Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f9f25293-8d7d-3742-b4d8-13bb9640d0aa.roa
File:                     f9f25293-8d7d-3742-b4d8-13bb9640d0aa.roa (raw, json)
Hash identifier:          Vi3LaHnLCgSOmE74Wc/gqG/DTN+BKAytFuNRBEhbW5o=
Subject key identifier:   06:CA:9D:90:09:80:F7:AC:18:0C:1F:D8:93:BA:5B:07:7A:ED:AF:C2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24E0BF24BAB1CF2C4731E700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f9f25293-8d7d-3742-b4d8-13bb9640d0aa.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        184.20.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:bf:24:ba:b1:cf:2c:47:31:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=7c786991-1f20-42ae-a825-f3aafccc5096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:d6:b0:94:e5:e2:d7:52:39:c4:ee:c2:62:
                    ec:df:b3:91:01:1e:75:bc:3d:f1:51:fe:3c:22:7a:
                    63:1e:84:3d:9f:b6:88:0d:75:b9:78:eb:ad:d6:36:
                    1f:64:3e:68:a5:d4:0f:25:6b:f9:13:e3:14:10:2b:
                    76:de:09:88:9c:3b:f6:dd:fa:73:e2:6b:b3:31:df:
                    ac:ae:2e:47:aa:01:f8:3c:e6:98:80:7f:bd:05:4b:
                    16:1a:d9:67:0c:74:9d:3e:7e:69:99:27:21:87:a8:
                    ee:c4:96:3c:08:2c:45:3a:9f:c7:e0:6f:6b:0b:a5:
                    28:dd:12:e5:9d:25:aa:e4:f2:c8:72:81:1e:71:6b:
                    d3:4e:db:ee:da:34:67:a9:65:64:7a:f9:07:6f:f3:
                    cd:7c:06:7e:f4:27:ff:73:86:84:fa:39:d5:a9:f5:
                    41:fc:b7:d1:fc:1b:13:b4:46:8e:8f:b6:44:d2:81:
                    16:a4:bf:f7:95:bf:fb:54:2c:01:d1:a6:fc:88:32:
                    3d:58:45:3d:39:5a:d9:38:85:8b:50:a7:db:07:f5:
                    cb:c4:cf:e8:46:8c:72:c0:bb:28:a4:6e:db:6b:9e:
                    e6:55:76:19:df:49:11:7d:61:87:c1:9f:e6:cb:92:
                    94:6e:88:f5:4c:22:ac:8b:94:43:6b:b4:a6:f2:04:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CA:9D:90:09:80:F7:AC:18:0C:1F:D8:93:BA:5B:07:7A:ED:AF:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f9f25293-8d7d-3742-b4d8-13bb9640d0aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.20.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:ca:e0:6d:b7:63:97:53:16:86:d3:17:9a:c2:8d:de:df:b0:
         00:c0:40:c0:0a:c9:02:1c:02:79:9f:07:32:c0:02:e5:3f:6e:
         f3:41:6d:53:b7:22:ba:ca:bf:0b:6c:af:13:79:c9:65:2d:aa:
         df:3a:a3:2b:11:92:fd:8b:73:c9:e7:cb:a4:3b:c0:a2:22:76:
         bc:5b:c8:01:3d:48:25:4d:4a:26:e3:b5:38:df:cd:1a:96:52:
         60:36:0c:28:37:9c:ac:e8:a5:1d:57:16:c1:d1:ff:fb:35:d4:
         ec:a4:0f:d9:e5:fa:64:79:3c:79:0d:0f:fb:be:4c:5c:b8:c7:
         3a:f4:5a:5e:f0:c1:36:42:ce:a1:36:c2:8d:5b:6c:fb:52:ca:
         f7:35:1f:49:8d:6a:86:65:5e:8a:b5:47:51:92:9e:5b:91:d4:
         43:e5:d7:98:06:22:87:a4:29:f8:93:13:c1:82:27:b0:25:f9:
         bf:4a:46:43:3b:7a:9f:b2:39:b8:9c:39:1b:f2:bd:cd:20:91:
         da:a2:02:ee:dc:6c:13:58:f2:df:c0:35:6b:1d:ac:5b:94:65:
         cb:88:09:2b:4c:e0:bf:19:26:0f:c8:9b:d1:eb:43:62:51:b5:
         fc:ad:dd:e9:77:ac:b9:0e:a8:f6:bd:54:f8:8a:d3:e2:55:bb:
         47:48:47:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4L8kurHPLEcx5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
N2M3ODY5OTEtMWYyMC00MmFlLWE4MjUtZjNhYWZjY2M1MDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWvWsJTl4tdSOcTuwmLs37ORAR51vD3xUf48
InpjHoQ9n7aIDXW5eOut1jYfZD5opdQPJWv5E+MUECt23gmInDv23fpz4muzMd+s
ri5HqgH4POaYgH+9BUsWGtlnDHSdPn5pmSchh6juxJY8CCxFOp/H4G9rC6Uo3RLl
nSWq5PLIcoEecWvTTtvu2jRnqWVkevkHb/PNfAZ+9Cf/c4aE+jnVqfVB/LfR/BsT
tEaOj7ZE0oEWpL/3lb/7VCwB0ab8iDI9WEU9OVrZOIWLUKfbB/XLxM/oRoxywLso
pG7ba57mVXYZ30kRfWGHwZ/my5KUboj1TCKsi5RDa7Sm8gR1nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbKnZAJgPesGAwf2JO6Wwd67a/CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjlmMjUyOTMtOGQ3ZC0z
NzQyLWI0ZDgtMTNiYjk2NDBkMGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBR/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM/K4G23Y5dTFobTF5rCjd7fsADAQMAKyQIcAnmfBzLAAuU/bvNBbVO3
IrrKvwtsrxN5yWUtqt86oysRkv2Lc8nny6Q7wKIidrxbyAE9SCVNSibjtTjfzRqW
UmA2DCg3nKzopR1XFsHR//s11OykD9nl+mR5PHkND/u+TFy4xzr0Wl7wwTZCzqE2
wo1bbPtSyvc1H0mNaoZlXoq1R1GSnluR1EPl15gGIoekKfiTE8GCJ7Al+b9KRkM7
ep+yObicORvyvc0gkdqiAu7cbBNY8t/ANWsdrFuUZcuICStM4L8ZJg/Im9HrQ2JR
tfyt3el3rLkOqPa9VPiK0+JVu0dIR90=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:15:54 2026 by rpki-client