Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ed91eae-e63c-3214-9270-5157975ed2ff.roa
File:                     3ed91eae-e63c-3214-9270-5157975ed2ff.roa (raw, json)
Hash identifier:          pI7gsxQQV9bhhVyn3a6jaSaExex5LRCA+9Vi/rYRcWc=
Subject key identifier:   9F:E4:1F:3D:A3:E4:9E:BF:C1:83:FA:B2:0E:0E:A6:60:4B:C6:10:CC
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DFBBF9BAF4BC58424E0BFC480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ed91eae-e63c-3214-9270-5157975ed2ff.roa
Signing time:             Thu 28 May 2026 12:15:32 +0000
ROA not before:           Thu 28 May 2026 12:15:32 +0000
ROA not after:            Wed 26 Aug 2026 12:15:32 +0000
asID:                     19905
IP address blocks:        173.17.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:bf:9b:af:4b:c5:84:24:e0:bf:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 28 12:15:32 2026 GMT
            Not After : Aug 26 12:15:32 2026 GMT
        Subject: CN=fe9727cd-9f3e-4063-865f-bee299cb136f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:90:01:c3:86:7d:b9:f4:43:10:1a:3d:d7:80:
                    bc:e6:5f:2a:01:bf:92:0a:7c:50:c9:cb:3d:85:57:
                    43:22:aa:ba:94:df:c5:64:dd:a8:28:2d:04:3d:3a:
                    5a:9e:77:18:55:dd:46:e1:8a:87:23:c3:62:c0:9f:
                    20:a1:ac:ab:d5:ed:19:80:63:f4:dd:c1:4e:16:9a:
                    bb:91:91:b1:c2:de:1b:e8:7a:3f:a7:a9:6d:60:1c:
                    08:b8:67:c9:bf:05:b1:f9:e8:be:95:4c:18:33:87:
                    a9:7f:5a:b6:97:62:61:2f:0a:ea:9d:3d:df:e9:f5:
                    0f:b9:d6:55:02:2d:6a:86:d3:76:55:2d:72:56:b5:
                    a0:85:54:4b:51:ce:46:a1:59:3c:28:21:f4:8e:a5:
                    3c:85:af:0c:fb:4b:5f:81:48:7c:78:bb:81:ba:86:
                    8a:5b:ba:0e:42:95:42:e5:52:b1:48:54:e8:84:7d:
                    e5:3d:67:11:7e:67:72:3d:e5:ca:a7:28:45:38:bc:
                    26:0c:67:d8:53:c8:8c:ed:0f:4d:4d:d4:17:f4:c5:
                    5f:9e:4b:62:8c:4f:75:2b:bf:55:aa:ab:d1:4d:8d:
                    15:8a:ff:19:43:b2:f4:b6:24:65:3a:ea:f6:b6:d0:
                    29:66:b7:8f:44:01:ed:91:59:b1:8f:c7:8a:5d:df:
                    26:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E4:1F:3D:A3:E4:9E:BF:C1:83:FA:B2:0E:0E:A6:60:4B:C6:10:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ed91eae-e63c-3214-9270-5157975ed2ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:0b:a6:e9:4c:98:92:aa:7a:9e:c6:92:a9:e0:93:8c:3b:8f:
         42:74:0b:22:c8:5a:3c:45:6e:3f:00:f2:84:da:02:b3:a6:2c:
         1f:49:e8:d4:3a:6f:17:ca:e5:72:08:b1:4d:b8:f4:bf:6a:b0:
         ed:bc:66:38:44:60:4a:6b:57:10:da:5e:30:f4:bc:78:da:c4:
         b9:ce:b5:93:06:55:6e:10:a7:73:af:28:5a:46:c1:ec:a7:da:
         8b:d2:d3:5e:1a:00:59:38:2c:36:02:e3:74:7b:bd:fb:12:9f:
         1e:4a:1f:87:48:17:5a:3b:62:ed:df:c5:5c:06:50:71:9c:e6:
         25:ab:2b:af:02:d3:48:c7:73:d8:4a:e1:e4:56:87:67:54:d4:
         ce:04:30:6b:45:f8:ea:55:31:2b:5a:6c:39:92:c1:92:9a:29:
         e7:4a:5a:86:44:97:5a:b6:2f:a1:7a:0e:ac:e5:31:03:70:9e:
         b6:eb:cd:bd:91:2a:3d:45:b6:a3:5c:7b:81:bd:2c:af:94:0b:
         39:65:e5:56:60:d1:b8:25:97:6b:30:11:1f:dd:bf:5b:f2:eb:
         71:fe:57:62:7b:f5:56:64:47:11:75:af:da:0a:72:e2:bc:a5:
         c4:9c:27:49:a3:8d:89:92:50:36:52:91:7e:81:7f:80:9c:6b:
         ae:c1:2c:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE37v5uvS8WEJOC/xIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUyODEyMTUzMloXDTI2MDgyNjEyMTUzMlowLzEtMCsGA1UEAxMk
ZmU5NzI3Y2QtOWYzZS00MDYzLTg2NWYtYmVlMjk5Y2IxMzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZABw4Z9ufRDEBo914C85l8qAb+SCnxQycs9
hVdDIqq6lN/FZN2oKC0EPTpanncYVd1G4YqHI8NiwJ8goayr1e0ZgGP03cFOFpq7
kZGxwt4b6Ho/p6ltYBwIuGfJvwWx+ei+lUwYM4epf1q2l2JhLwrqnT3f6fUPudZV
Ai1qhtN2VS1yVrWghVRLUc5GoVk8KCH0jqU8ha8M+0tfgUh8eLuBuoaKW7oOQpVC
5VKxSFTohH3lPWcRfmdyPeXKpyhFOLwmDGfYU8iM7Q9NTdQX9MVfnktijE91K79V
qqvRTY0Viv8ZQ7L0tiRlOur2ttApZrePRAHtkVmxj8eKXd8m2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ/kHz2j5J6/wYP6sg4OpmBLxhDMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2VkOTFlYWUtZTYzYy0z
MjE0LTkyNzAtNTE1Nzk3NWVkMmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRHGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD0LpulMmJKqep7Gkqngk4w7j0J0CyLIWjxFbj8A8oTaArOmLB9J6NQ6
bxfK5XIIsU249L9qsO28ZjhEYEprVxDaXjD0vHjaxLnOtZMGVW4Qp3OvKFpGweyn
2ovS014aAFk4LDYC43R7vfsSnx5KH4dIF1o7Yu3fxVwGUHGc5iWrK68C00jHc9hK
4eRWh2dU1M4EMGtF+OpVMStabDmSwZKaKedKWoZEl1q2L6F6DqzlMQNwnrbrzb2R
Kj1FtqNce4G9LK+UCzll5VZg0bgll2swER/dv1vy63H+V2J79VZkRxF1r9oKcuK8
pcScJ0mjjYmSUDZSkX6Bf4Cca67BLP0=
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:18:26 2026 by rpki-client