Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e2b65117-5a63-3477-9f2e-68f515971b0a.roa
File:                     e2b65117-5a63-3477-9f2e-68f515971b0a.roa (raw, json)
Hash identifier:          ACuqg6K9CgPi2OGAMwIzJ5Xr0y+pwy0m/jRGAHNffY4=
Subject key identifier:   FA:CA:D1:62:DB:B3:CE:EB:F6:A1:36:86:D5:94:E7:45:49:7E:53:89
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0A003D639903C6A8D89C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e2b65117-5a63-3477-9f2e-68f515971b0a.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        99.197.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:a0:03:d6:39:90:3c:6a:8d:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=40d38e9b-4278-4923-8a66-d7e2fa9be224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:01:3a:0b:91:2f:08:a7:bb:8b:65:fb:f9:
                    cd:09:a1:fb:a3:19:5c:8e:c7:02:df:2d:4f:6f:62:
                    a1:bc:dd:74:73:98:e9:81:99:7e:7f:62:fb:f1:4b:
                    78:e7:5f:d1:20:85:6d:2e:fd:8b:1f:ad:b1:f5:04:
                    70:de:ae:be:c0:68:13:e3:01:9e:97:69:53:68:6a:
                    3d:b8:28:d5:d6:24:b4:90:a0:4e:95:2f:fb:8e:90:
                    be:ba:d6:bd:6c:3d:51:a9:0f:89:cb:e4:71:07:ca:
                    63:f1:58:6d:a0:0f:f5:9a:dc:98:b0:92:1d:0b:db:
                    a1:00:41:89:51:fd:12:48:ce:76:86:dc:e6:44:79:
                    fe:e5:5b:c0:20:22:1c:c4:10:ed:cb:15:8d:e5:b0:
                    9d:05:08:0e:7d:d9:89:a6:71:06:72:6f:3a:15:c2:
                    c2:11:37:a1:6a:18:db:c3:0d:98:f8:7f:58:e0:05:
                    18:2e:56:71:16:9c:83:5d:63:3b:91:91:03:b8:9b:
                    f4:38:b9:06:9c:dd:ab:a2:f9:6d:31:7a:ef:33:da:
                    4c:f3:99:ea:22:4d:2d:df:52:23:19:51:1d:d3:12:
                    87:33:e7:7f:1b:70:47:a1:7e:c4:93:8b:8c:fc:3b:
                    b6:32:97:9f:99:71:4f:ad:5c:cd:8e:c7:90:aa:64:
                    0c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CA:D1:62:DB:B3:CE:EB:F6:A1:36:86:D5:94:E7:45:49:7E:53:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e2b65117-5a63-3477-9f2e-68f515971b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.197.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0e:8e:b7:41:80:db:9b:d1:60:de:d5:c8:f0:f3:05:f4:16:
         2f:a0:11:2c:4d:6b:c0:0e:1b:ac:25:89:b6:6f:88:89:b3:21:
         32:c6:3d:f1:62:dc:bb:3c:b1:c5:52:1c:f7:73:ee:00:86:58:
         77:2c:09:5f:97:12:0e:01:d9:1b:a8:bf:dc:4e:47:81:e8:2d:
         14:ee:db:16:9a:71:2e:3d:ba:6f:ff:55:77:59:47:b1:14:03:
         58:f7:d6:6d:4f:6e:91:82:52:4f:7e:50:89:9c:b5:f1:58:5d:
         c7:c3:e5:60:9f:b7:79:c0:94:a6:67:f0:69:0c:51:53:67:2b:
         74:d7:82:32:45:fa:27:d6:83:91:c0:de:d5:97:64:0c:dc:79:
         96:1f:2c:76:06:ce:34:c3:22:bd:a4:56:1e:1f:08:10:10:df:
         0c:82:f3:7a:03:f1:90:d2:f4:c1:ce:9c:49:d8:fe:4a:2f:2a:
         3c:70:f1:20:59:25:84:47:17:b6:92:b0:84:52:43:45:01:61:
         a3:58:83:a2:63:68:32:75:ab:33:62:58:3e:81:42:a5:49:f8:
         8a:ee:68:14:09:a2:0a:b8:90:2a:20:14:cf:64:4d:a2:ec:87:
         01:dd:cf:98:08:cc:42:f2:83:4c:e6:28:2d:85:2f:09:ee:5d:
         fb:52:1f:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4KAD1jmQPGqNicAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NDBkMzhlOWItNDI3OC00OTIzLThhNjYtZDdlMmZhOWJlMjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX0BOguRLwinu4tl+/nNCaH7oxlcjscC3y1P
b2KhvN10c5jpgZl+f2L78Ut451/RIIVtLv2LH62x9QRw3q6+wGgT4wGel2lTaGo9
uCjV1iS0kKBOlS/7jpC+uta9bD1RqQ+Jy+RxB8pj8VhtoA/1mtyYsJIdC9uhAEGJ
Uf0SSM52htzmRHn+5VvAICIcxBDtyxWN5bCdBQgOfdmJpnEGcm86FcLCETehahjb
ww2Y+H9Y4AUYLlZxFpyDXWM7kZEDuJv0OLkGnN2rovltMXrvM9pM85nqIk0t31Ij
GVEd0xKHM+d/G3BHoX7Ek4uM/Du2MpefmXFPrVzNjseQqmQMOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPrK0WLbs87r9qE2htWU50VJflOJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTJiNjUxMTctNWE2My0z
NDc3LTlmMmUtNjhmNTE1OTcxYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8X/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4OjrdBgNub0WDe1cjw8wX0Fi+gESxNa8AOG6wlibZviImzITLGPfFi
3Ls8scVSHPdz7gCGWHcsCV+XEg4B2Ruov9xOR4HoLRTu2xaacS49um//VXdZR7EU
A1j31m1PbpGCUk9+UImctfFYXcfD5WCft3nAlKZn8GkMUVNnK3TXgjJF+ifWg5HA
3tWXZAzceZYfLHYGzjTDIr2kVh4fCBAQ3wyC83oD8ZDS9MHOnEnY/kovKjxw8SBZ
JYRHF7aSsIRSQ0UBYaNYg6JjaDJ1qzNiWD6BQqVJ+IruaBQJogq4kCogFM9kTaLs
hwHdz5gIzELyg0zmKC2FLwnuXftSHzk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:42 2026 by rpki-client