Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/527f8a27-09f5-3bb6-b5d5-5afb8b56577f.roa
File:                     527f8a27-09f5-3bb6-b5d5-5afb8b56577f.roa (raw, json)
Hash identifier:          HGyoaDKiCdLk+fWHJbNxlT+1dmrysPAq0AVh9IzLgWc=
Subject key identifier:   00:3F:48:A3:23:2F:C2:9C:AC:98:61:DD:2E:6B:29:42:FB:18:08:DC
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0200FF1279491C8F69180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/527f8a27-09f5-3bb6-b5d5-5afb8b56577f.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.63.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:20:0f:f1:27:94:91:c8:f6:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=08b1e126-442e-45f4-b4e3-4e1c6cd201bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:75:60:10:1a:91:f6:0f:48:ed:24:f2:1c:91:
                    fc:05:6c:78:b2:23:ba:22:70:c4:67:3b:32:16:16:
                    10:d3:43:a4:65:24:26:c7:1c:a3:c7:34:a2:66:36:
                    15:76:a7:93:51:b1:f8:d6:01:aa:90:c0:2e:42:01:
                    26:72:2a:68:db:ff:b9:d2:c0:a7:ee:d7:bb:cf:a3:
                    aa:70:dd:6b:42:4c:8d:63:38:11:9f:0e:60:c4:69:
                    c1:84:2e:17:3d:a0:a1:0b:83:36:96:46:0e:ff:55:
                    31:da:cb:63:65:4d:01:65:97:57:f7:a7:0a:d3:f2:
                    63:b5:45:f7:63:18:1b:d5:ef:ee:34:20:1d:43:03:
                    db:a1:6c:0e:40:57:6a:46:c1:22:a4:4c:ed:14:be:
                    3d:ed:97:96:d7:6b:d4:b0:c1:76:dd:76:83:0d:08:
                    48:07:e2:c3:e5:74:50:c2:6b:83:0a:ae:b7:73:91:
                    f1:f8:a7:85:9b:16:0e:a3:4d:1e:75:7e:5d:54:6a:
                    0b:83:e4:b9:06:6a:8e:b3:e1:ed:d3:3a:ca:eb:48:
                    b7:f2:c7:56:9d:a3:87:7e:9f:b6:9c:cc:fe:fd:52:
                    31:02:65:4e:d1:96:73:e0:bc:62:3e:b8:f1:03:2e:
                    ed:f1:74:12:fa:8a:28:1c:e9:c6:84:04:81:0b:9f:
                    21:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3F:48:A3:23:2F:C2:9C:AC:98:61:DD:2E:6B:29:42:FB:18:08:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/527f8a27-09f5-3bb6-b5d5-5afb8b56577f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:31:ad:09:2e:f0:42:29:5f:2d:79:aa:be:1f:ed:0f:1f:3e:
         47:17:d7:42:f5:b9:cc:9f:97:e9:b9:57:ac:c4:fb:2f:12:5b:
         7d:e6:a5:de:e9:ad:df:86:8d:34:60:15:44:7a:38:e8:ad:8a:
         b9:04:e1:7c:66:f3:ee:55:3e:d8:96:5c:d1:aa:fa:8a:c1:7c:
         fb:35:c4:6a:6f:4f:14:5c:73:80:20:30:80:51:0a:50:3b:11:
         e4:6c:8e:2c:34:a0:8b:ac:41:31:f2:f8:fb:a3:e7:39:3d:7d:
         58:6c:6a:b3:51:25:1c:e6:01:8a:71:7b:27:ea:a1:74:41:8c:
         5a:49:af:62:92:bc:6c:b8:f6:a7:ee:77:14:84:36:ab:d9:e3:
         65:92:4a:38:ca:67:f6:e6:31:fa:90:c8:25:0b:bb:7a:2a:b3:
         8f:9b:8c:ae:cf:63:af:e9:f0:bd:57:37:56:34:8c:df:3b:9c:
         22:39:61:32:23:93:2b:fc:38:14:13:03:81:b2:91:08:b5:03:
         69:21:6c:9e:2b:bb:a5:a8:f4:08:b3:c0:df:9b:43:20:8d:0c:
         35:9a:68:08:fd:cf:65:1a:d4:18:89:52:76:36:61:33:17:fe:
         79:dc:4d:ab:c6:4c:b0:87:f4:d6:bc:2d:a0:37:db:7b:31:ae:
         7d:23:80:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CAP8SeUkcj2kYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MDhiMWUxMjYtNDQyZS00NWY0LWI0ZTMtNGUxYzZjZDIwMWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknVgEBqR9g9I7STyHJH8BWx4siO6InDEZzsy
FhYQ00OkZSQmxxyjxzSiZjYVdqeTUbH41gGqkMAuQgEmcipo2/+50sCn7te7z6Oq
cN1rQkyNYzgRnw5gxGnBhC4XPaChC4M2lkYO/1Ux2stjZU0BZZdX96cK0/JjtUX3
Yxgb1e/uNCAdQwPboWwOQFdqRsEipEztFL497ZeW12vUsMF23XaDDQhIB+LD5XRQ
wmuDCq63c5Hx+KeFmxYOo00edX5dVGoLg+S5BmqOs+Ht0zrK60i38sdWnaOHfp+2
nMz+/VIxAmVO0ZZz4LxiPrjxAy7t8XQS+oooHOnGhASBC58hdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAA/SKMjL8KcrJhh3S5rKUL7GAjcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTI3ZjhhMjctMDlmNS0z
YmI2LWI1ZDUtNWFmYjhiNTY1NzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD9vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8xrQku8EIpXy15qr4f7Q8fPkcX10L1ucyfl+m5V6zE+y8SW33mpd7p
rd+GjTRgFUR6OOitirkE4Xxm8+5VPtiWXNGq+orBfPs1xGpvTxRcc4AgMIBRClA7
EeRsjiw0oIusQTHy+Puj5zk9fVhsarNRJRzmAYpxeyfqoXRBjFpJr2KSvGy49qfu
dxSENqvZ42WSSjjKZ/bmMfqQyCULu3oqs4+bjK7PY6/p8L1XN1Y0jN87nCI5YTIj
kyv8OBQTA4GykQi1A2khbJ4ru6Wo9AizwN+bQyCNDDWaaAj9z2Ua1BiJUnY2YTMX
/nncTavGTLCH9Na8LaA323sxrn0jgKQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:30 2026 by rpki-client