Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6bf75b89-4ce0-3d1d-95c3-2bab3182c66f.roa
File:                     6bf75b89-4ce0-3d1d-95c3-2bab3182c66f.roa (raw, json)
Hash identifier:          jUUn+gKsGBdZ3A0tXcC+7wUvJRLEnBqITnbDdj5g9rI=
Subject key identifier:   D1:59:32:3F:CD:B6:B2:A6:B1:A4:CF:B4:72:4D:4E:8B:13:C1:D3:CE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E09A156D8F2DE104235C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6bf75b89-4ce0-3d1d-95c3-2bab3182c66f.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.197.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:9a:15:6d:8f:2d:e1:04:23:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=f8afa7c7-8d5d-440f-8ea7-83a82fb43eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:65:00:3e:67:cb:99:91:c0:a6:0a:9b:2f:9f:
                    8f:57:31:93:c5:15:1d:fe:32:63:55:d6:b7:55:d2:
                    59:47:d4:9f:b5:0e:f4:b5:db:56:4d:2c:b4:1f:c2:
                    05:d3:2e:2f:76:37:79:3a:95:c6:b0:71:c0:ae:15:
                    46:cd:09:aa:51:0b:65:0b:45:a5:12:8c:c4:a4:70:
                    e4:6d:6a:76:be:33:2d:d1:b2:36:9f:fa:15:5d:22:
                    7f:87:d7:cf:dc:cd:2a:2b:ae:cd:6d:53:63:5a:c4:
                    5f:37:78:40:78:71:b2:fe:eb:41:75:47:4d:e7:90:
                    02:25:5b:a5:5f:2d:32:f3:b5:c2:23:78:6d:ab:64:
                    c7:6d:99:d4:0e:69:bd:2a:16:1a:ea:5d:d8:b9:af:
                    7e:24:f8:6d:c2:63:43:e4:23:67:07:9f:73:94:29:
                    a8:dc:b6:3d:11:cb:95:26:94:35:01:a0:72:a8:15:
                    98:3d:c3:df:6d:ab:db:7a:f8:f5:ac:c9:89:39:0a:
                    e7:f3:ee:5e:92:de:f0:46:f9:03:e0:c4:be:fe:41:
                    cf:b0:69:b3:18:9f:04:2f:be:19:08:79:ef:a2:0e:
                    91:a4:29:7e:c8:8d:05:6d:b7:64:cb:38:ae:34:9d:
                    74:64:ae:c9:80:35:97:6b:da:57:75:57:77:a9:c3:
                    ce:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:59:32:3F:CD:B6:B2:A6:B1:A4:CF:B4:72:4D:4E:8B:13:C1:D3:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6bf75b89-4ce0-3d1d-95c3-2bab3182c66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:da:2c:23:7c:e3:91:5d:05:0d:53:05:b9:6b:f1:f7:2d:04:
         cd:d8:59:bc:6b:77:48:f7:92:38:13:53:bb:0a:4d:8e:26:6e:
         57:75:d6:86:d4:f0:17:f3:60:69:95:26:61:0d:4f:a6:cf:b3:
         8e:9f:13:dc:26:b3:7f:5a:6b:13:9a:f5:63:67:d0:02:29:68:
         f7:f5:7f:2d:00:e3:a4:80:c9:65:2d:59:5f:b3:03:29:57:d2:
         36:f1:87:dc:ed:87:df:b2:8e:eb:ac:ba:e0:26:e2:3b:d4:ec:
         77:c5:0a:7e:04:d4:6c:bb:42:fb:5a:e5:82:c7:3a:10:4a:b8:
         90:31:2e:2c:3f:b1:56:03:9b:7b:18:5e:79:c5:01:ee:96:e8:
         db:32:e9:1a:62:80:92:2c:3b:cd:53:6f:58:9f:87:fc:75:e6:
         c3:0e:a6:89:63:3f:63:c4:94:c9:cd:5d:ae:25:ee:d9:39:53:
         13:ca:8a:3b:0e:08:22:70:c0:2a:f1:fd:91:63:2e:30:6e:f0:
         90:5c:81:90:f7:e8:89:f0:01:14:c2:a9:93:f8:93:70:f9:0c:
         02:bd:f2:37:bc:ce:d3:a3:c4:f2:40:cd:ea:44:3e:d6:82:e4:
         56:e3:0a:1e:01:8d:f2:1d:26:e2:15:49:47:45:86:e6:de:9e:
         71:cf:f3:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4JoVbY8t4QQjXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
ZjhhZmE3YzctOGQ1ZC00NDBmLThlYTctODNhODJmYjQzZWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWUAPmfLmZHApgqbL5+PVzGTxRUd/jJjVda3
VdJZR9SftQ70tdtWTSy0H8IF0y4vdjd5OpXGsHHArhVGzQmqUQtlC0WlEozEpHDk
bWp2vjMt0bI2n/oVXSJ/h9fP3M0qK67NbVNjWsRfN3hAeHGy/utBdUdN55ACJVul
Xy0y87XCI3htq2THbZnUDmm9KhYa6l3Yua9+JPhtwmND5CNnB59zlCmo3LY9EcuV
JpQ1AaByqBWYPcPfbavbevj1rMmJOQrn8+5ekt7wRvkD4MS+/kHPsGmzGJ8EL74Z
CHnvog6RpCl+yI0FbbdkyziuNJ10ZK7JgDWXa9pXdVd3qcPOhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNFZMj/NtrKmsaTPtHJNTosTwdPOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmJmNzViODktNGNlMC0z
ZDFkLTk1YzMtMmJhYjMxODJjNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8VrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMXaLCN845FdBQ1TBblr8fctBM3YWbxrd0j3kjgTU7sKTY4mbld11obU
8BfzYGmVJmENT6bPs46fE9wms39aaxOa9WNn0AIpaPf1fy0A46SAyWUtWV+zAylX
0jbxh9zth9+yjuusuuAm4jvU7HfFCn4E1Gy7Qvta5YLHOhBKuJAxLiw/sVYDm3sY
XnnFAe6W6Nsy6RpigJIsO81Tb1ifh/x15sMOpoljP2PElMnNXa4l7tk5UxPKijsO
CCJwwCrx/ZFjLjBu8JBcgZD36InwARTCqZP4k3D5DAK98je8ztOjxPJAzepEPtaC
5FbjCh4BjfIdJuIVSUdFhubennHP80U=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:27 2026 by rpki-client