Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df1d22c9-697a-39c7-be63-8a50da8780d1.roa
File:                     df1d22c9-697a-39c7-be63-8a50da8780d1.roa (raw, json)
Hash identifier:          of6a3L+p+rYuGAqAemWFkypJRZL4MeCh5vHljoybJK4=
Subject key identifier:   89:A3:7B:BE:B1:4A:0B:49:AC:42:26:21:E1:46:53:43:64:AB:59:7B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059B8EADC7792396845ACB80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df1d22c9-697a-39c7-be63-8a50da8780d1.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        99.198.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:8e:ad:c7:79:23:96:84:5a:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=37f4db78-87ca-40cb-b804-bcddf05bc245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:42:09:08:41:50:40:04:60:39:01:fe:8f:
                    6b:54:3c:72:77:b5:a9:a1:f9:9f:d8:2e:60:39:40:
                    ef:ac:8d:b3:26:e4:f7:0b:70:aa:4e:07:db:3f:d6:
                    13:52:d5:3b:81:dc:3e:d5:7b:97:8a:68:de:39:ff:
                    63:9a:e8:ad:db:d0:90:26:9b:42:33:9e:7d:2a:5b:
                    d5:83:82:bc:b2:9c:f1:72:8b:1f:91:1c:29:7a:c7:
                    c7:98:bb:97:f4:1c:00:f8:3c:c5:1a:d5:2e:67:84:
                    37:26:4b:8b:d3:37:2a:2d:6b:49:47:69:16:3c:38:
                    5b:17:ee:89:7e:fe:0f:ff:8d:b7:7a:55:48:0e:4a:
                    47:f3:b2:2d:c3:2e:00:87:0f:81:27:b7:ba:e6:f9:
                    80:75:06:80:fd:c0:36:54:39:17:81:9c:cf:38:a7:
                    59:8e:ca:ed:2e:8c:d0:d5:95:b3:59:48:0c:d2:5f:
                    05:cc:9a:8c:f4:a8:65:f5:1c:51:cf:0c:31:54:2e:
                    ef:a1:23:33:9a:69:af:f1:e2:61:e9:1a:b9:6f:ab:
                    09:e3:23:01:4e:0c:2e:6f:a0:5e:49:bd:2b:7b:35:
                    bb:d5:c5:2d:5e:87:4f:85:8c:84:b0:74:f3:98:7d:
                    86:61:24:1e:a8:ee:88:d0:c2:05:50:18:ca:29:cc:
                    8e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A3:7B:BE:B1:4A:0B:49:AC:42:26:21:E1:46:53:43:64:AB:59:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df1d22c9-697a-39c7-be63-8a50da8780d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:90:f0:e0:17:84:0e:12:db:d4:44:81:92:4b:76:0d:53:bf:
         fd:7a:16:49:08:48:40:63:d9:84:d9:46:ff:bd:70:37:2e:b3:
         b1:f4:a8:46:24:12:0e:9e:18:29:5d:18:93:87:8e:5b:94:dd:
         2e:7a:35:a4:16:e4:a5:de:01:80:18:53:1c:7b:7f:2a:79:e1:
         12:10:83:1c:3e:b0:cd:a7:0a:d6:ad:9b:58:29:8d:60:bf:dd:
         a8:46:ae:61:63:06:75:a8:a5:9d:63:35:15:2b:36:a7:1c:fb:
         20:0e:eb:f0:b5:9e:65:51:1e:75:cc:d5:ec:61:ae:22:41:e9:
         a4:f4:93:97:68:99:4f:3a:78:fa:87:76:89:ab:68:35:e4:e2:
         f8:f5:6a:8d:c0:85:b9:2e:5a:01:15:b0:1b:9c:d5:76:f6:d5:
         6c:a4:8f:69:03:b2:39:95:87:fb:e1:79:dd:84:ea:60:f5:00:
         7d:d8:8e:f2:5c:44:dc:43:a2:cb:c2:6b:b3:94:43:6e:5f:08:
         df:8c:92:cb:cd:b1:86:bb:3e:2c:c7:83:4b:a7:a0:d3:31:72:
         4c:8e:5c:a1:70:fe:52:c2:d4:14:be:c2:03:63:b0:8e:44:08:
         06:73:38:33:85:61:bd:df:ef:77:6a:d3:83:f0:12:f5:47:cc:
         b3:69:8e:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm46tx3kjloRay4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
MzdmNGRiNzgtODdjYS00MGNiLWI4MDQtYmNkZGYwNWJjMjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJdCCQhBUEAEYDkB/o9rVDxyd7Wpofmf2C5g
OUDvrI2zJuT3C3CqTgfbP9YTUtU7gdw+1XuXimjeOf9jmuit29CQJptCM559KlvV
g4K8spzxcosfkRwpesfHmLuX9BwA+DzFGtUuZ4Q3JkuL0zcqLWtJR2kWPDhbF+6J
fv4P/423elVIDkpH87Itwy4Ahw+BJ7e65vmAdQaA/cA2VDkXgZzPOKdZjsrtLozQ
1ZWzWUgM0l8FzJqM9Khl9RxRzwwxVC7voSMzmmmv8eJh6Rq5b6sJ4yMBTgwub6Be
Sb0rezW71cUtXodPhYyEsHTzmH2GYSQeqO6I0MIFUBjKKcyOaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFImje76xSgtJrEImIeFGU0Nkq1l7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGYxZDIyYzktNjk3YS0z
OWM3LWJlNjMtOGE1MGRhODc4MGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAY8YzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWQ8OAXhA4S29REgZJLdg1Tv/16FkkISEBj2YTZRv+9cDcus7H0qEYk
Eg6eGCldGJOHjluU3S56NaQW5KXeAYAYUxx7fyp54RIQgxw+sM2nCtatm1gpjWC/
3ahGrmFjBnWopZ1jNRUrNqcc+yAO6/C1nmVRHnXM1exhriJB6aT0k5domU86ePqH
domraDXk4vj1ao3AhbkuWgEVsBuc1Xb21Wykj2kDsjmVh/vhed2E6mD1AH3YjvJc
RNxDosvCa7OUQ25fCN+MksvNsYa7PizHg0unoNMxckyOXKFw/lLC1BS+wgNjsI5E
CAZzODOFYb3f73dq04PwEvVHzLNpjiA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:31 2026 by rpki-client