Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2bc7478a-bf84-445b-8cb4-96cf1733e5aa/9b1806d5-91c1-3d39-a464-ebf1299e240d.roa
File:                     9b1806d5-91c1-3d39-a464-ebf1299e240d.roa (raw, json)
Hash identifier:          vPdlqOBvd9Ijz6CsQLRcai4jH7a03O2H718/tA/GzZ4=
Subject key identifier:   7E:22:84:99:87:05:E6:93:20:9C:AA:87:5B:2F:C0:4E:6A:E5:10:DE
Certificate issuer:       /CN=2bc7478a-bf84-445b-8cb4-96cf1733e5aa
Certificate serial:       010D0C9F4328584D43D7C72A9D5192ACA36DA300
Authority key identifier: 4C:87:F0:56:58:3F:02:3F:B0:86:8B:76:18:6D:84:7C:2D:2C:A1:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2bc7478a-bf84-445b-8cb4-96cf1733e5aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2bc7478a-bf84-445b-8cb4-96cf1733e5aa/9b1806d5-91c1-3d39-a464-ebf1299e240d.roa
Signing time:             Mon 23 Mar 2026 15:15:30 +0000
ROA not before:           Mon 23 Mar 2026 15:15:30 +0000
ROA not after:            Sun 21 Jun 2026 15:15:30 +0000
asID:                     402300
IP address blocks:        198.181.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2bc7478a-bf84-445b-8cb4-96cf1733e5aa/2bc7478a-bf84-445b-8cb4-96cf1733e5aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2bc7478a-bf84-445b-8cb4-96cf1733e5aa/2bc7478a-bf84-445b-8cb4-96cf1733e5aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2bc7478a-bf84-445b-8cb4-96cf1733e5aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:43:d7:c7:2a:9d:51:92:ac:a3:6d:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc7478a-bf84-445b-8cb4-96cf1733e5aa
        Validity
            Not Before: Mar 23 15:15:30 2026 GMT
            Not After : Jun 21 15:15:30 2026 GMT
        Subject: CN=30411c8c-e13a-4df0-aa45-05c4bbc51b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e0:47:ab:62:36:57:c6:a2:e1:5e:d5:ec:26:
                    e5:54:9a:fb:e7:90:a8:48:a4:8c:86:88:7c:ee:b4:
                    1b:2e:9e:7b:13:4f:c0:7c:c0:39:bb:25:06:a6:e0:
                    eb:88:0e:6a:71:81:0e:e3:c8:4e:28:07:ad:fd:2c:
                    59:27:ba:e2:b5:ec:e6:89:ce:3f:28:24:c2:d6:ef:
                    a7:cf:b7:fb:15:68:87:78:dc:87:7e:cf:53:e7:72:
                    15:4e:6e:c9:06:a1:2d:c9:50:be:86:a3:81:bc:e3:
                    82:20:48:4b:21:c5:5e:45:d3:c2:ce:20:65:d6:7c:
                    75:19:7f:12:86:51:53:42:af:b7:80:f6:2b:65:7f:
                    a6:2b:b4:9b:00:35:ba:b9:c2:38:7c:11:bc:e3:7d:
                    19:99:f7:a0:6c:f7:bc:e3:90:f5:bd:86:d3:0a:e9:
                    26:7d:d7:c3:c4:9e:25:b9:70:62:f8:40:b7:34:64:
                    30:0b:fa:9c:be:a8:04:17:6d:a7:88:1b:a5:97:55:
                    b4:5c:72:7d:c9:4a:0a:10:b4:f4:c3:23:9e:02:c9:
                    fa:83:9d:1a:b1:fb:00:81:c6:a7:29:88:fc:b6:0b:
                    97:14:c1:09:8a:1e:d5:b2:00:39:f0:d3:1a:f8:18:
                    73:1e:d1:99:36:f7:15:de:ca:b2:c3:df:02:e1:6a:
                    da:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:22:84:99:87:05:E6:93:20:9C:AA:87:5B:2F:C0:4E:6A:E5:10:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2bc7478a-bf84-445b-8cb4-96cf1733e5aa/9b1806d5-91c1-3d39-a464-ebf1299e240d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2bc7478a-bf84-445b-8cb4-96cf1733e5aa/2bc7478a-bf84-445b-8cb4-96cf1733e5aa.crl

