa:d3:91:62:f6:d8:
                    43:8a:1d:89:24:ab:f2:f1:ce:e9:c2:56:6f:1e:7c:
                    47:a2:37:2c:cd:60:32:42:3e:c5:31:59:9a:31:5d:
                    9e:43:c0:d2:5c:9b:f8:2d:20:7d:21:03:43:b9:1c:
                    64:a0:d9:df:15:bf:82:c0:c7:a0:02:2c:58:39:b1:
                    ad:23:47:de:c7:fa:5e:6a:64:e5:9c:96:ba:dd:14:
                    84:42:2c:f0:95:90:69:eb:98:a0:3d:ad:41:cc:cd:
                    e2:96:32:0f:6b:06:02:6e:6f:22:1a:ed:99:c5:6f:
                    5d:1f:ad:31:85:91:da:3e:d7:b3:ae:b5:ad:66:80:
                    6f:54:68:15:df:5d:00:49:52:79:8b:f6:36:b5:b3:
                    17:e0:ca:54:66:99:13:64:5f:99:88:f2:f6:3b:68:
                    2c:a9:2d:af:58:25:44:93:25:01:4a:e5:ce:59:06:
                    52:d4:81:c2:b1:80:1c:38:40:35:fe:c3:92:1e:75:
                    75:73:c9:8f:f0:44:23:21:13:5b:53:6e:a4:71:24:
                    55:d9:21:6f:b7:5c:4e:91:02:e6:44:c7:36:2a:3a:
                    8c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:19:28:DF:ED:6C:9E:9F:A3:9E:ED:91:C2:B3:40:4A:D7:7A:20:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ccc53c3-7dcb-3574-ab82-1ae1817121ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:8b:67:a9:b3:e8:05:27:a5:ba:eb:8a:34:a2:4b:df:46:54:
         a0:ad:3e:43:4a:da:48:15:c0:cd:72:d7:3e:e6:a7:85:2e:e5:
         d7:f1:50:d0:02:52:c1:45:0b:99:ec:f2:e2:03:4a:b7:6c:0b:
         b0:d2:33:ec:06:f3:a8:cf:94:2f:85:59:9f:ce:e0:26:cc:55:
         e6:1a:91:e9:50:86:64:e9:74:b8:fd:1f:bb:55:58:d6:84:13:
         64:d4:c9:2a:67:60:82:d6:fa:f1:4d:62:0d:4a:81:42:5e:21:
         cc:4b:13:27:c0:b7:7a:5f:d8:a1:22:9b:91:a6:14:15:2b:af:
         ee:e1:cd:f1:59:16:cc:84:e7:d0:a1:87:97:21:c8:30:8f:2f:
         6a:0a:60:ab:b2:84:82:61:87:b1:db:ce:e4:50:a0:21:2f:5b:
         64:67:14:24:c1:52:e1:31:09:34:61:45:ee:e9:64:7a:e7:a7:
         1c:87:e8:c5:f5:ea:72:df:8d:44:b0:73:34:c0:73:55:b8:36:
         b2:44:c3:de:10:40:75:91:18:8d:a0:07:86:84:51:d9:cb:80:
         c6:e2:58:0d:de:b7:a3:d3:90:23:96:b3:9b:3c:54:8b:61:1d:
         2d:0f:f1:fc:e2:b5:69:82:19:d2:b1:03:74:a4:1c:a0:f2:ac:
         95:f2:29:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckjK4irGMP76CSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
NzllNWYzYzItNTM2Ny00YjU5LThkYTItZGRkN2MxYTA0OWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHIU/RL+5mbRszu9Q4tUOHvjVdkQdOux9sLT
HVUAzcAXGGncY2/605Fi9thDih2JJKvy8c7pwlZvHnxHojcszWAyQj7FMVmaMV2e
Q8DSXJv4LSB9IQNDuRxkoNnfFb+CwMegAixYObGtI0fex/peamTlnJa63RSEQizw
lZBp65igPa1BzM3iljIPawYCbm8iGu2ZxW9dH60xhZHaPtezrrWtZoBvVGgV310A
SVJ5i/Y2tbMX4MpUZpkTZF+ZiPL2O2gsqS2vWCVEkyUBSuXOWQZS1IHCsYAcOEA1
/sOSHnV1c8mP8EQjIRNbU26kcSRV2SFvt1xOkQLmRMc2KjqM/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGkZKN/tbJ6fo57tkcKzQErXeiDVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmNjYzUzYzMtN2RjYi0z
NTc0LWFiODItMWFlMTgxNzEyMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGl7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOLZ6mz6AUnpbrrijSiS99GVKCtPkNK2kgVwM1y1z7mp4Uu5dfxUNAC
UsFFC5ns8uIDSrdsC7DSM+wG86jPlC+FWZ/O4CbMVeYakelQhmTpdLj9H7tVWNaE
E2TUySpnYILW+vFNYg1KgUJeIcxLEyfAt3pf2KEim5GmFBUrr+7hzfFZFsyE59Ch
h5chyDCPL2oKYKuyhIJhh7HbzuRQoCEvW2RnFCTBUuExCTRhRe7pZHrnpxyH6MX1
6nLfjUSwczTAc1W4NrJEw94QQHWRGI2gB4aEUdnLgMbiWA3et6PTkCOWs5s8VIth
HS0P8fzitWmCGdKxA3SkHKDyrJXyKZc=
-----END CERTIFICATE-----
Generated at Sat Aug 29 04:53:46 2026 by rpki-client