Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa
File:                     c9d8e783-12ac-3b61-9dc9-88f74787c212.roa (raw, json)
Hash identifier:          mv7gxVW1SSBaywv9PWybXZpjt9828rKtNJnCj7Hf1BQ=
Subject key identifier:   B6:9A:A9:D3:76:E6:0D:66:2E:A7:99:55:F4:DB:0F:BC:B4:BD:07:28
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059C18A17716CD0C8E7EA7E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        172.242.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:18:a1:77:16:cd:0c:8e:7e:a7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=a7da3d1e-fe52-435b-a675-04cc6935c75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:95:4b:16:92:2b:8d:cd:43:8d:05:b6:ea:6e:
                    d7:26:82:bc:52:5e:ef:60:72:d8:39:7f:92:49:3e:
                    d2:30:0f:d1:02:93:76:89:3d:c5:9f:82:b6:9b:21:
                    62:da:26:1f:29:b2:11:38:54:0a:ae:52:81:fe:d6:
                    76:47:dc:4e:d1:7a:6b:20:1a:b2:68:ae:b5:91:d8:
                    3e:8d:1f:84:e7:dd:dc:a7:9e:d7:d9:8f:7f:bd:c8:
                    7d:59:f6:88:95:71:59:90:38:47:46:2f:07:5e:71:
                    f7:1b:e8:ef:fb:8f:17:3b:1e:3f:41:2a:43:3c:0b:
                    87:cd:45:38:8a:38:5c:6d:96:63:b2:a7:4b:00:5e:
                    02:57:cb:73:56:38:10:b1:22:b2:ac:16:06:88:9d:
                    1b:5f:4c:96:73:8a:73:17:98:e3:68:7e:3c:81:7a:
                    f9:c7:d6:76:ac:6a:ea:57:0f:45:e2:bc:1d:32:41:
                    00:57:bd:8d:75:eb:46:b9:cf:77:49:6b:71:18:05:
                    ca:48:27:f0:49:f9:20:e2:4a:d4:a4:a4:6d:bb:94:
                    97:7a:3c:bc:13:71:6a:43:17:f5:ef:d4:c5:2d:f5:
                    73:e1:02:6a:d1:d2:ae:38:8a:c6:15:25:fd:be:3e:
                    fa:3e:89:71:22:e5:fc:96:e0:fe:91:5e:b6:cc:68:
                    a6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9A:A9:D3:76:E6:0D:66:2E:A7:99:55:F4:DB:0F:BC:B4:BD:07:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:6c:31:4c:ef:53:07:d9:eb:b7:a4:c5:eb:07:59:ed:69:23:
         8e:d0:02:8a:7a:61:e5:73:dc:05:e2:0a:18:40:48:45:12:1f:
         0e:92:e8:6a:fb:f2:bb:ba:0e:02:55:91:3b:c3:0b:19:0b:2d:
         67:f5:a7:ce:50:7f:ee:c0:84:55:1a:4b:57:96:09:aa:85:08:
         f2:36:91:d2:9c:36:5d:19:3d:11:36:fd:72:48:5b:dc:2b:f2:
         ce:91:d1:1b:4b:73:e9:32:32:c9:5a:d5:41:e6:fe:7d:f6:54:
         12:51:84:b2:2b:39:b2:a8:45:98:c0:cc:8f:79:6a:d5:9a:c3:
         df:6d:f6:69:14:de:a7:5e:5c:f9:57:55:77:30:cb:b2:47:db:
         f6:28:78:a3:f9:33:4e:4a:db:7e:c1:37:55:b2:20:93:2c:47:
         50:f6:54:85:6b:7c:3b:72:25:05:8f:91:05:9d:53:1c:04:76:
         ce:c9:96:16:17:88:33:60:92:64:ef:ff:47:72:90:03:af:85:
         99:ae:a3:41:1e:6d:5d:46:c8:86:d2:76:82:08:e3:37:fd:48:
         10:a2:a6:13:7e:2d:01:cd:50:e0:93:95:ec:f9:83:95:60:88:
         a6:ad:f2:b7:53:59:63:3d:a8:fb:f4:39:d7:7c:67:08:4f:72:
         66:4d:01:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnBihdxbNDI5+p+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
YTdkYTNkMWUtZmU1Mi00MzViLWE2NzUtMDRjYzY5MzVjNzViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35VLFpIrjc1DjQW26m7XJoK8Ul7vYHLYOX+S
ST7SMA/RApN2iT3Fn4K2myFi2iYfKbIROFQKrlKB/tZ2R9xO0XprIBqyaK61kdg+
jR+E593cp57X2Y9/vch9WfaIlXFZkDhHRi8HXnH3G+jv+48XOx4/QSpDPAuHzUU4
ijhcbZZjsqdLAF4CV8tzVjgQsSKyrBYGiJ0bX0yWc4pzF5jjaH48gXr5x9Z2rGrq
Vw9F4rwdMkEAV72NdetGuc93SWtxGAXKSCfwSfkg4krUpKRtu5SXejy8E3FqQxf1
79TFLfVz4QJq0dKuOIrGFSX9vj76PolxIuX8luD+kV62zGimHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLaaqdN25g1mLqeZVfTbD7y0vQcoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlkOGU3ODMtMTJhYy0z
YjYxLTlkYzktODhmNzQ3ODdjMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM9sMUzvUwfZ67ekxesHWe1pI47QAop6YeVz3AXiChhASEUSHw6S6Gr7
8ru6DgJVkTvDCxkLLWf1p85Qf+7AhFUaS1eWCaqFCPI2kdKcNl0ZPRE2/XJIW9wr
8s6R0RtLc+kyMsla1UHm/n32VBJRhLIrObKoRZjAzI95atWaw99t9mkU3qdeXPlX
VXcwy7JH2/YoeKP5M05K237BN1WyIJMsR1D2VIVrfDtyJQWPkQWdUxwEds7JlhYX
iDNgkmTv/0dykAOvhZmuo0EebV1GyIbSdoII4zf9SBCiphN+LQHNUOCTlez5g5Vg
iKat8rdTWWM9qPv0Odd8ZwhPcmZNAVs=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:21:51 2026 by rpki-client