Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf41ccd-39d4-3d66-a43d-f7951671efc3.roa
File:                     dcf41ccd-39d4-3d66-a43d-f7951671efc3.roa (raw, json)
Hash identifier:          2TTQX5MYh2UiLmuc/owesD9Tz8qh6d6gYD1/dypJ/Lc=
Subject key identifier:   01:F8:BB:A2:F0:5F:A3:81:62:13:03:5E:F3:89:C1:65:6D:3C:59:30
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B849364D0CA9222DB90C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf41ccd-39d4-3d66-a43d-f7951671efc3.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.196.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:84:93:64:d0:ca:92:22:db:90:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=7d772aed-5f60-44a6-b991-6fb8d85b6b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4c:6b:5a:c5:c3:1a:d0:e4:66:9c:4c:ee:26:
                    b9:a1:c8:3b:9f:9a:43:c0:74:46:99:59:d4:12:e8:
                    a3:7a:23:d9:2a:9c:8c:93:64:17:ca:8f:6f:b6:0d:
                    29:cd:6d:bd:94:cf:1a:8f:14:ef:3f:3e:39:c8:ed:
                    e6:82:d9:f3:d4:ba:0f:49:47:1e:bb:7a:23:ff:10:
                    59:84:22:22:71:93:e9:9b:cc:f7:c7:d7:23:7e:09:
                    12:15:3b:84:31:28:30:cd:a1:7d:e6:63:ff:0e:70:
                    5b:2d:95:da:71:5c:b2:f5:22:7f:c8:68:25:c1:7c:
                    19:9d:7e:21:ae:24:36:05:64:7e:46:d6:36:4c:c5:
                    0b:f5:2e:f1:64:59:69:38:3d:96:85:bd:c1:21:60:
                    8a:95:37:5a:46:69:bc:34:e6:3b:ac:7f:ac:a6:fe:
                    cf:7d:48:9d:38:b6:42:11:16:37:17:7c:d2:0d:b1:
                    ae:68:88:eb:7a:fb:6b:40:cd:9a:26:6e:5b:0f:24:
                    ce:59:cd:6d:8d:f4:70:f6:66:f8:73:92:e9:2b:9a:
                    b3:8c:76:10:14:b3:00:63:92:09:6b:a6:f5:48:a4:
                    ed:1c:04:78:c4:ac:91:94:86:f1:cb:5a:6d:c9:31:
                    5b:da:2b:fc:04:2d:57:b2:95:86:91:03:42:8d:ea:
                    ea:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F8:BB:A2:F0:5F:A3:81:62:13:03:5E:F3:89:C1:65:6D:3C:59:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dcf41ccd-39d4-3d66-a43d-f7951671efc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.196.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:ba:0b:09:8e:55:1a:79:3a:9a:dd:8c:7d:79:87:36:b1:ac:
         d6:d6:ea:a0:9d:9d:03:b7:78:8f:05:e6:35:aa:a6:e2:ab:9a:
         46:6a:12:b1:d9:c0:6b:b5:1e:77:1a:66:da:68:7e:66:ce:e3:
         f8:16:6a:03:b6:80:60:38:38:77:be:bb:b3:45:50:61:90:e7:
         5c:b1:55:fc:f7:0d:ef:b0:1e:19:95:0b:a2:8b:df:01:f2:a0:
         49:e2:4a:34:f6:5a:35:d9:31:db:26:9f:68:ba:4a:2f:6d:53:
         0a:7d:ca:d5:14:10:e7:61:d9:95:6e:c5:c6:9d:f2:4e:f2:2c:
         2d:0b:48:76:98:f0:00:b1:5d:f7:49:a5:a2:c0:ba:aa:7b:2a:
         25:54:92:a4:5b:1d:e1:2b:fb:91:70:db:e7:78:1d:f0:c8:47:
         26:a2:67:e4:92:23:13:c8:46:9c:8d:e9:9b:4a:99:f8:0b:34:
         5d:d1:f0:c6:f4:53:e5:27:6a:0a:98:0a:ec:03:5e:42:6c:ac:
         42:99:99:1f:a5:e6:ed:60:cd:29:fb:db:9f:e0:3d:83:50:61:
         d5:03:04:f7:1d:37:b5:bf:0f:f6:7f:2a:07:48:0a:75:87:f4:
         70:21:bb:aa:df:f0:36:c8:97:1c:83:a5:1b:b5:f3:82:74:c9:
         65:b3:0c:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm4STZNDKkiLbkMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
N2Q3NzJhZWQtNWY2MC00NGE2LWI5OTEtNmZiOGQ4NWI2YjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkxrWsXDGtDkZpxM7ia5ocg7n5pDwHRGmVnU
EuijeiPZKpyMk2QXyo9vtg0pzW29lM8ajxTvPz45yO3mgtnz1LoPSUceu3oj/xBZ
hCIicZPpm8z3x9cjfgkSFTuEMSgwzaF95mP/DnBbLZXacVyy9SJ/yGglwXwZnX4h
riQ2BWR+RtY2TMUL9S7xZFlpOD2Whb3BIWCKlTdaRmm8NOY7rH+spv7PfUidOLZC
ERY3F3zSDbGuaIjrevtrQM2aJm5bDyTOWc1tjfRw9mb4c5LpK5qzjHYQFLMAY5IJ
a6b1SKTtHAR4xKyRlIbxy1ptyTFb2iv8BC1XspWGkQNCjerqDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAH4u6LwX6OBYhMDXvOJwWVtPFkwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGNmNDFjY2QtMzlkNC0z
ZDY2LWE0M2QtZjc5NTE2NzFlZmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8QyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMq6CwmOVRp5OprdjH15hzaxrNbW6qCdnQO3eI8F5jWqpuKrmkZqErHZ
wGu1HncaZtpofmbO4/gWagO2gGA4OHe+u7NFUGGQ51yxVfz3De+wHhmVC6KL3wHy
oEniSjT2WjXZMdsmn2i6Si9tUwp9ytUUEOdh2ZVuxcad8k7yLC0LSHaY8ACxXfdJ
paLAuqp7KiVUkqRbHeEr+5Fw2+d4HfDIRyaiZ+SSIxPIRpyN6ZtKmfgLNF3R8Mb0
U+UnagqYCuwDXkJsrEKZmR+l5u1gzSn725/gPYNQYdUDBPcdN7W/D/Z/KgdICnWH
9HAhu6rf8DbIlxyDpRu184J0yWWzDKo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:41:10 2026 by rpki-client