Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/44437370-86ff-3bc8-a863-28545745225c.roa
File:                     44437370-86ff-3bc8-a863-28545745225c.roa (raw, json)
Hash identifier:          LuoOuTCEe1olnbzgSlq6suMHkgEOmSnrgPAWKP3epfw=
Subject key identifier:   35:39:0C:49:2B:45:40:3A:3C:7D:3C:AF:1F:2D:A7:CC:AF:31:69:03
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D24E03F8E999F79E42CAAFB40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/44437370-86ff-3bc8-a863-28545745225c.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        173.194.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:3f:8e:99:9f:79:e4:2c:aa:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=9d0292a4-088d-49a9-bd26-43fe6107948d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:30:bc:20:0f:45:b7:95:3a:c4:ae:5f:9f:da:
                    a3:64:f4:d2:04:8a:a8:70:13:17:b5:11:29:59:e9:
                    4c:7f:fd:60:6c:32:3d:d1:2d:03:64:71:67:09:49:
                    81:87:67:39:0c:e5:25:f5:7a:4f:c9:9c:68:00:84:
                    1e:34:ea:b6:e6:77:ff:c4:18:68:c3:11:44:20:d8:
                    8e:2f:77:2b:c8:f6:71:33:e5:8b:63:9f:ab:e3:1f:
                    b5:21:29:16:a5:24:46:39:a1:e1:b5:02:85:23:ad:
                    0e:72:d3:c0:8d:39:42:8c:c3:21:c4:64:41:df:06:
                    54:e2:22:d0:6f:fa:a2:5c:74:e7:66:bc:c9:a5:40:
                    90:e1:2e:a5:55:92:6e:79:41:14:55:61:6f:ef:dc:
                    7b:50:54:0a:94:1f:05:08:ca:21:0a:4b:52:c2:a4:
                    cf:f8:13:a9:83:75:12:64:b1:77:0d:20:83:39:37:
                    6a:05:57:07:35:d7:86:20:dc:02:36:50:63:54:69:
                    a7:31:f8:cb:5a:09:8a:80:b6:b8:cc:f6:c4:6b:36:
                    80:7a:7e:da:7b:05:ae:70:28:47:48:84:ef:40:2f:
                    a7:37:c0:68:fe:9e:16:99:55:56:ea:f0:83:c3:02:
                    dd:f4:97:61:c7:36:c8:c8:95:f3:98:69:21:3c:8b:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:39:0C:49:2B:45:40:3A:3C:7D:3C:AF:1F:2D:A7:CC:AF:31:69:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/44437370-86ff-3bc8-a863-28545745225c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:86:43:67:1a:a8:9f:ab:d8:8d:17:78:b3:4f:d4:d9:ed:16:
         5a:6a:1c:42:0a:a0:b2:f8:60:bc:21:4e:f7:a6:c6:f2:2a:c4:
         ee:47:b9:14:39:ca:f9:60:16:dc:2f:f1:ac:5e:f1:c7:b2:df:
         30:51:4a:b5:94:95:10:80:40:76:4c:9e:09:c9:8a:71:8c:17:
         b4:77:4b:da:74:ae:5e:2e:a9:04:4d:00:7f:3d:0e:c2:ac:03:
         ad:e9:56:ea:44:22:5a:57:f2:f1:4e:dd:8d:21:50:92:0a:50:
         7b:42:24:c9:d2:06:e3:28:c3:f4:fc:b0:90:19:ee:f8:fc:8e:
         f5:b8:21:18:5c:09:b9:fa:d2:fb:ce:07:66:92:9e:86:18:80:
         00:aa:f6:48:7d:9e:34:64:e2:11:35:0b:a0:80:5b:07:c0:27:
         ec:c8:33:ce:d4:e1:20:76:2b:78:93:c1:27:80:5f:dd:d4:50:
         34:4a:54:4a:db:7a:35:69:8d:04:f9:46:71:07:ff:1c:84:5c:
         39:34:95:03:7a:e0:43:4b:d5:c5:e8:27:05:21:7c:57:21:5e:
         48:26:67:29:7e:f5:6f:82:65:22:c9:48:f4:2f:b1:21:38:75:
         b3:a5:05:28:6c:29:b6:90:02:ee:f2:55:c6:db:e2:8f:56:3b:
         42:b1:fa:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4D+OmZ955Cyq+0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
OWQwMjkyYTQtMDg4ZC00OWE5LWJkMjYtNDNmZTYxMDc5NDhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTC8IA9Ft5U6xK5fn9qjZPTSBIqocBMXtREp
WelMf/1gbDI90S0DZHFnCUmBh2c5DOUl9XpPyZxoAIQeNOq25nf/xBhowxFEINiO
L3cryPZxM+WLY5+r4x+1ISkWpSRGOaHhtQKFI60OctPAjTlCjMMhxGRB3wZU4iLQ
b/qiXHTnZrzJpUCQ4S6lVZJueUEUVWFv79x7UFQKlB8FCMohCktSwqTP+BOpg3US
ZLF3DSCDOTdqBVcHNdeGINwCNlBjVGmnMfjLWgmKgLa4zPbEazaAen7aewWucChH
SITvQC+nN8Bo/p4WmVVW6vCDwwLd9JdhxzbIyJXzmGkhPItb2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDU5DEkrRUA6PH08rx8tp8yvMWkDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDQ0MzczNzAtODZmZi0z
YmM4LWE4NjMtMjg1NDU3NDUyMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCGQ2caqJ+r2I0XeLNP1NntFlpqHEIKoLL4YLwhTvemxvIqxO5HuRQ5
yvlgFtwv8axe8cey3zBRSrWUlRCAQHZMngnJinGMF7R3S9p0rl4uqQRNAH89DsKs
A63pVupEIlpX8vFO3Y0hUJIKUHtCJMnSBuMow/T8sJAZ7vj8jvW4IRhcCbn60vvO
B2aSnoYYgACq9kh9njRk4hE1C6CAWwfAJ+zIM87U4SB2K3iTwSeAX93UUDRKVErb
ejVpjQT5RnEH/xyEXDk0lQN64ENL1cXoJwUhfFchXkgmZyl+9W+CZSLJSPQvsSE4
dbOlBShsKbaQAu7yVcbb4o9WO0Kx+vY=
-----END CERTIFICATE-----
Generated at Wed Mar 18 20:32:33 2026 by rpki-client