Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d419918-2271-332c-89bc-de385271f2bc.roa
File:                     3d419918-2271-332c-89bc-de385271f2bc.roa (raw, json)
Hash identifier:          4lCNfcZG8mCtytwdU94WD1AaGg770MGC5CCvUBVX/B4=
Subject key identifier:   29:72:CC:74:8C:28:09:B5:BF:DC:D9:8F:F8:C2:40:55:68:9F:80:48
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4984107A3B9C8B8994BF7970
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d419918-2271-332c-89bc-de385271f2bc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        184.21.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:10:7a:3b:9c:8b:89:94:bf:79:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=db97dbc0-87bf-47bc-a046-3f50231f4a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:67:d9:c5:55:50:cb:4b:37:24:16:a7:e2:a4:
                    8b:be:52:4a:10:4f:8d:77:c1:c0:b8:fa:f3:16:fa:
                    6d:43:5d:66:14:9e:f9:90:9d:5b:a2:4a:11:4f:29:
                    4e:bd:fb:e4:09:26:c8:cb:de:4d:8a:ed:22:9e:67:
                    7b:d6:f4:55:15:f5:8e:74:71:b2:ae:36:ed:1b:64:
                    bc:b1:2a:ba:41:ae:7b:c4:a4:0f:36:5f:9e:24:07:
                    6b:c7:69:ea:c1:4c:59:73:35:59:13:86:e3:5e:e7:
                    84:98:3e:34:6a:06:44:e7:3d:cb:62:f6:20:0f:55:
                    72:5e:78:78:33:aa:c1:b5:78:f1:8b:8b:73:79:f6:
                    76:34:d2:1f:9a:c1:52:fc:da:57:d7:d6:67:22:92:
                    6b:a6:8b:e0:76:3a:4d:85:06:17:f5:99:ee:28:1b:
                    24:cc:95:3e:ea:4b:fe:d4:5c:b3:48:9b:db:67:7f:
                    76:58:87:9f:6b:8b:af:f7:56:e3:6a:c2:a2:ff:dc:
                    74:68:82:e2:02:8b:87:83:17:63:e6:fa:f1:d9:0f:
                    f2:46:aa:a6:7a:bd:e8:05:68:50:4a:29:82:80:d0:
                    91:9b:27:cc:67:75:32:0f:d0:77:7d:16:04:72:e2:
                    fd:bc:b0:5c:28:f1:ac:42:24:36:9c:60:eb:26:02:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:72:CC:74:8C:28:09:B5:BF:DC:D9:8F:F8:C2:40:55:68:9F:80:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3d419918-2271-332c-89bc-de385271f2bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:63:8b:25:0a:ee:15:e0:ab:a1:9e:f7:d9:d5:07:de:7a:9d:
         36:c0:16:5b:cd:ed:96:fb:99:7f:55:76:c8:fe:2d:d8:a1:b3:
         28:2e:c0:a1:3e:bf:16:15:ce:05:aa:65:42:b7:9c:1b:8d:e3:
         53:57:d9:17:a6:59:53:f0:01:14:5a:8b:9a:a8:ef:e0:22:f4:
         a6:70:6b:33:46:36:ee:f1:c7:1f:4f:39:e4:16:60:a4:dc:62:
         c6:3e:a5:7b:1d:ee:07:1e:49:5c:3a:f9:83:5c:4b:9a:d9:ef:
         d4:96:19:d5:15:ba:e2:72:cc:8f:5a:a1:76:1b:42:e2:9f:ff:
         24:4a:f1:51:3a:77:5c:64:ea:65:e6:85:b5:7d:8b:5a:b7:33:
         43:13:90:c9:63:c3:e2:39:65:04:13:cf:93:96:d8:12:09:ea:
         33:a1:fc:96:3d:eb:6d:ba:51:62:8e:45:8d:31:f9:75:68:d0:
         94:3b:6a:74:d7:cc:4e:9b:e1:50:a5:d1:09:53:7e:b1:c7:2f:
         63:da:5e:93:1d:60:73:8b:af:e7:1a:6f:c1:ad:3e:9f:35:e7:
         b4:ee:f5:1e:be:43:84:ce:61:10:66:1e:99:84:d3:73:89:80:
         4b:2d:84:52:63:cb:20:78:c7:29:f9:97:ee:7a:49:a8:aa:89:
         e4:49:3a:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhBB6O5yLiZS/eXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZGI5N2RiYzAtODdiZi00N2JjLWEwNDYtM2Y1MDIzMWY0YTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mfZxVVQy0s3JBan4qSLvlJKEE+Nd8HAuPrz
FvptQ11mFJ75kJ1bokoRTylOvfvkCSbIy95Niu0inmd71vRVFfWOdHGyrjbtG2S8
sSq6Qa57xKQPNl+eJAdrx2nqwUxZczVZE4bjXueEmD40agZE5z3LYvYgD1VyXnh4
M6rBtXjxi4tzefZ2NNIfmsFS/NpX19ZnIpJrpovgdjpNhQYX9ZnuKBskzJU+6kv+
1FyzSJvbZ392WIefa4uv91bjasKi/9x0aILiAouHgxdj5vrx2Q/yRqqmer3oBWhQ
SimCgNCRmyfMZ3UyD9B3fRYEcuL9vLBcKPGsQiQ2nGDrJgJn8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFClyzHSMKAm1v9zZj/jCQFVon4BIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2Q0MTk5MTgtMjI3MS0z
MzJjLTg5YmMtZGUzODUyNzFmMmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBW6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJjiyUK7hXgq6Ge99nVB956nTbAFlvN7Zb7mX9Vdsj+LdihsyguwKE+
vxYVzgWqZUK3nBuN41NX2RemWVPwARRai5qo7+Ai9KZwazNGNu7xxx9POeQWYKTc
YsY+pXsd7gceSVw6+YNcS5rZ79SWGdUVuuJyzI9aoXYbQuKf/yRK8VE6d1xk6mXm
hbV9i1q3M0MTkMljw+I5ZQQTz5OW2BIJ6jOh/JY96226UWKORY0x+XVo0JQ7anTX
zE6b4VCl0QlTfrHHL2PaXpMdYHOLr+cab8GtPp8157Tu9R6+Q4TOYRBmHpmE03OJ
gEsthFJjyyB4xyn5l+56SaiqieRJOsA=
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:59:58 2026 by rpki-client