Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9a7196e-5a02-3ba1-9d06-5a7a3a4ec0b5.roa
File:                     b9a7196e-5a02-3ba1-9d06-5a7a3a4ec0b5.roa (raw, json)
Hash identifier:          ByDQmyFV7UPGOB7qitFVH0UShv10aATDCy23sf2NNPs=
Subject key identifier:   E4:95:FA:5D:E2:CF:B6:C6:94:64:A2:21:E4:7E:60:C5:80:F5:6F:C7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFE6B63A8ED1CA412C8D80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9a7196e-5a02-3ba1-9d06-5a7a3a4ec0b5.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.196.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:e6:b6:3a:8e:d1:ca:41:2c:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=65846b53-80cf-4eec-9b20-2a1d8ddfe656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4d:27:d1:78:7a:7a:69:50:2e:6a:54:5e:11:
                    37:0b:4c:b0:4a:c1:d3:fd:34:8a:cf:06:c1:f7:5f:
                    a6:e3:61:4f:97:ec:ca:4b:9f:6c:4c:01:c0:14:20:
                    b3:d4:23:88:fc:d8:f3:c6:43:35:4c:a8:cc:f6:e4:
                    a7:e4:0c:9d:72:b5:a1:dd:a8:0f:b0:5e:a6:a3:05:
                    e9:36:0a:cc:6d:8d:0e:55:28:e8:7e:0c:6e:d7:cf:
                    2d:76:b8:cc:9d:8f:cd:b9:08:6c:50:ed:de:9f:64:
                    f9:1e:c6:5b:87:c0:d0:53:a8:ac:81:1e:23:30:d3:
                    a6:5f:cc:9e:e0:02:df:a9:b5:2d:a8:da:f5:2d:67:
                    f5:d7:8a:a3:2e:c4:15:ac:d7:ee:9b:07:08:3f:35:
                    50:12:5e:0e:a1:68:04:a6:2c:5b:15:d4:75:1e:85:
                    61:5e:12:a1:cb:64:b3:09:ac:74:9a:ef:d3:4c:a8:
                    35:f4:34:03:45:da:c5:a0:a0:30:3f:b6:a4:84:81:
                    5a:e5:20:e6:5b:cd:f5:a7:91:8a:cb:bb:46:09:2c:
                    d8:40:0a:dc:6e:ca:9b:b3:39:2a:49:e4:43:e0:04:
                    cf:63:9c:9c:38:e4:a8:04:dc:b8:c9:48:3d:b1:f5:
                    8a:da:6f:16:c1:84:1d:6c:30:f2:98:8f:38:1c:de:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:95:FA:5D:E2:CF:B6:C6:94:64:A2:21:E4:7E:60:C5:80:F5:6F:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b9a7196e-5a02-3ba1-9d06-5a7a3a4ec0b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e1:52:a6:da:f7:37:34:cd:58:b5:7c:be:93:8f:ae:d0:e8:
         ff:75:26:5d:b9:81:e6:01:53:35:d3:0a:8f:6b:ab:96:d9:2b:
         7a:0b:f4:f5:c5:a9:f9:c3:17:65:a7:8e:f4:47:ac:69:d9:c1:
         a3:29:6f:47:7b:23:a4:df:01:4d:6e:33:cf:d0:35:82:88:6a:
         71:78:30:d9:f5:11:8b:db:75:90:39:92:79:35:6e:16:be:7f:
         91:e0:ab:0d:b5:f8:ff:33:9a:cc:ad:a0:3c:be:4e:57:df:0b:
         fa:eb:10:86:b8:91:14:09:c8:70:66:7e:38:33:5c:ac:8a:80:
         10:09:b4:f0:8b:1f:8b:4b:e7:da:35:c4:d3:ef:b2:6d:77:53:
         76:e8:fe:65:2d:e2:33:59:5b:cb:ae:6d:4f:32:53:6a:6b:87:
         a2:63:90:6e:d3:8f:89:10:6f:de:1f:e3:51:ac:5d:78:3f:88:
         74:2f:f7:33:1a:b5:57:70:26:08:6a:c5:a0:1d:e8:9e:19:d1:
         02:c4:99:5b:d5:aa:4f:10:f8:3a:14:80:19:7e:18:9c:13:c5:
         9d:b9:74:41:7c:d3:99:9d:b0:86:00:88:6d:3a:52:e9:d2:e6:
         96:9f:a9:7a:29:31:9e:40:51:01:be:01:01:77:5b:cb:c8:54:
         81:e3:92:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3+a2Oo7RykEsjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NjU4NDZiNTMtODBjZi00ZWVjLTliMjAtMmExZDhkZGZlNjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE0n0Xh6emlQLmpUXhE3C0ywSsHT/TSKzwbB
91+m42FPl+zKS59sTAHAFCCz1COI/NjzxkM1TKjM9uSn5AydcrWh3agPsF6mowXp
NgrMbY0OVSjofgxu188tdrjMnY/NuQhsUO3en2T5HsZbh8DQU6isgR4jMNOmX8ye
4ALfqbUtqNr1LWf114qjLsQVrNfumwcIPzVQEl4OoWgEpixbFdR1HoVhXhKhy2Sz
Cax0mu/TTKg19DQDRdrFoKAwP7akhIFa5SDmW831p5GKy7tGCSzYQArcbsqbszkq
SeRD4ATPY5ycOOSoBNy4yUg9sfWK2m8WwYQdbDDymI84HN45bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOSV+l3iz7bGlGSiIeR+YMWA9W/HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjlhNzE5NmUtNWEwMi0z
YmExLTlkMDYtNWE3YTNhNGVjMGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8T0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPhUqba9zc0zVi1fL6Tj67Q6P91Jl25geYBUzXTCo9rq5bZK3oL9PXF
qfnDF2WnjvRHrGnZwaMpb0d7I6TfAU1uM8/QNYKIanF4MNn1EYvbdZA5knk1bha+
f5Hgqw21+P8zmsytoDy+TlffC/rrEIa4kRQJyHBmfjgzXKyKgBAJtPCLH4tL59o1
xNPvsm13U3bo/mUt4jNZW8uubU8yU2prh6JjkG7Tj4kQb94f41GsXXg/iHQv9zMa
tVdwJghqxaAd6J4Z0QLEmVvVqk8Q+DoUgBl+GJwTxZ25dEF805mdsIYAiG06UunS
5pafqXopMZ5AUQG+AQF3W8vIVIHjklY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:58 2026 by rpki-client