            X509v3 Authority Key Identifier:
                keyid:4C:87:F0:56:58:3F:02:3F:B0:86:8B:76:18:6D:84:7C:2D:2C:A1:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2bc7478a-bf84-445b-8cb4-96cf1733e5aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.181.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:df:b0:88:c1:55:e1:db:74:cc:83:26:21:1d:15:58:b8:a0:
         9a:41:92:9d:72:23:d0:f9:bd:fe:c0:7c:77:e4:8f:9a:d0:ca:
         99:0f:7d:d6:fa:9c:d9:57:4f:da:b5:8a:ff:dc:d2:ad:2e:a8:
         a5:fc:63:97:25:41:6a:1e:a2:7d:6c:cd:90:e2:74:44:ab:0b:
         b3:f5:04:6b:6c:4d:5f:7f:a5:6c:eb:c8:1c:bd:8e:fe:82:c7:
         5e:eb:0c:3c:cb:a2:c3:7f:c6:6b:dc:00:67:5a:ed:e5:ac:8f:
         1f:e8:87:86:3d:d4:a2:02:fe:a5:7a:e1:cf:55:50:f7:19:f3:
         c7:bf:2d:47:24:75:22:a8:e0:f0:28:0d:cf:27:74:a0:9e:ce:
         78:35:cf:f8:96:c8:6f:24:82:82:d8:ec:f6:0b:05:c5:fd:94:
         4b:74:c6:13:8f:6f:41:46:ed:5e:70:7a:0f:82:3e:cd:9d:86:
         c5:f4:24:e5:1a:8d:17:bf:b5:9e:f8:4d:07:3b:d1:b7:4c:5f:
         ba:c0:5e:67:82:0d:a9:21:8d:38:e6:1a:73:9f:77:3a:53:6a:
         5c:96:90:8d:11:98:42:12:28:d3:29:f7:65:5a:b5:eb:07:bf:
         c8:de:3e:23:c4:1a:70:13:c3:e9:41:ba:e2:92:6d:28:af:88:
         8e:e2:c7:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1D18cqnVGSrKNtowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNzQ3OGEtYmY4NC00NDViLThjYjQtOTZjZjE3MzNl
NWFhMB4XDTI2MDMyMzE1MTUzMFoXDTI2MDYyMTE1MTUzMFowLzEtMCsGA1UEAxMk
MzA0MTFjOGMtZTEzYS00ZGYwLWFhNDUtMDVjNGJiYzUxYjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+BHq2I2V8ai4V7V7CblVJr755CoSKSMhoh8
7rQbLp57E0/AfMA5uyUGpuDriA5qcYEO48hOKAet/SxZJ7ritezmic4/KCTC1u+n
z7f7FWiHeNyHfs9T53IVTm7JBqEtyVC+hqOBvOOCIEhLIcVeRdPCziBl1nx1GX8S
hlFTQq+3gPYrZX+mK7SbADW6ucI4fBG8430ZmfegbPe845D1vYbTCukmfdfDxJ4l
uXBi+EC3NGQwC/qcvqgEF22niBull1W0XHJ9yUoKELT0wyOeAsn6g50asfsAgcan
KYj8tguXFMEJih7VsgA58NMa+BhzHtGZNvcV3sqyw98C4WraRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH4ihJmHBeaTIJyqh1svwE5q5RDeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYmM3
NDc4YS1iZjg0LTQ0NWItOGNiNC05NmNmMTczM2U1YWEvOWIxODA2ZDUtOTFjMS0z
ZDM5LWE0NjQtZWJmMTI5OWUyNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmJjNzQ3OGEtYmY4NC00NDViLThj
YjQtOTZjZjE3MzNlNWFhLzJiYzc0NzhhLWJmODQtNDQ1Yi04Y2I0LTk2Y2YxNzMz
ZTVhYS5jcmwwHwYDVR0jBBgwFoAUTIfwVlg/Aj+whot2GG2EfC0soSowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYmM3NDc4YS1iZjg0LTQ0NWItOGNiNC05NmNm
MTczM2U1YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrWaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADzfsIjBVeHbdMyDJiEdFVi4oJpBkp1yI9D5vf7AfHfkj5rQypkPfdb6
nNlXT9q1iv/c0q0uqKX8Y5clQWoeon1szZDidESrC7P1BGtsTV9/pWzryBy9jv6C
x17rDDzLosN/xmvcAGda7eWsjx/oh4Y91KIC/qV64c9VUPcZ88e/LUckdSKo4PAo
Dc8ndKCezng1z/iWyG8kgoLY7PYLBcX9lEt0xhOPb0FG7V5weg+CPs2dhsX0JOUa
jRe/tZ74TQc70bdMX7rAXmeCDakhjTjmGnOfdzpTalyWkI0RmEISKNMp92VatesH
v8jePiPEGnATw+lBuuKSbSiviI7ix/A=
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:18 2026 by rpki-client