Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b3e8d8e-19c9-37a8-977e-070fac4aaa47.roa
File:                     2b3e8d8e-19c9-37a8-977e-070fac4aaa47.roa (raw, json)
Hash identifier:          gSuFuE3kKDpAH6nKnECXGBkPOmHP7i+/WLz9DQw7DQQ=
Subject key identifier:   7F:DC:D1:60:29:25:23:14:76:DF:06:18:8D:A9:6A:95:C1:4D:01:12
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E011F58B58DF3EBAD5E080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b3e8d8e-19c9-37a8-977e-070fac4aaa47.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:11:f5:8b:58:df:3e:ba:d5:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=273b4d40-733e-46b8-9a38-a7b944bf4f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:76:0d:37:ed:32:41:c7:e0:08:4e:64:4a:
                    cf:81:3e:47:40:e5:d1:e0:2c:59:45:a0:46:12:28:
                    bb:a7:a9:a3:92:b8:d3:52:69:44:d8:57:07:81:b9:
                    a9:d4:3a:c6:52:f4:83:cc:4a:17:23:d8:b6:f2:8b:
                    86:44:cf:45:62:bd:58:b3:ae:05:b7:cc:d3:fc:e8:
                    52:93:63:0c:99:66:f4:fd:ed:bc:a7:51:d4:da:10:
                    2d:2f:04:a9:d8:09:2e:63:f9:8e:80:38:e8:db:59:
                    a2:1a:7b:1b:b3:ca:d5:1b:24:45:06:0d:69:d3:d2:
                    45:34:b9:4a:39:0a:37:fa:ab:30:6d:f4:5e:af:94:
                    83:5c:b9:9f:5e:9c:ac:d1:8a:15:19:11:49:ee:43:
                    0d:4a:32:4a:c9:f1:d4:5d:86:43:d8:49:96:62:dc:
                    8a:f4:19:8d:a2:8f:5d:d3:9c:11:b8:2a:72:ec:f1:
                    b4:23:84:bc:ff:54:09:2a:0a:a6:55:7a:1e:31:10:
                    c7:9b:cc:9a:5a:15:a8:d2:4a:70:bb:23:3c:d7:bb:
                    f8:5e:b2:de:e8:20:b1:aa:18:ff:1c:32:b7:2d:7e:
                    39:cc:07:b2:94:af:e6:9a:95:80:d0:e9:c9:52:92:
                    13:1a:bd:68:49:3c:ae:cc:99:f4:7b:86:2f:44:47:
                    a3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DC:D1:60:29:25:23:14:76:DF:06:18:8D:A9:6A:95:C1:4D:01:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b3e8d8e-19c9-37a8-977e-070fac4aaa47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:0d:91:c8:ee:72:6f:67:8b:b2:27:72:41:16:3a:28:fc:a6:
         36:f4:8f:e8:42:f0:f3:c6:01:d5:55:0b:22:75:34:24:b5:f7:
         53:a7:8b:94:5a:5e:28:5e:7f:0a:fe:60:2b:b2:93:cd:3b:3d:
         f8:81:6e:43:ce:fc:fc:6a:c8:34:3f:ac:3e:ba:24:04:19:40:
         e6:16:53:96:0d:9b:48:73:e9:b3:88:23:eb:e3:bf:08:66:4d:
         a7:3d:9c:ee:32:1e:f1:b9:2a:69:f8:48:7a:85:40:4e:c4:cb:
         c5:77:83:a8:72:2f:8c:03:a5:e7:4b:44:3b:88:7f:be:13:23:
         db:48:f4:93:7a:c0:de:40:cb:fd:74:f2:9c:a5:a1:7b:9c:39:
         30:e1:99:8a:15:31:e0:58:83:2e:52:24:d3:c1:d3:4a:16:e2:
         ea:87:de:ca:f5:ae:c4:ef:d5:d4:b3:d1:86:4e:4a:4e:af:2a:
         d7:27:2d:6b:93:f6:32:6c:8f:fe:ea:f4:95:f2:0b:d3:62:71:
         c0:c7:91:d9:54:9e:39:03:a4:04:14:1b:52:8b:f4:e3:0b:9b:
         0f:b2:80:8b:a1:ad:29:1a:32:2d:d0:53:06:84:ac:d3:9b:ed:
         eb:62:56:02:97:fa:a8:6f:5d:1b:b6:ca:a1:76:13:71:dd:5c:
         0d:1e:85:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4BH1i1jfPrrV4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MjczYjRkNDAtNzMzZS00NmI4LTlhMzgtYTdiOTQ0YmY0ZjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ52DTftMkHH4AhOZErPgT5HQOXR4CxZRaBG
Eii7p6mjkrjTUmlE2FcHgbmp1DrGUvSDzEoXI9i28ouGRM9FYr1Ys64Ft8zT/OhS
k2MMmWb0/e28p1HU2hAtLwSp2AkuY/mOgDjo21miGnsbs8rVGyRFBg1p09JFNLlK
OQo3+qswbfRer5SDXLmfXpys0YoVGRFJ7kMNSjJKyfHUXYZD2EmWYtyK9BmNoo9d
05wRuCpy7PG0I4S8/1QJKgqmVXoeMRDHm8yaWhWo0kpwuyM817v4XrLe6CCxqhj/
HDK3LX45zAeylK/mmpWA0OnJUpITGr1oSTyuzJn0e4YvREejPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/c0WApJSMUdt8GGI2papXBTQESMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmIzZThkOGUtMTljOS0z
N2E4LTk3N2UtMDcwZmFjNGFhYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM0Nkcjucm9ni7InckEWOij8pjb0j+hC8PPGAdVVCyJ1NCS191Oni5Ra
Xihefwr+YCuyk807PfiBbkPO/PxqyDQ/rD66JAQZQOYWU5YNm0hz6bOII+vjvwhm
Tac9nO4yHvG5Kmn4SHqFQE7Ey8V3g6hyL4wDpedLRDuIf74TI9tI9JN6wN5Ay/10
8pyloXucOTDhmYoVMeBYgy5SJNPB00oW4uqH3sr1rsTv1dSz0YZOSk6vKtcnLWuT
9jJsj/7q9JXyC9NiccDHkdlUnjkDpAQUG1KL9OMLmw+ygIuhrSkaMi3QUwaErNOb
7etiVgKX+qhvXRu2yqF2E3HdXA0ehfg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:37:32 2026 by rpki-client