Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38c8de0c-ff6d-3ad4-88eb-1b3f73ea7283.roa
File:                     38c8de0c-ff6d-3ad4-88eb-1b3f73ea7283.roa (raw, json)
Hash identifier:          lF7jwKraYeiykJ6zQi2N45JkB6gEeNtsWnYPL1s2RTE=
Subject key identifier:   99:F9:2B:24:BC:49:23:B2:05:C6:58:4D:DA:1A:FC:28:12:98:AD:8B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F49840DF98293CFC256D20100
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38c8de0c-ff6d-3ad4-88eb-1b3f73ea7283.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        184.21.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:0d:f9:82:93:cf:c2:56:d2:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2674518d-2cc7-483b-bb6f-564697f4da98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:80:97:d1:24:68:64:06:1b:4a:39:2b:82:4c:
                    45:b3:ea:65:4f:84:50:2d:eb:4e:89:75:10:76:2d:
                    77:7c:0d:b7:c2:fc:b0:fc:53:7c:09:c2:32:13:f0:
                    fa:17:c0:c8:c5:d8:c9:3d:2f:42:36:3b:93:1b:8e:
                    c4:c9:e0:d7:e3:b7:17:cb:a8:08:dd:95:dc:4c:4f:
                    c2:90:cc:85:74:8e:0c:09:33:3c:8d:bc:63:0b:a5:
                    db:34:43:ee:07:84:04:ae:af:11:b5:70:d9:50:2f:
                    69:95:53:80:3f:6a:1e:d4:1c:2b:b9:3c:3b:1f:21:
                    c5:27:0c:cd:5b:e3:cd:c0:16:4e:c3:82:e4:ac:44:
                    f0:24:3f:e4:81:97:b8:1f:13:65:da:50:68:dc:9c:
                    6e:63:55:e8:eb:18:19:84:db:f9:7a:98:e2:43:f9:
                    fc:02:d3:4e:40:0c:7a:31:85:8c:29:78:17:88:fc:
                    42:3a:6f:6b:29:00:e7:64:e2:6c:50:28:5e:37:53:
                    ba:b4:f4:4e:d9:f4:a1:96:92:5d:3b:85:99:32:80:
                    d7:07:d1:21:40:3d:b6:d9:b3:30:5b:c1:d9:2d:9c:
                    53:1d:b7:68:a0:2f:3f:51:63:02:fa:d1:87:6c:a8:
                    74:57:d6:11:67:ea:ac:55:92:32:03:3a:2a:33:d4:
                    3b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F9:2B:24:BC:49:23:B2:05:C6:58:4D:DA:1A:FC:28:12:98:AD:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38c8de0c-ff6d-3ad4-88eb-1b3f73ea7283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:00:19:a4:8f:4c:07:e6:8c:6f:4a:05:59:98:13:e8:3a:34:
         8c:54:d8:15:c5:44:0e:8d:43:99:49:95:6b:50:06:e4:45:a4:
         17:52:d8:c4:e4:f2:51:ee:e4:1b:96:a1:4c:84:45:6f:29:07:
         ef:e5:97:2c:93:65:3f:8c:7a:80:29:de:ae:13:e7:33:10:af:
         92:47:7e:7c:c7:80:2e:3e:d4:4a:d1:8f:ee:0c:13:34:a1:1d:
         3f:d3:38:27:b9:a4:b2:dd:ac:d6:67:cd:98:15:c0:42:d3:36:
         21:d5:57:d6:a4:78:22:cc:08:a6:af:30:99:e2:29:d1:eb:17:
         18:26:0f:24:4b:0d:91:b7:f0:28:5b:80:0c:c4:83:9c:ac:dc:
         65:a0:06:04:9e:a7:3b:f7:02:86:18:1d:ea:98:13:17:3c:54:
         c8:99:f2:fa:5f:dc:f0:b8:83:b8:cc:6a:c1:34:3d:7b:b0:e6:
         55:b5:cd:b5:84:2e:27:4c:4c:f6:f4:b1:4b:a4:c1:ef:28:8a:
         58:ce:e2:85:78:0a:15:64:38:a1:b6:43:3e:d6:12:6a:76:21:
         79:e0:ea:6a:af:94:ec:63:60:02:28:81:0b:82:85:e6:4e:92:
         1b:dd:30:51:5e:5e:7c:d4:57:12:cb:d9:7f:8a:4f:35:f5:de:
         2b:f6:cf:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhA35gpPPwlbSAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MjY3NDUxOGQtMmNjNy00ODNiLWJiNmYtNTY0Njk3ZjRkYTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYCX0SRoZAYbSjkrgkxFs+plT4RQLetOiXUQ
di13fA23wvyw/FN8CcIyE/D6F8DIxdjJPS9CNjuTG47EyeDX47cXy6gI3ZXcTE/C
kMyFdI4MCTM8jbxjC6XbNEPuB4QErq8RtXDZUC9plVOAP2oe1BwruTw7HyHFJwzN
W+PNwBZOw4LkrETwJD/kgZe4HxNl2lBo3JxuY1Xo6xgZhNv5epjiQ/n8AtNOQAx6
MYWMKXgXiPxCOm9rKQDnZOJsUCheN1O6tPRO2fShlpJdO4WZMoDXB9EhQD222bMw
W8HZLZxTHbdooC8/UWMC+tGHbKh0V9YRZ+qsVZIyAzoqM9Q7MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJn5KyS8SSOyBcZYTdoa/CgSmK2LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzhjOGRlMGMtZmY2ZC0z
YWQ0LTg4ZWItMWIzZjczZWE3MjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMIAGaSPTAfmjG9KBVmYE+g6NIxU2BXFRA6NQ5lJlWtQBuRFpBdS2MTk
8lHu5BuWoUyERW8pB+/llyyTZT+MeoAp3q4T5zMQr5JHfnzHgC4+1ErRj+4MEzSh
HT/TOCe5pLLdrNZnzZgVwELTNiHVV9akeCLMCKavMJniKdHrFxgmDyRLDZG38Chb
gAzEg5ys3GWgBgSepzv3AoYYHeqYExc8VMiZ8vpf3PC4g7jMasE0PXuw5lW1zbWE
LidMTPb0sUukwe8oiljO4oV4ChVkOKG2Qz7WEmp2IXng6mqvlOxjYAIogQuCheZO
khvdMFFeXnzUVxLL2X+KTzX13iv2z9M=
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:11:59 2026 by rpki-client