Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa
File:                     fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa (raw, json)
Hash identifier:          0Ylk8cPxvjs+v1XlxzyHccsNeDLGUerNiLclVxa3boo=
Subject key identifier:   B0:49:F9:86:FA:14:AB:16:DF:6A:FF:E5:25:9C:3A:83:03:E1:F3:8C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BB711CFCD1DC314D93380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        198.45.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:b7:11:cf:cd:1d:c3:14:d9:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=2f464a87-1b40-4c4c-b5f2-60b033fe15a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:65:25:07:e1:71:c1:48:ee:3c:a2:28:1c:7a:
                    28:3f:11:7e:4f:86:8b:08:9e:7e:4d:3e:d2:f7:2b:
                    e4:97:16:45:99:7e:91:b1:8d:2c:fa:49:93:81:33:
                    f3:6a:5a:77:94:50:89:a4:79:e7:83:4f:2e:4b:36:
                    26:73:87:88:7e:e0:0d:13:ec:bd:9a:e9:89:e2:2d:
                    63:8a:c2:5e:b0:eb:0c:0b:99:e0:3b:ee:d9:18:e2:
                    e4:d0:a1:a0:e3:63:c7:a7:56:24:07:4c:34:c9:a7:
                    c6:30:85:92:4d:ee:f1:e4:f1:48:e4:7a:ce:34:1d:
                    86:72:54:86:ed:7f:1e:b9:0a:59:9c:4d:74:b5:f9:
                    95:79:b1:61:9f:ae:78:5c:51:94:73:72:87:9b:75:
                    80:b7:3a:e4:6c:86:fa:d7:ee:44:38:c0:e4:4e:01:
                    42:5b:03:49:78:b7:d8:92:b0:f9:a0:56:99:e8:18:
                    0d:36:15:b3:2f:ab:f7:e4:10:6a:e7:cd:d0:31:27:
                    04:15:0e:88:0f:13:d9:01:40:40:21:07:d4:03:01:
                    8c:24:99:5d:fd:6b:43:69:a1:93:c7:4c:99:e3:02:
                    ca:d9:6c:55:62:2a:b1:ee:0a:eb:9b:21:bb:cc:68:
                    08:c0:34:2c:1d:f8:28:b3:6d:3b:fd:06:79:1d:74:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:49:F9:86:FA:14:AB:16:DF:6A:FF:E5:25:9C:3A:83:03:E1:F3:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb2f5bbb-39d7-39a8-a448-c583fa34a71e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:66:9d:51:f7:49:fd:da:ba:d0:31:d3:ff:fc:09:d8:35:87:
         b5:15:2e:4d:13:8d:d5:28:da:43:9a:fb:a3:9b:b9:c4:cb:46:
         e4:74:0e:d1:31:77:d3:65:bd:f6:61:58:79:c6:7b:ac:ba:8b:
         9a:42:32:a1:7f:1f:bc:07:f9:3e:0d:d4:3c:92:24:1b:3c:b2:
         ef:ce:03:29:bd:1b:c6:e3:0b:78:1c:94:94:0b:14:b8:71:48:
         c6:27:91:c5:99:f8:84:6d:d4:c1:ed:96:96:9b:4c:15:37:c0:
         56:7d:34:3f:29:61:ad:47:f6:da:7b:a2:57:1f:2f:57:a8:9a:
         5e:97:dd:90:c4:05:8f:90:20:ce:76:d9:96:ea:16:f2:3e:e5:
         ac:5f:45:e0:f4:06:0b:26:2c:8d:63:b7:d7:8b:28:89:cd:90:
         00:0d:34:d9:95:cd:fc:ce:3f:a6:54:1c:5c:46:72:79:41:77:
         1f:1b:64:50:7f:5f:64:f9:21:75:0a:7a:ac:05:da:b7:24:a6:
         41:07:2e:e7:66:78:ee:70:5a:13:2d:99:a0:9a:a8:97:e4:31:
         14:e4:de:9a:1a:78:9d:6b:c7:3d:3a:b5:fa:37:5f:b4:36:d1:
         74:b3:73:95:6b:6d:5d:af:a9:58:dd:96:28:82:00:8a:36:e0:
         2a:f9:f0:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm7cRz80dwxTZM4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
MmY0NjRhODctMWI0MC00YzRjLWI1ZjItNjBiMDMzZmUxNWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GUlB+FxwUjuPKIoHHooPxF+T4aLCJ5+TT7S
9yvklxZFmX6RsY0s+kmTgTPzalp3lFCJpHnng08uSzYmc4eIfuANE+y9mumJ4i1j
isJesOsMC5ngO+7ZGOLk0KGg42PHp1YkB0w0yafGMIWSTe7x5PFI5HrONB2GclSG
7X8euQpZnE10tfmVebFhn654XFGUc3KHm3WAtzrkbIb61+5EOMDkTgFCWwNJeLfY
krD5oFaZ6BgNNhWzL6v35BBq583QMScEFQ6IDxPZAUBAIQfUAwGMJJld/WtDaaGT
x0yZ4wLK2WxVYiqx7grrmyG7zGgIwDQsHfgos207/QZ5HXT94wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLBJ+Yb6FKsW32r/5SWcOoMD4fOMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmIyZjViYmItMzlkNy0z
OWE4LWE0NDgtYzU4M2ZhMzRhNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL1mnVH3Sf3autAx0//8Cdg1h7UVLk0TjdUo2kOa+6ObucTLRuR0DtEx
d9NlvfZhWHnGe6y6i5pCMqF/H7wH+T4N1DySJBs8su/OAym9G8bjC3gclJQLFLhx
SMYnkcWZ+IRt1MHtlpabTBU3wFZ9ND8pYa1H9tp7olcfL1eoml6X3ZDEBY+QIM52
2ZbqFvI+5axfReD0BgsmLI1jt9eLKInNkAANNNmVzfzOP6ZUHFxGcnlBdx8bZFB/
X2T5IXUKeqwF2rckpkEHLudmeO5wWhMtmaCaqJfkMRTk3poaeJ1rxz06tfo3X7Q2
0XSzc5VrbV2vqVjdliiCAIo24Cr58GI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:36:45 2026 by rpki-client