Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/922b0d24-2913-3d80-9297-d59674003be3.roa
File:                     922b0d24-2913-3d80-9297-d59674003be3.roa (raw, json)
Hash identifier:          hAHmvqeXudF6L+2V91q0LfhFUWd0JKQz7iHiYWvmqTQ=
Subject key identifier:   DF:FE:0F:AB:AC:FB:E1:68:44:C6:49:1D:39:5B:14:FD:BD:02:42:48
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584EA79E772C006CB42846B1DF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/922b0d24-2913-3d80-9297-d59674003be3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7155
IP address blocks:        184.63.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9e:77:2c:00:6c:b4:28:46:b1:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=92d522e3-f293-44bd-9053-156d17a40258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:19:c1:29:d8:d3:2d:4b:8f:02:a1:c7:52:
                    e4:da:5b:41:9f:dc:63:a8:3e:98:fd:ec:ab:35:39:
                    73:7c:41:40:0b:ba:44:9c:78:dd:a8:88:29:10:a8:
                    93:e8:9a:45:b8:63:69:f3:51:bf:8a:66:74:92:ce:
                    58:e8:f5:a5:3f:71:32:78:47:0f:59:e2:b5:df:4b:
                    b5:be:35:71:d9:6b:45:26:fe:86:dc:f1:e8:6c:58:
                    11:df:77:f7:c4:f8:af:03:ad:c4:42:8c:3c:f1:fa:
                    29:28:d3:b3:43:27:f6:16:10:86:b2:38:49:55:5e:
                    fb:9f:a9:eb:69:79:53:20:f8:ac:4c:80:a6:62:dc:
                    e8:a2:48:4d:7f:25:9a:85:82:9d:c3:9e:13:fd:47:
                    eb:a0:d0:d9:ee:35:8c:e5:a9:ed:5e:23:9a:2c:76:
                    9e:08:94:7e:e1:71:9a:6f:3c:ad:9d:90:ee:0c:e9:
                    6b:a5:09:fc:ec:b8:f1:4f:28:5e:e1:65:94:c9:9f:
                    58:e8:d8:6a:6e:e4:1a:9f:56:4e:b8:f3:d6:1d:55:
                    41:f0:19:c4:a0:ff:9f:81:b1:d3:e1:8f:30:7c:e4:
                    28:2d:df:d7:ab:94:cd:f7:2f:1d:a6:8a:ef:2d:f6:
                    6c:f0:f6:8f:dc:be:63:fd:9a:9d:ae:0d:4a:8c:e4:
                    63:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FE:0F:AB:AC:FB:E1:68:44:C6:49:1D:39:5B:14:FD:BD:02:42:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/922b0d24-2913-3d80-9297-d59674003be3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.63.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:5c:4b:6a:11:9f:ed:af:e7:c1:4b:de:b2:91:98:bc:b5:c3:
         9e:7e:8b:2e:cb:24:53:73:17:e6:0e:9f:e0:29:35:53:78:d6:
         c7:fe:88:1e:49:da:36:41:ac:06:8e:34:2a:14:98:78:8d:d2:
         58:1d:ac:61:e6:7b:c9:a6:8f:f7:ed:70:8c:62:54:8f:2e:cb:
         70:0c:d7:db:14:4a:ee:91:33:ad:f9:1e:05:d5:f2:4a:9a:6a:
         ab:9f:9f:19:92:1a:bd:0b:7f:33:c7:db:2d:c4:8e:88:76:09:
         62:16:08:a5:99:98:9e:e3:63:b8:61:08:3b:b1:12:f5:a5:2f:
         a4:37:cb:3b:a4:9a:70:38:f3:2d:26:2d:f2:91:76:17:0a:9f:
         b9:1e:2b:11:c5:4f:b1:b6:cc:74:11:a1:b9:98:9c:ab:75:7b:
         63:f2:5c:8b:74:f3:4d:6f:c5:fc:b4:b0:30:a8:e4:61:22:49:
         9c:9d:ca:ff:91:65:f6:36:dd:4a:e3:30:ba:20:72:69:d6:71:
         da:06:c9:6d:da:3a:37:cf:63:6a:38:c9:51:6e:55:4c:25:c7:
         7a:33:67:60:31:c3:25:29:d0:aa:6f:44:f6:02:7f:41:d9:05:
         ec:ec:95:02:95:68:96:d1:4a:d2:81:e8:e8:1a:e7:7f:3d:2e:
         c9:27:13:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnncsAGy0KEax3wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTJkNTIyZTMtZjI5My00NGJkLTkwNTMtMTU2ZDE3YTQwMjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1IZwSnY0y1LjwKhx1Lk2ltBn9xjqD6Y/eyr
NTlzfEFAC7pEnHjdqIgpEKiT6JpFuGNp81G/imZ0ks5Y6PWlP3EyeEcPWeK130u1
vjVx2WtFJv6G3PHobFgR33f3xPivA63EQow88fopKNOzQyf2FhCGsjhJVV77n6nr
aXlTIPisTICmYtzookhNfyWahYKdw54T/UfroNDZ7jWM5antXiOaLHaeCJR+4XGa
bzytnZDuDOlrpQn87LjxTyhe4WWUyZ9Y6NhqbuQan1ZOuPPWHVVB8BnEoP+fgbHT
4Y8wfOQoLd/Xq5TN9y8dporvLfZs8PaP3L5j/Zqdrg1KjORjcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN/+D6us++FoRMZJHTlbFP29AkJIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTIyYjBkMjQtMjkxMy0z
ZDgwLTkyOTctZDU5Njc0MDAzYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuD/sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANcS2oRn+2v58FL3rKRmLy1w55+iy7LJFNzF+YOn+ApNVN41sf+iB5J
2jZBrAaONCoUmHiN0lgdrGHme8mmj/ftcIxiVI8uy3AM19sUSu6RM635HgXV8kqa
aqufnxmSGr0LfzPH2y3Ejoh2CWIWCKWZmJ7jY7hhCDuxEvWlL6Q3yzukmnA48y0m
LfKRdhcKn7keKxHFT7G2zHQRobmYnKt1e2PyXIt0801vxfy0sDCo5GEiSZydyv+R
ZfY23UrjMLogcmnWcdoGyW3aOjfPY2o4yVFuVUwlx3ozZ2AxwyUp0KpvRPYCf0HZ
BezslQKVaJbRStKB6Oga5389LsknE8M=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:31:14 2026 by rpki-client