Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/47e6b6ad-da3d-346a-a562-4d5cef02580f.roa
File:                     47e6b6ad-da3d-346a-a562-4d5cef02580f.roa (raw, json)
Hash identifier:          LXLN+nO0FbhS3Q9YKV1DvHE+H0tFtolZEoviKH8rLbw=
Subject key identifier:   8C:13:A8:89:DB:0A:97:7F:7E:A7:22:A1:A8:28:10:F9:05:4E:F8:CC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F4983947AFD17531D039F4A80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/47e6b6ad-da3d-346a-a562-4d5cef02580f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        99.197.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:83:94:7a:fd:17:53:1d:03:9f:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=355cd060-7093-4193-ad90-737dc099e3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:09:ac:db:8b:fa:34:b1:ba:a7:33:ca:61:
                    d6:45:ff:d2:de:41:7c:3c:e8:d4:25:54:52:3f:bd:
                    61:a4:2c:bd:22:16:35:fd:0a:05:cf:bd:a1:74:6c:
                    9a:c8:ec:c1:26:a2:b5:ed:68:fd:ca:5d:4b:ea:12:
                    78:3a:f4:46:26:e9:ee:4c:54:8b:54:44:6b:45:3b:
                    dd:95:b6:0b:5f:a6:7a:d6:9f:fb:5f:2a:bf:45:20:
                    11:4f:3a:a3:82:bc:8d:bc:c7:af:44:1d:d6:3c:3e:
                    3f:94:c8:25:43:4f:df:ef:8e:a7:00:77:0b:ac:68:
                    d7:2a:32:8c:c7:7a:90:89:72:ff:3b:17:a7:03:56:
                    92:98:5f:ef:fa:11:e7:dc:cc:23:05:50:39:4b:1b:
                    16:29:51:4b:d9:e4:b1:a6:a0:fa:3e:ce:a1:44:3d:
                    e9:e3:cf:c4:8e:e1:78:0c:ee:18:d7:49:35:24:02:
                    5b:89:a5:23:4c:92:1f:c9:55:75:fa:c8:24:8b:e8:
                    b1:c6:81:ff:e6:3f:4b:7b:74:09:97:2e:9e:dc:49:
                    d4:d3:d4:35:bd:f9:16:26:3d:65:07:71:20:14:1f:
                    80:ef:43:91:cc:9b:75:3f:07:b5:91:ac:7c:3a:ed:
                    f5:60:be:d1:dc:a3:26:94:c1:87:af:7b:3c:1f:58:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:13:A8:89:DB:0A:97:7F:7E:A7:22:A1:A8:28:10:F9:05:4E:F8:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/47e6b6ad-da3d-346a-a562-4d5cef02580f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:bc:fa:39:8a:38:f9:b3:a3:bd:8c:f2:96:42:9d:53:d8:96:
         f5:27:d2:5a:bf:5a:82:7d:6a:15:97:fc:3d:77:0d:7f:03:97:
         f6:f8:c1:0c:29:11:d6:02:df:f1:46:22:1d:04:a7:27:d5:ce:
         6e:f3:71:a1:78:f0:ba:8c:b8:17:e7:c7:16:ea:90:65:9b:6f:
         7f:ad:3d:28:f9:0b:f9:ec:3e:44:b5:12:10:ca:52:da:f5:3e:
         0a:f6:3f:f3:35:d2:92:8a:4b:b0:d9:62:36:2f:20:49:78:9d:
         08:b1:e0:97:6f:9c:5c:10:0a:33:62:30:ad:12:89:46:f7:f8:
         13:20:6d:b6:55:a4:9a:2b:02:a6:ea:66:36:4b:75:8c:b5:a4:
         bf:ad:8f:06:5b:10:e7:cb:a8:ef:a5:a7:97:6e:0e:0f:6d:2f:
         1b:59:e3:b2:13:d2:b6:b2:c3:6b:9e:7d:ac:64:76:69:72:5f:
         3e:da:e4:73:4d:32:c2:86:ea:19:7b:fa:69:cc:0d:51:20:3a:
         1e:93:54:67:5b:a0:6a:41:3a:b0:c2:a8:fd:03:c2:c7:e6:49:
         49:22:1d:d4:f5:7e:eb:b0:3d:a3:1c:14:36:1f:0c:2a:9d:3b:
         5f:af:56:68:4d:ca:e9:23:4c:73:ac:db:d6:d1:0b:d4:23:2a:
         7a:f3:13:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg5R6/RdTHQOfSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzU1Y2QwNjAtNzA5My00MTkzLWFkOTAtNzM3ZGMwOTllM2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BIJrNuL+jSxuqczymHWRf/S3kF8POjUJVRS
P71hpCy9IhY1/QoFz72hdGyayOzBJqK17Wj9yl1L6hJ4OvRGJunuTFSLVERrRTvd
lbYLX6Z61p/7Xyq/RSARTzqjgryNvMevRB3WPD4/lMglQ0/f746nAHcLrGjXKjKM
x3qQiXL/OxenA1aSmF/v+hHn3MwjBVA5SxsWKVFL2eSxpqD6Ps6hRD3p48/EjuF4
DO4Y10k1JAJbiaUjTJIfyVV1+sgki+ixxoH/5j9Le3QJly6e3EnU09Q1vfkWJj1l
B3EgFB+A70ORzJt1Pwe1kax8Ou31YL7R3KMmlMGHr3s8H1jkRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIwTqInbCpd/fqcioagoEPkFTvjMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDdlNmI2YWQtZGEzZC0z
NDZhLWE1NjItNGQ1Y2VmMDI1ODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8UkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANa8+jmKOPmzo72M8pZCnVPYlvUn0lq/WoJ9ahWX/D13DX8Dl/b4wQwp
EdYC3/FGIh0EpyfVzm7zcaF48LqMuBfnxxbqkGWbb3+tPSj5C/nsPkS1EhDKUtr1
Pgr2P/M10pKKS7DZYjYvIEl4nQix4JdvnFwQCjNiMK0SiUb3+BMgbbZVpJorAqbq
ZjZLdYy1pL+tjwZbEOfLqO+lp5duDg9tLxtZ47IT0rayw2uefaxkdmlyXz7a5HNN
MsKG6hl7+mnMDVEgOh6TVGdboGpBOrDCqP0DwsfmSUkiHdT1fuuwPaMcFDYfDCqd
O1+vVmhNyukjTHOs29bRC9QjKnrzExg=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:10:40 2026 by rpki-client