Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a087dc8-1ee0-3dd9-bd4d-a1c5115d9620.roa
File:                     0a087dc8-1ee0-3dd9-bd4d-a1c5115d9620.roa (raw, json)
Hash identifier:          6TFQOZInTRRbM9OfCAYhFnZrm8F+7+Tt+DUSiVoN3GA=
Subject key identifier:   D7:D5:E8:A1:86:99:2F:4F:A4:E4:97:A6:80:8B:33:1E:A5:A3:2F:EB
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DF3583E6F2FFA677D23BF8E20
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a087dc8-1ee0-3dd9-bd4d-a1c5115d9620.roa
Signing time:             Mon 25 May 2026 12:00:48 +0000
ROA not before:           Mon 25 May 2026 12:00:48 +0000
ROA not after:            Sun 23 Aug 2026 12:00:48 +0000
asID:                     19905
IP address blocks:        173.27.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:58:3e:6f:2f:fa:67:7d:23:bf:8e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 25 12:00:48 2026 GMT
            Not After : Aug 23 12:00:48 2026 GMT
        Subject: CN=cedb5764-4ab6-4360-ba12-77f46f77fde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d9:ba:04:20:09:00:23:f9:3f:3c:c1:44:81:
                    13:a1:5e:68:7c:e5:9b:3a:27:dc:8c:b0:6a:9f:11:
                    21:48:ec:5b:c7:0d:69:71:cb:33:fa:c8:d0:3b:fa:
                    4c:ae:2c:8a:b7:33:41:cb:b8:9f:b0:3d:a1:3e:bf:
                    86:e1:b4:55:9d:8e:d6:de:d8:f9:54:6e:6e:1a:24:
                    24:7f:9d:de:fd:6e:3f:c8:cc:d4:77:1e:7a:43:f8:
                    08:d7:84:3d:4e:a7:47:bf:30:0d:ee:6a:0f:72:af:
                    01:c9:36:14:9e:b9:4e:ba:30:61:72:61:1d:d7:f5:
                    47:0a:91:1f:2b:ac:c9:a9:1f:a5:cc:50:dc:9d:4c:
                    b6:f3:95:34:6b:a3:62:55:ca:6a:10:14:e9:54:0e:
                    2f:46:09:80:69:fe:4a:4d:2f:39:6b:9f:29:38:29:
                    93:95:2a:89:b6:1d:46:45:7d:db:92:ee:12:ef:5b:
                    3c:4b:d9:cf:1c:92:4f:0e:a9:ff:50:d4:80:65:22:
                    2d:01:51:a6:57:af:84:f4:27:0d:bd:11:65:dc:f5:
                    8a:91:39:e0:79:a3:a0:91:5e:d8:23:7b:50:4c:6d:
                    b1:69:47:e1:7a:34:76:dd:17:fa:cc:75:0a:71:e7:
                    49:9b:1e:81:a9:ed:d8:7b:4a:c5:ba:70:74:cc:86:
                    e8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D5:E8:A1:86:99:2F:4F:A4:E4:97:A6:80:8B:33:1E:A5:A3:2F:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a087dc8-1ee0-3dd9-bd4d-a1c5115d9620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.27.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3c:0c:77:9c:70:bc:f8:94:f0:be:4e:8b:0b:57:3d:22:2d:
         e9:6f:2d:b5:87:76:52:67:b4:36:1e:39:6d:f6:4e:a4:59:6e:
         79:13:f8:82:71:9b:1d:07:a9:9c:d9:72:5a:32:79:12:94:1e:
         c8:6c:d7:bd:86:7d:69:15:f5:e7:84:6c:e9:5d:23:47:da:3b:
         d1:2e:a9:dc:29:2f:dc:75:ea:ff:ab:15:7b:01:46:79:ec:00:
         fb:fe:98:89:ba:4d:80:f2:93:31:2c:66:fc:97:b9:23:17:10:
         60:dd:8e:93:02:d5:9e:ef:d7:78:ad:27:f9:43:95:95:56:24:
         00:6f:5f:4e:e1:9c:3f:cc:27:78:00:ee:f1:dd:80:a7:79:ec:
         56:0a:5d:dc:c4:a4:45:9c:fb:6d:6c:69:48:9d:5c:d0:63:51:
         1d:a4:f0:49:2d:ea:59:39:92:84:9e:2a:01:36:c4:6c:3e:87:
         5a:4c:b9:b4:33:b9:42:c0:05:4d:f0:ab:45:db:4a:84:b9:35:
         a9:9b:fa:69:e3:9c:72:bc:37:33:69:a5:93:75:08:5f:ce:55:
         e8:86:ff:63:16:f2:df:ae:45:53:c0:8e:0a:73:76:c9:32:f1:
         83:74:68:c9:ce:2d:dd:d6:c2:45:fb:ed:99:bc:81:51:18:de:
         96:5f:4e:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zWD5vL/pnfSO/jiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUyNTEyMDA0OFoXDTI2MDgyMzEyMDA0OFowLzEtMCsGA1UEAxMk
Y2VkYjU3NjQtNGFiNi00MzYwLWJhMTItNzdmNDZmNzdmZGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNm6BCAJACP5PzzBRIEToV5ofOWbOifcjLBq
nxEhSOxbxw1pccsz+sjQO/pMriyKtzNBy7ifsD2hPr+G4bRVnY7W3tj5VG5uGiQk
f53e/W4/yMzUdx56Q/gI14Q9TqdHvzAN7moPcq8ByTYUnrlOujBhcmEd1/VHCpEf
K6zJqR+lzFDcnUy285U0a6NiVcpqEBTpVA4vRgmAaf5KTS85a58pOCmTlSqJth1G
RX3bku4S71s8S9nPHJJPDqn/UNSAZSItAVGmV6+E9CcNvRFl3PWKkTngeaOgkV7Y
I3tQTG2xaUfhejR23Rf6zHUKcedJmx6Bqe3Ye0rFunB0zIboVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNfV6KGGmS9PpOSXpoCLMx6loy/rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGEwODdkYzgtMWVlMC0z
ZGQ5LWJkNGQtYTFjNTExNWQ5NjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRt6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHg8DHeccLz4lPC+TosLVz0iLelvLbWHdlJntDYeOW32TqRZbnkT+IJx
mx0HqZzZcloyeRKUHshs172GfWkV9eeEbOldI0faO9EuqdwpL9x16v+rFXsBRnns
APv+mIm6TYDykzEsZvyXuSMXEGDdjpMC1Z7v13itJ/lDlZVWJABvX07hnD/MJ3gA
7vHdgKd57FYKXdzEpEWc+21saUidXNBjUR2k8Ekt6lk5koSeKgE2xGw+h1pMubQz
uULABU3wq0XbSoS5Namb+mnjnHK8NzNppZN1CF/OVeiG/2MW8t+uRVPAjgpzdsky
8YN0aMnOLd3WwkX77Zm8gVEY3pZfTl8=
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:19:16 2026 by rpki-client