Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7fa7df3-58a6-38c3-8f5a-178d99fa4bda.roa
File:                     a7fa7df3-58a6-38c3-8f5a-178d99fa4bda.roa (raw, json)
Hash identifier:          +Elu2yGhKGHAj56DkeixrBZfjTJEPx+QYgToYitwo6E=
Subject key identifier:   03:91:AF:E5:D7:95:28:19:93:DF:04:12:5D:91:59:31:D1:6D:34:39
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1707ED9A730526A48522B9C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7fa7df3-58a6-38c3-8f5a-178d99fa4bda.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        173.17.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:ed:9a:73:05:26:a4:85:22:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=95c59cfd-9a5e-4f44-8a1d-3b1040b66c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:08:4a:61:c5:c1:1b:86:7e:2b:84:e4:f9:
                    8a:bd:10:42:5d:2d:b6:3c:77:3c:96:eb:51:ba:03:
                    25:42:ab:87:fb:e1:00:4d:b2:92:93:5e:68:4d:27:
                    72:6d:a9:20:81:fc:c4:89:8a:0d:bf:47:b7:65:bc:
                    51:75:20:f1:06:92:99:3d:87:af:56:dd:07:d9:38:
                    44:2a:30:d5:15:2e:6d:e8:21:88:4f:b2:23:6b:e4:
                    61:b3:7d:3f:0f:98:a6:46:25:4f:f3:50:8c:b7:cc:
                    a7:0e:11:37:86:9f:6a:ea:f7:99:77:54:82:ae:5a:
                    b7:2f:2a:17:1c:47:91:79:d3:13:c6:84:e7:24:73:
                    f0:ca:dc:dc:02:1a:37:26:10:9c:ff:f0:90:f3:23:
                    cd:7f:84:76:cc:99:7a:c1:a0:ed:e8:1a:96:00:a8:
                    06:ef:13:94:bc:11:7e:39:5f:38:94:81:61:55:99:
                    20:a6:7f:2c:f3:e1:9d:0b:b9:ef:72:b0:ca:0f:f4:
                    78:4b:f9:04:34:7e:3e:88:96:08:ee:33:d3:9b:1b:
                    8b:6b:cf:30:ae:c8:79:52:f2:1f:ce:1a:c4:85:16:
                    bc:25:76:ce:d5:a0:12:69:02:b7:5b:c9:f8:cc:66:
                    88:65:c9:2a:4f:f0:3d:10:dc:31:30:c8:9f:f0:2e:
                    7c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:91:AF:E5:D7:95:28:19:93:DF:04:12:5D:91:59:31:D1:6D:34:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7fa7df3-58a6-38c3-8f5a-178d99fa4bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:cd:2c:d8:c5:08:7c:94:34:5e:a9:60:dd:d0:de:04:57:2a:
         f6:8a:45:08:c3:c4:35:7a:da:f6:05:c5:eb:41:68:3d:77:ca:
         26:95:c2:f4:fc:0b:30:d4:8c:e4:bf:5f:03:f7:82:27:31:18:
         c9:6b:13:2b:8b:10:1c:41:70:af:aa:a6:ff:2e:84:e8:a4:78:
         40:85:8e:50:db:f7:1d:2d:59:ef:37:4d:0b:14:5c:90:b4:3a:
         0b:d8:d6:85:0a:d1:d7:bf:7c:5f:7a:5c:9f:52:ac:70:61:ce:
         5b:0d:7b:a5:fd:6a:5b:52:2e:03:07:12:48:26:77:03:7d:a0:
         a2:bf:8d:5d:5d:c5:a7:0e:24:a6:57:9e:e3:00:28:17:a2:29:
         8c:19:0e:2e:a9:51:a1:f7:04:a9:ea:e1:61:94:8b:e4:6e:49:
         59:97:54:35:24:d1:2b:82:a0:0a:53:08:03:6e:c8:8e:8a:c0:
         04:d3:fe:be:87:f4:05:53:7a:9b:30:0b:d7:71:92:3a:d7:e6:
         02:1a:d2:1a:25:bb:06:2a:c4:50:29:57:21:6e:dd:23:7f:1a:
         87:f5:8e:88:3d:23:02:99:e6:72:66:10:5e:f2:33:fe:a3:ca:
         cc:67:f9:a4:a0:b3:e0:9e:66:bf:0e:d9:28:07:7a:1f:56:04:
         83:33:74:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB+2acwUmpIUiucAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk
OTVjNTljZmQtOWE1ZS00ZjQ0LThhMWQtM2IxMDQwYjY2YzBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLwISmHFwRuGfiuE5PmKvRBCXS22PHc8lutR
ugMlQquH++EATbKSk15oTSdybakggfzEiYoNv0e3ZbxRdSDxBpKZPYevVt0H2ThE
KjDVFS5t6CGIT7Ija+Rhs30/D5imRiVP81CMt8ynDhE3hp9q6veZd1SCrlq3LyoX
HEeRedMTxoTnJHPwytzcAho3JhCc//CQ8yPNf4R2zJl6waDt6BqWAKgG7xOUvBF+
OV84lIFhVZkgpn8s8+GdC7nvcrDKD/R4S/kENH4+iJYI7jPTmxuLa88wrsh5UvIf
zhrEhRa8JXbO1aASaQK3W8n4zGaIZckqT/A9ENwxMMif8C589wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAORr+XXlSgZk98EEl2RWTHRbTQ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTdmYTdkZjMtNThhNi0z
OGMzLThmNWEtMTc4ZDk5ZmE0YmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArREvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABbNLNjFCHyUNF6pYN3Q3gRXKvaKRQjDxDV62vYFxetBaD13yiaVwvT8
CzDUjOS/XwP3gicxGMlrEyuLEBxBcK+qpv8uhOikeECFjlDb9x0tWe83TQsUXJC0
OgvY1oUK0de/fF96XJ9SrHBhzlsNe6X9altSLgMHEkgmdwN9oKK/jV1dxacOJKZX
nuMAKBeiKYwZDi6pUaH3BKnq4WGUi+RuSVmXVDUk0SuCoApTCANuyI6KwATT/r6H
9AVTepswC9dxkjrX5gIa0holuwYqxFApVyFu3SN/Gof1jog9IwKZ5nJmEF7yM/6j
ysxn+aSgs+CeZr8O2SgHeh9WBIMzdB8=
-----END CERTIFICATE-----
Generated at Thu Mar 12 03:41:43 2026 by rpki-client