Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c415724-e99d-3ab0-82b1-265300a55c07.roa
File:                     0c415724-e99d-3ab0-82b1-265300a55c07.roa (raw, json)
Hash identifier:          kHk6Gkq4CvbVPwjERdPBhbUeZX4bIJpAQ7Fac1hdrlM=
Subject key identifier:   F2:2A:CB:45:6C:CD:85:60:43:60:63:70:B4:FF:47:83:AD:0C:BE:00
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0C568D157A46B998E5D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c415724-e99d-3ab0-82b1-265300a55c07.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:c5:68:d1:57:a4:6b:99:8e:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=c97c792d-2e73-4723-b330-40346eaeb1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ad:c8:b3:04:f9:f0:9e:c5:aa:0c:a0:12:cf:
                    b2:58:f5:61:81:41:72:15:59:a8:b2:a7:62:71:2c:
                    81:e1:67:78:1f:6b:a4:91:d4:b2:0c:24:3e:ea:6b:
                    b5:19:dd:f2:54:73:6a:2d:1e:ad:66:37:05:66:42:
                    29:eb:13:6e:e6:11:08:e9:52:fb:b1:32:c0:ef:d7:
                    ee:b5:b7:5f:8c:ff:f6:38:52:85:96:32:6e:d6:65:
                    a7:aa:36:7c:45:87:91:9d:49:b2:ab:52:19:dd:33:
                    de:9d:63:cf:67:f3:cd:96:aa:8b:88:bd:d9:36:47:
                    ee:5e:5a:f9:d6:1a:13:f5:a7:93:b6:cf:f2:4c:f9:
                    b8:7a:a9:a9:ba:ff:cc:5d:68:7b:a2:85:aa:d3:92:
                    46:96:89:c2:0b:45:6a:c0:9c:83:39:39:93:cc:46:
                    10:b3:01:51:1d:a0:cb:06:5a:fa:f7:aa:4c:0d:e3:
                    84:e5:58:a2:12:55:86:6d:37:6f:ab:2f:e8:1b:6b:
                    b5:2d:d3:b6:a6:a9:43:63:72:30:81:a4:5a:c0:04:
                    68:02:89:cc:04:fe:c8:b3:44:bc:b7:09:b0:06:c1:
                    49:31:0c:c7:21:a8:4d:bf:9a:af:77:0e:d8:70:b5:
                    74:fb:89:fe:00:8a:b5:7c:03:e9:ee:04:6e:fe:32:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2A:CB:45:6C:CD:85:60:43:60:63:70:B4:FF:47:83:AD:0C:BE:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0c415724-e99d-3ab0-82b1-265300a55c07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:4d:3b:59:6c:8a:15:94:11:4a:db:52:b1:6c:e5:0f:40:90:
         db:52:47:a8:88:d7:70:c6:cc:a5:d4:25:46:0a:d0:34:ef:ef:
         99:4f:08:3c:03:c2:11:8f:15:2f:15:2a:2f:1d:ac:9d:24:06:
         49:46:04:6a:21:58:77:09:cb:01:ff:b7:67:2b:d8:df:d5:ed:
         c5:2b:9b:a4:bb:6d:ce:60:eb:97:1b:28:6f:ee:20:ef:24:03:
         68:be:89:d2:cb:3f:2c:8d:4d:9a:7b:7c:ed:ea:dd:66:28:2c:
         7f:30:eb:0a:bb:f6:65:f0:6d:9b:c5:ea:ca:da:31:ac:7c:2c:
         39:8a:d6:dd:14:ea:92:b6:48:0d:48:fa:51:8e:2b:87:7e:9f:
         41:a9:ef:fb:94:39:1a:19:f4:52:e2:a9:92:ea:4c:49:bb:81:
         de:d4:20:02:8e:fe:ce:e7:2e:db:8c:bd:25:61:c2:f3:6e:88:
         c2:20:1d:8a:1c:ec:d3:34:bf:a1:e8:11:f5:41:f2:60:8b:26:
         cd:98:3e:6f:c4:3b:44:3e:7e:1c:1b:3d:84:6b:cd:84:1c:68:
         e0:ac:2a:de:86:d3:e2:9a:af:53:0a:07:e9:94:fe:1b:b9:06:
         43:ae:9f:f8:16:e2:af:d4:3d:5d:77:e7:91:62:0e:a2:f0:dc:
         fc:fd:64:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4MVo0Veka5mOXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
Yzk3Yzc5MmQtMmU3My00NzIzLWIzMzAtNDAzNDZlYWViMWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg63IswT58J7FqgygEs+yWPVhgUFyFVmosqdi
cSyB4Wd4H2ukkdSyDCQ+6mu1Gd3yVHNqLR6tZjcFZkIp6xNu5hEI6VL7sTLA79fu
tbdfjP/2OFKFljJu1mWnqjZ8RYeRnUmyq1IZ3TPenWPPZ/PNlqqLiL3ZNkfuXlr5
1hoT9aeTts/yTPm4eqmpuv/MXWh7ooWq05JGlonCC0VqwJyDOTmTzEYQswFRHaDL
Blr696pMDeOE5ViiElWGbTdvqy/oG2u1LdO2pqlDY3IwgaRawARoAonMBP7Is0S8
twmwBsFJMQzHIahNv5qvdw7YcLV0+4n+AIq1fAPp7gRu/jKlKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPIqy0VszYVgQ2BjcLT/R4OtDL4AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGM0MTU3MjQtZTk5ZC0z
YWIwLTgyYjEtMjY1MzAwYTU1YzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBVHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxNO1lsihWUEUrbUrFs5Q9AkNtSR6iI13DGzKXUJUYK0DTv75lPCDwD
whGPFS8VKi8drJ0kBklGBGohWHcJywH/t2cr2N/V7cUrm6S7bc5g65cbKG/uIO8k
A2i+idLLPyyNTZp7fO3q3WYoLH8w6wq79mXwbZvF6sraMax8LDmK1t0U6pK2SA1I
+lGOK4d+n0Gp7/uUORoZ9FLiqZLqTEm7gd7UIAKO/s7nLtuMvSVhwvNuiMIgHYoc
7NM0v6HoEfVB8mCLJs2YPm/EO0Q+fhwbPYRrzYQcaOCsKt6G0+Kar1MKB+mU/hu5
BkOun/gW4q/UPV1355FiDqLw3Pz9ZMw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:35 2026 by rpki-client