Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/300760bd-2009-30ba-8aa9-0d34780a1f74.roa
File:                     300760bd-2009-30ba-8aa9-0d34780a1f74.roa (raw, json)
Hash identifier:          3FQArq/i8zT5Xp9ZvxtemtKvSIjJguer1lC2DCFsnyc=
Subject key identifier:   7B:7F:D3:5F:F6:F4:56:44:D2:28:FE:95:CC:F0:AB:EB:4D:7D:29:30
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79DE80F256CF4B2955AA480
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/300760bd-2009-30ba-8aa9-0d34780a1f74.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        99.196.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:e8:0f:25:6c:f4:b2:95:5a:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2e8784c1-2ba8-47dc-9ec0-f04e0520bc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:91:2d:90:3b:d9:0e:fc:32:55:06:e3:76:83:
                    93:50:07:35:af:8d:f1:05:bb:8d:fb:33:d0:ce:7e:
                    bb:6a:a2:da:d1:50:da:69:c1:8b:68:54:46:8c:26:
                    1c:73:01:70:50:86:be:5d:9a:49:15:09:15:55:c7:
                    59:f8:d4:0f:f3:be:20:c8:6e:9f:ec:00:29:50:f4:
                    aa:24:77:79:a1:10:38:50:d2:df:90:84:28:d7:49:
                    97:08:b9:fa:cd:f4:59:33:72:a0:94:14:5c:02:bb:
                    79:dc:fe:41:89:34:2c:7e:a9:0e:33:bc:26:25:e4:
                    d7:4c:a2:bd:42:16:3c:a1:79:ea:a7:03:74:d3:5c:
                    d2:47:60:0d:c2:aa:04:05:b7:dd:84:7f:82:fe:64:
                    5c:b0:df:05:1e:d7:fe:9e:d9:82:3c:97:68:b0:e0:
                    06:6c:96:39:65:93:1a:c3:68:e0:0d:83:0b:f7:08:
                    e2:41:57:01:64:63:c1:ea:35:5c:29:da:e5:d2:d8:
                    42:65:cd:90:ed:96:48:2c:9d:b1:52:a7:ea:0f:d8:
                    32:3f:c0:ac:67:83:49:1e:8d:6c:9d:9e:21:e4:e0:
                    6b:8d:0e:20:d5:f9:b4:ef:e9:fb:14:26:09:ed:23:
                    80:09:40:1e:cd:52:6c:e1:85:a0:93:2f:73:ea:e3:
                    a9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7F:D3:5F:F6:F4:56:44:D2:28:FE:95:CC:F0:AB:EB:4D:7D:29:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/300760bd-2009-30ba-8aa9-0d34780a1f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:50:86:83:a9:8d:9c:ee:96:8b:cb:05:d3:5e:aa:de:17:1f:
         00:b4:04:bf:01:08:f0:61:ec:1a:4b:67:94:a1:3e:9f:08:cb:
         ad:4a:ff:4c:1c:6c:45:1b:69:d6:1d:9c:1f:26:bc:d8:db:b4:
         8e:02:c4:73:f5:7c:80:2a:2d:2a:66:1e:82:cf:91:d8:78:a1:
         a3:fb:5d:53:c7:d9:77:b5:a2:b0:5e:45:6e:6b:95:c0:d2:9c:
         b7:48:00:00:80:b8:4f:15:61:44:68:b1:62:51:bb:cb:96:3b:
         4f:2a:4b:b4:60:50:31:9c:54:47:02:1a:6b:bf:7d:f5:0d:f8:
         1c:4c:c8:c5:0f:43:88:0d:28:f6:54:c5:83:65:17:61:be:1b:
         97:4f:d3:f5:a5:1a:e5:52:bf:7e:87:54:21:df:fe:83:b2:27:
         3b:a1:b9:72:3e:eb:7f:86:55:ac:42:c2:a1:4b:71:c7:d9:e7:
         ea:12:ec:6f:3d:cd:53:75:6e:ee:f5:61:95:bc:20:15:f5:73:
         8f:d1:6c:a8:65:8e:53:ce:21:26:e3:67:6d:1e:75:bf:35:c1:
         18:77:a9:17:4b:bd:94:f4:70:1c:61:ee:da:ad:d8:29:79:fb:
         9b:cf:a3:7b:43:04:f5:6e:f1:9d:3f:46:7c:56:e2:4f:3d:e0:
         09:f3:b3:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnegPJWz0spVapIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MmU4Nzg0YzEtMmJhOC00N2RjLTllYzAtZjA0ZTA1MjBiYzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpEtkDvZDvwyVQbjdoOTUAc1r43xBbuN+zPQ
zn67aqLa0VDaacGLaFRGjCYccwFwUIa+XZpJFQkVVcdZ+NQP874gyG6f7AApUPSq
JHd5oRA4UNLfkIQo10mXCLn6zfRZM3KglBRcArt53P5BiTQsfqkOM7wmJeTXTKK9
QhY8oXnqpwN001zSR2ANwqoEBbfdhH+C/mRcsN8FHtf+ntmCPJdosOAGbJY5ZZMa
w2jgDYML9wjiQVcBZGPB6jVcKdrl0thCZc2Q7ZZILJ2xUqfqD9gyP8CsZ4NJHo1s
nZ4h5OBrjQ4g1fm07+n7FCYJ7SOACUAezVJs4YWgky9z6uOppwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHt/01/29FZE0ij+lczwq+tNfSkwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzAwNzYwYmQtMjAwOS0z
MGJhLThhYTktMGQzNDc4MGExZjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8TVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVQhoOpjZzulovLBdNeqt4XHwC0BL8BCPBh7BpLZ5ShPp8Iy61K/0wc
bEUbadYdnB8mvNjbtI4CxHP1fIAqLSpmHoLPkdh4oaP7XVPH2Xe1orBeRW5rlcDS
nLdIAACAuE8VYURosWJRu8uWO08qS7RgUDGcVEcCGmu/ffUN+BxMyMUPQ4gNKPZU
xYNlF2G+G5dP0/WlGuVSv36HVCHf/oOyJzuhuXI+63+GVaxCwqFLccfZ5+oS7G89
zVN1bu71YZW8IBX1c4/RbKhljlPOISbjZ20edb81wRh3qRdLvZT0cBxh7tqt2Cl5
+5vPo3tDBPVu8Z0/RnxW4k894Anzs24=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:36:09 2026 by rpki-client