Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6441afc1-b473-3eb8-89e8-dfe4c6d022db.roa
File:                     6441afc1-b473-3eb8-89e8-dfe4c6d022db.roa (raw, json)
Hash identifier:          EMi7/DgsfRJXfNobuF+4Zuedr+zXheoMuvacOgubLKo=
Subject key identifier:   51:E1:41:11:D7:F5:23:05:1A:82:DE:CC:2F:3D:F6:EA:F1:CD:97:7D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0A031EBA6F8F604B17800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6441afc1-b473-3eb8-89e8-dfe4c6d022db.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.198.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:a0:31:eb:a6:f8:f6:04:b1:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=ad82fe8d-49c8-4126-be97-307550b54eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:6b:24:f3:5d:3e:f3:65:1f:43:ac:7a:9a:
                    64:71:1a:61:ea:ea:b9:79:b2:50:e9:4e:01:73:03:
                    64:79:43:42:c4:9c:27:b3:c8:86:65:e9:27:9a:2e:
                    3b:f8:76:3f:28:38:7c:81:16:1d:5c:b3:78:6a:b7:
                    0b:93:b5:08:68:93:ce:30:66:74:bf:e3:f0:56:15:
                    49:b2:ce:f6:a6:08:1a:19:a6:e8:dc:ae:82:7f:40:
                    24:4e:1f:94:04:11:2e:81:ef:70:bc:93:68:cf:ef:
                    f5:f0:47:fc:21:9d:3a:0d:e6:9d:cf:07:f8:f9:9e:
                    5b:87:69:d5:77:ef:95:2d:c8:9f:13:48:29:03:34:
                    95:29:62:94:e9:5d:fc:e6:c5:85:3e:c8:4a:58:27:
                    1b:67:02:bc:ed:fd:41:e9:47:35:7d:50:62:7e:c2:
                    80:b2:41:3e:17:1c:0e:41:5f:b6:f4:ff:8e:f6:65:
                    9f:17:f6:57:73:99:14:92:0e:a5:27:3a:4e:72:65:
                    e8:a3:b3:11:0e:19:0d:8c:41:e9:3b:a9:7c:e4:08:
                    e5:76:2a:1a:e0:32:28:c2:88:4f:19:aa:c6:9b:b8:
                    9b:80:35:cc:e9:91:f0:bb:4c:00:d6:a0:af:cf:41:
                    59:87:1c:4c:23:79:d9:66:8d:69:33:96:c6:2c:ac:
                    42:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E1:41:11:D7:F5:23:05:1A:82:DE:CC:2F:3D:F6:EA:F1:CD:97:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6441afc1-b473-3eb8-89e8-dfe4c6d022db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e6:11:8b:03:cc:e3:ff:24:93:5f:85:31:e9:b1:14:58:63:
         44:6c:e0:2e:eb:99:be:76:90:ab:ea:0c:c1:55:e0:41:87:77:
         37:ae:27:ea:3c:a2:e8:7b:09:78:60:d3:02:83:e2:92:19:f5:
         5d:c5:ec:d6:b0:08:e5:ce:c7:bc:35:a0:ec:ce:f0:63:95:e7:
         3e:3b:6c:10:af:4d:1d:61:d3:97:45:7e:27:d8:01:8d:e3:39:
         2a:9b:ee:e5:9e:24:ed:44:c3:c5:34:50:08:76:24:df:54:21:
         4b:09:fc:a5:39:2e:f6:56:af:97:94:7a:f4:ba:ca:81:8c:4a:
         92:a4:14:4c:90:78:35:55:49:62:1d:61:40:b3:22:56:73:41:
         14:b6:26:ff:92:bc:b6:d3:67:59:09:b9:43:48:61:31:67:d3:
         80:93:bf:5c:aa:51:55:59:9e:cf:2d:42:e4:0e:04:04:f9:91:
         74:a8:ff:2e:96:11:9e:ad:42:ab:91:d9:a9:53:f8:4c:12:3f:
         0c:b9:66:23:3e:00:96:fb:41:c8:91:d1:af:cc:ad:69:4a:31:
         e5:f7:d2:dd:f5:2a:20:57:2f:fa:da:45:72:7b:e0:f3:a8:92:
         15:e6:02:31:89:ad:32:07:d5:47:db:5c:26:1c:22:96:13:6f:
         7f:f1:62:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4KAx66b49gSxeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
YWQ4MmZlOGQtNDljOC00MTI2LWJlOTctMzA3NTUwYjU0ZWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxxrJPNdPvNlH0OseppkcRph6uq5ebJQ6U4B
cwNkeUNCxJwns8iGZeknmi47+HY/KDh8gRYdXLN4arcLk7UIaJPOMGZ0v+PwVhVJ
ss72pggaGabo3K6Cf0AkTh+UBBEuge9wvJNoz+/18Ef8IZ06Deadzwf4+Z5bh2nV
d++VLcifE0gpAzSVKWKU6V385sWFPshKWCcbZwK87f1B6Uc1fVBifsKAskE+FxwO
QV+29P+O9mWfF/ZXc5kUkg6lJzpOcmXoo7MRDhkNjEHpO6l85Ajldioa4DIowohP
GarGm7ibgDXM6ZHwu0wA1qCvz0FZhxxMI3nZZo1pM5bGLKxC3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFHhQRHX9SMFGoLezC899urxzZd9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjQ0MWFmYzEtYjQ3My0z
ZWI4LTg5ZTgtZGZlNGM2ZDAyMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnmEYsDzOP/JJNfhTHpsRRYY0Rs4C7rmb52kKvqDMFV4EGHdzeuJ+o8
ouh7CXhg0wKD4pIZ9V3F7NawCOXOx7w1oOzO8GOV5z47bBCvTR1h05dFfifYAY3j
OSqb7uWeJO1Ew8U0UAh2JN9UIUsJ/KU5LvZWr5eUevS6yoGMSpKkFEyQeDVVSWId
YUCzIlZzQRS2Jv+SvLbTZ1kJuUNIYTFn04CTv1yqUVVZns8tQuQOBAT5kXSo/y6W
EZ6tQquR2alT+EwSPwy5ZiM+AJb7QciR0a/MrWlKMeX30t31KiBXL/raRXJ74POo
khXmAjGJrTIH1UfbXCYcIpYTb3/xYkM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:29:34 2026 by rpki-client