Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/844f269e-9720-32f1-80d2-c32cf112e1ff.roa
File:                     844f269e-9720-32f1-80d2-c32cf112e1ff.roa (raw, json)
Hash identifier:          8/5HWAAwYGJ5YwUyp8BUqgz4ZyqeN1hOpew6JqlDgqE=
Subject key identifier:   61:CF:E1:0E:0D:FB:51:C5:A0:63:54:0A:76:1B:9B:97:47:42:91:5A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79DE1C4939798CBB9480400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/844f269e-9720-32f1-80d2-c32cf112e1ff.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        99.196.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:e1:c4:93:97:98:cb:b9:48:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d07a0733-5008-448b-9ae0-974c7918a697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:b5:6d:49:9c:15:af:1e:d1:d6:6c:f5:50:
                    2a:99:d5:a6:c3:b3:0d:1b:17:85:46:3f:16:cc:5a:
                    92:4a:b4:9a:5c:fc:25:8a:8e:71:ee:15:92:8c:df:
                    16:d2:60:2e:2b:f3:3e:b8:ef:d5:bf:36:3d:b4:98:
                    b1:41:c1:d9:9a:9a:52:2a:18:40:f1:45:95:a6:ba:
                    44:22:50:0b:af:b8:56:4a:6d:89:2a:ed:ff:4e:8b:
                    42:d9:00:e2:3b:b5:34:ea:4a:53:ba:5a:29:f2:9d:
                    39:ef:cb:87:ff:32:6e:6f:f4:25:1c:09:4a:b4:a3:
                    5a:d6:8c:f7:08:22:55:bb:12:3a:c6:fc:21:7c:7a:
                    43:b7:ae:59:b6:fc:a8:40:47:7c:22:ee:0e:87:27:
                    c8:ad:e9:8a:2f:15:60:55:a5:c4:b8:fd:90:fc:89:
                    9d:0a:3c:cb:9d:05:70:6b:d5:74:b0:b5:03:c8:d6:
                    48:4f:b7:bf:c4:d6:4d:cc:b8:f2:36:ff:54:2e:da:
                    ed:c8:a0:80:bf:bd:bc:fb:3c:5f:64:18:3b:ad:3f:
                    54:75:83:3b:35:04:7f:6f:c4:6c:e6:3e:e6:9b:42:
                    0d:48:f1:7f:89:b2:51:cd:7a:9c:f5:74:45:98:cf:
                    5e:8c:56:d8:58:38:34:a3:e3:0c:81:f0:5f:09:e8:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CF:E1:0E:0D:FB:51:C5:A0:63:54:0A:76:1B:9B:97:47:42:91:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/844f269e-9720-32f1-80d2-c32cf112e1ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:58:1b:34:dc:80:5e:3e:ea:e3:a1:82:bf:07:3f:d4:12:03:
         16:6e:c2:21:e4:d0:2f:08:23:51:fa:ab:d7:03:8c:ba:c2:73:
         b8:b2:71:00:56:86:a8:6e:ef:71:61:5d:a7:96:0e:85:51:67:
         b3:ea:43:93:c2:6a:4c:d3:e6:98:32:14:c0:c8:8c:d4:3d:e3:
         a9:b2:a3:16:ae:55:a8:8b:54:08:cc:bb:ad:a0:19:fc:dc:72:
         10:f7:42:e9:7b:9b:1b:e1:ca:dd:91:be:4b:2d:01:2a:97:0c:
         0c:69:c8:13:4e:d4:65:58:5b:df:e5:45:d3:6e:de:37:75:45:
         f0:db:6c:f1:d6:c8:19:77:f1:dc:4e:90:0f:99:14:a7:65:4a:
         8f:8a:f5:f4:d9:e3:66:db:11:b2:b0:d1:8c:35:7c:ea:55:2f:
         ec:cd:c4:85:23:d2:38:ff:46:67:fc:1f:27:39:47:d1:43:f8:
         49:2f:66:cd:78:b9:59:f1:8b:0a:db:c5:d3:5f:9a:e6:1e:cc:
         e8:74:0e:40:18:2a:77:98:e0:c5:e2:0a:40:96:c2:1b:dc:18:
         82:cc:5c:e7:b7:b5:3f:9a:8b:a4:b9:8c:84:a8:20:16:cd:cc:
         f0:5b:7b:a4:30:57:08:c4:86:fb:1e:f6:88:b1:94:85:89:71:
         2e:b9:ef:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nneHEk5eYy7lIBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDA3YTA3MzMtNTAwOC00NDhiLTlhZTAtOTc0Yzc5MThhNjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouW1bUmcFa8e0dZs9VAqmdWmw7MNGxeFRj8W
zFqSSrSaXPwlio5x7hWSjN8W0mAuK/M+uO/VvzY9tJixQcHZmppSKhhA8UWVprpE
IlALr7hWSm2JKu3/TotC2QDiO7U06kpTulop8p0578uH/zJub/QlHAlKtKNa1oz3
CCJVuxI6xvwhfHpDt65ZtvyoQEd8Iu4OhyfIremKLxVgVaXEuP2Q/ImdCjzLnQVw
a9V0sLUDyNZIT7e/xNZNzLjyNv9ULtrtyKCAv728+zxfZBg7rT9UdYM7NQR/b8Rs
5j7mm0INSPF/ibJRzXqc9XRFmM9ejFbYWDg0o+MMgfBfCeirewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGHP4Q4N+1HFoGNUCnYbm5dHQpFaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODQ0ZjI2OWUtOTcyMC0z
MmYxLTgwZDItYzMyY2YxMTJlMWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8RsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxYGzTcgF4+6uOhgr8HP9QSAxZuwiHk0C8II1H6q9cDjLrCc7iycQBW
hqhu73FhXaeWDoVRZ7PqQ5PCakzT5pgyFMDIjNQ946myoxauVaiLVAjMu62gGfzc
chD3Qul7mxvhyt2RvkstASqXDAxpyBNO1GVYW9/lRdNu3jd1RfDbbPHWyBl38dxO
kA+ZFKdlSo+K9fTZ42bbEbKw0Yw1fOpVL+zNxIUj0jj/Rmf8Hyc5R9FD+EkvZs14
uVnxiwrbxdNfmuYezOh0DkAYKneY4MXiCkCWwhvcGILMXOe3tT+ai6S5jISoIBbN
zPBbe6QwVwjEhvse9oixlIWJcS657/E=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:14:53 2026 by rpki-client