Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21b19d24-194a-30c7-b4ed-c6fa135126fb.roa
File:                     21b19d24-194a-30c7-b4ed-c6fa135126fb.roa (raw, json)
Hash identifier:          ZSmYDCq2M7tGbGCxEH+zUnvphk/2XRWDsbPqI2KMTDE=
Subject key identifier:   C2:E4:45:4B:32:8B:12:C1:DC:C6:F4:59:99:99:0D:3E:6A:9E:95:C1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0CFADFABDCE83D170F9F0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21b19d24-194a-30c7-b4ed-c6fa135126fb.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.62.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:cf:ad:fa:bd:ce:83:d1:70:f9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=135d2ceb-a357-4297-9f72-0712cd4f1d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:7d:31:4a:8d:a9:d4:c0:e0:c2:df:c7:78:
                    fa:1a:f8:95:be:45:e5:96:d5:28:c4:9e:99:86:f5:
                    1e:0a:0d:fa:40:b9:7c:58:76:d6:33:17:73:81:71:
                    de:41:06:2c:5c:23:d4:a1:a6:66:d4:16:52:ba:ec:
                    db:e1:f4:83:bf:17:93:97:ae:d7:ff:38:38:c1:39:
                    b9:0e:f1:64:bf:ac:23:8c:79:68:7e:64:27:ef:14:
                    5d:56:7c:5b:36:d9:64:d1:51:b4:be:38:85:6f:30:
                    c4:26:25:a1:49:b8:45:6b:14:a3:ca:80:39:59:f2:
                    8f:ec:85:1d:7c:24:64:72:98:af:c4:55:1a:62:be:
                    0d:40:68:e7:98:79:51:ff:5d:35:c0:9a:0b:bd:0e:
                    6e:86:f8:42:a0:a2:f9:b3:5e:50:e7:c5:ce:15:f5:
                    18:f3:51:19:e1:7d:0e:55:0a:9b:30:95:cb:c1:29:
                    61:75:f3:f4:89:19:64:b0:75:f7:f6:85:bd:b6:88:
                    0d:d6:d8:10:88:8c:41:e1:ac:11:60:71:80:a9:0d:
                    25:03:d4:a7:95:7f:b6:8e:db:39:f9:4e:e0:b8:6a:
                    5f:d8:90:0d:9d:30:58:ed:c7:83:43:0d:0b:78:81:
                    1e:7f:e2:fa:dd:d6:44:cb:c7:ed:64:06:b1:fe:99:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E4:45:4B:32:8B:12:C1:DC:C6:F4:59:99:99:0D:3E:6A:9E:95:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21b19d24-194a-30c7-b4ed-c6fa135126fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.62.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:94:7b:07:74:8e:13:d6:e6:4a:24:3f:6e:52:43:e7:4a:79:
         47:72:5d:50:14:4a:7f:de:bb:73:b7:dc:b9:df:64:ba:94:0b:
         1a:ca:f6:c1:c2:53:bc:1f:81:88:95:70:d1:d2:8b:ce:01:78:
         c8:48:55:c5:fe:67:70:b8:2d:a6:f2:64:a9:1b:9d:2e:28:e5:
         a7:b3:96:d5:f9:fa:59:65:fc:1f:69:aa:03:08:2d:e0:96:41:
         13:c7:a7:08:af:d2:c7:73:42:4e:95:78:cd:dc:5e:ab:75:d3:
         4a:5d:80:b3:28:33:f8:95:6d:c9:37:cc:84:f4:a4:68:c1:bb:
         aa:df:42:4c:80:69:af:f4:12:8a:f2:3d:2c:c5:ad:3f:51:a3:
         d8:c9:77:6e:ac:58:f1:7c:c0:4a:6a:f9:37:8c:62:42:92:2b:
         11:7c:c4:41:b4:de:87:c2:0b:fc:34:c8:d4:88:ad:5c:0b:74:
         00:a4:18:8e:bd:e0:fd:97:1e:f7:bc:f4:af:e3:6d:56:7d:a6:
         18:0e:f0:28:4b:c3:ee:f9:70:63:35:14:57:48:be:f4:fa:15:
         7c:ed:a2:50:7d:0d:3f:e1:19:8f:3b:99:da:27:c2:cc:27:92:
         b1:33:ca:b8:3a:48:04:07:0c:90:3f:fb:6c:87:4f:05:0e:f3:
         fc:21:07:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4M+t+r3Og9Fw+fAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MTM1ZDJjZWItYTM1Ny00Mjk3LTlmNzItMDcxMmNkNGYxZDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzA19MUqNqdTA4MLfx3j6GviVvkXlltUoxJ6Z
hvUeCg36QLl8WHbWMxdzgXHeQQYsXCPUoaZm1BZSuuzb4fSDvxeTl67X/zg4wTm5
DvFkv6wjjHlofmQn7xRdVnxbNtlk0VG0vjiFbzDEJiWhSbhFaxSjyoA5WfKP7IUd
fCRkcpivxFUaYr4NQGjnmHlR/101wJoLvQ5uhvhCoKL5s15Q58XOFfUY81EZ4X0O
VQqbMJXLwSlhdfP0iRlksHX39oW9togN1tgQiIxB4awRYHGAqQ0lA9SnlX+2jts5
+U7guGpf2JANnTBY7ceDQw0LeIEef+L63dZEy8ftZAax/pnoLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMLkRUsyixLB3Mb0WZmZDT5qnpXBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjFiMTlkMjQtMTk0YS0z
MGM3LWI0ZWQtYzZmYTEzNTEyNmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD6XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFiUewd0jhPW5kokP25SQ+dKeUdyXVAUSn/eu3O33LnfZLqUCxrK9sHC
U7wfgYiVcNHSi84BeMhIVcX+Z3C4LabyZKkbnS4o5aezltX5+lll/B9pqgMILeCW
QRPHpwiv0sdzQk6VeM3cXqt100pdgLMoM/iVbck3zIT0pGjBu6rfQkyAaa/0Eory
PSzFrT9Ro9jJd26sWPF8wEpq+TeMYkKSKxF8xEG03ofCC/w0yNSIrVwLdACkGI69
4P2XHve89K/jbVZ9phgO8ChLw+75cGM1FFdIvvT6FXztolB9DT/hGY87mdonwswn
krEzyrg6SAQHDJA/+2yHTwUO8/whB+o=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:26 2026 by rpki-client