Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d74be132-87cc-301d-8deb-b13bacf08e1a.roa
File:                     d74be132-87cc-301d-8deb-b13bacf08e1a.roa (raw, json)
Hash identifier:          ODMerggE/zQVH34N/YHdPQEJt+rpmPHZei5dHeP/gTY=
Subject key identifier:   F1:79:A4:68:CC:70:A3:5A:87:1C:55:D8:BD:48:17:19:7A:7F:98:FE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E012982580567D1B8ECE30
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d74be132-87cc-301d-8deb-b13bacf08e1a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.21.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:12:98:25:80:56:7d:1b:8e:ce:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=713ee012-f400-44df-ac30-b0ef9357567d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6c:cc:d4:89:8b:b2:fd:6c:a8:8f:0e:fd:22:
                    56:d8:47:19:ea:b7:5b:50:f8:ae:47:63:49:a5:35:
                    12:ae:7b:3c:2a:e0:86:24:66:77:3d:af:b5:17:c2:
                    7f:f3:6d:9f:07:61:22:3a:d6:52:1f:b0:1f:6d:5e:
                    75:62:6b:e2:92:02:0c:23:54:f8:80:48:c0:22:cf:
                    f7:c2:d1:0f:ca:fe:74:49:7a:89:d9:76:9f:e3:52:
                    d9:99:e3:34:b9:42:74:92:4f:71:09:69:b1:d7:c2:
                    2e:bc:76:b1:16:5d:7a:04:cf:b7:50:f3:83:4f:59:
                    fe:de:b5:9a:ed:25:ff:43:e6:21:f0:a8:3a:7f:2d:
                    30:61:4a:dd:80:8c:55:b8:e7:30:5f:fe:b2:e1:da:
                    7c:5e:f4:30:8f:a4:a5:11:47:51:ea:ea:8e:b9:24:
                    51:b5:c9:35:78:fb:e3:45:d2:1d:3e:74:91:3a:4b:
                    b9:77:e3:45:46:49:09:f5:3e:4d:45:9b:27:ea:ca:
                    ea:43:09:38:d5:4e:6f:c2:06:43:18:81:47:10:b9:
                    83:ec:c2:f3:bb:17:2b:cb:2f:61:e1:9c:e5:7a:59:
                    70:d7:9b:bf:d4:d8:a3:3d:67:c1:16:6d:ea:8b:32:
                    79:fd:36:28:20:ce:d3:06:27:70:61:3a:6b:c9:30:
                    79:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:79:A4:68:CC:70:A3:5A:87:1C:55:D8:BD:48:17:19:7A:7F:98:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d74be132-87cc-301d-8deb-b13bacf08e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:2e:d4:6b:08:6a:d8:67:12:75:6a:13:72:55:d9:3b:b5:5c:
         24:4e:51:54:d3:ff:65:e3:e0:f9:4a:03:b2:5e:ba:79:09:f9:
         6d:2b:af:bd:8d:99:42:21:cf:2c:68:71:2a:83:96:67:46:cb:
         17:16:93:1c:71:43:7a:81:e3:fa:f5:a1:62:82:9b:01:10:82:
         08:83:71:0a:32:dd:81:c5:2f:11:a2:8c:59:37:cc:0f:f5:e3:
         80:5f:57:3a:fc:d4:97:e8:aa:0f:95:8d:53:9a:36:9f:35:75:
         6f:f7:50:98:4f:f8:e8:69:f3:2d:7f:1a:1d:7d:ae:ca:76:4c:
         f5:20:2e:ce:10:60:40:23:7d:1f:3c:75:1a:85:c8:98:0e:b4:
         2e:06:1a:25:b6:dc:90:7c:70:35:e3:2c:21:76:68:ff:1d:95:
         9b:9f:1a:b3:83:16:bf:b5:7c:8f:70:64:40:16:a2:b6:89:76:
         51:47:40:fd:06:fa:f6:b0:42:3a:33:a0:a7:4b:26:ed:3b:fb:
         06:c8:af:f8:25:e8:f7:df:3e:4b:29:6f:0a:df:83:1c:8b:81:
         32:52:b6:1d:9f:78:42:3e:cb:96:d4:65:2a:bc:c6:64:5c:df:
         50:cc:78:1a:02:51:95:cb:7c:7e:6a:35:8e:26:dc:72:6e:10:
         25:79:5d:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4BKYJYBWfRuOzjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NzEzZWUwMTItZjQwMC00NGRmLWFjMzAtYjBlZjkzNTc1NjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmzM1ImLsv1sqI8O/SJW2EcZ6rdbUPiuR2NJ
pTUSrns8KuCGJGZ3Pa+1F8J/822fB2EiOtZSH7AfbV51YmvikgIMI1T4gEjAIs/3
wtEPyv50SXqJ2Xaf41LZmeM0uUJ0kk9xCWmx18IuvHaxFl16BM+3UPODT1n+3rWa
7SX/Q+Yh8Kg6fy0wYUrdgIxVuOcwX/6y4dp8XvQwj6SlEUdR6uqOuSRRtck1ePvj
RdIdPnSROku5d+NFRkkJ9T5NRZsn6srqQwk41U5vwgZDGIFHELmD7MLzuxcryy9h
4Zzlellw15u/1NijPWfBFm3qizJ5/TYoIM7TBidwYTpryTB52wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPF5pGjMcKNahxxV2L1IFxl6f5j+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDc0YmUxMzItODdjYy0z
MDFkLThkZWItYjEzYmFjZjA4ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBWhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKQu1GsIathnEnVqE3JV2Tu1XCROUVTT/2Xj4PlKA7JeunkJ+W0rr72N
mUIhzyxocSqDlmdGyxcWkxxxQ3qB4/r1oWKCmwEQggiDcQoy3YHFLxGijFk3zA/1
44BfVzr81Jfoqg+VjVOaNp81dW/3UJhP+Ohp8y1/Gh19rsp2TPUgLs4QYEAjfR88
dRqFyJgOtC4GGiW23JB8cDXjLCF2aP8dlZufGrODFr+1fI9wZEAWoraJdlFHQP0G
+vawQjozoKdLJu07+wbIr/gl6PffPkspbwrfgxyLgTJSth2feEI+y5bUZSq8xmRc
31DMeBoCUZXLfH5qNY4m3HJuECV5XYM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:53 2026 by rpki-client