Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9bb93b5-67a8-32e8-b395-ea74723d3667.roa
File:                     a9bb93b5-67a8-32e8-b395-ea74723d3667.roa (raw, json)
Hash identifier:          lbfWl9ev39KYOWZOzYykvj8stc4wFLCWSeIKAVXpyh4=
Subject key identifier:   B0:B3:9F:19:89:3A:19:AA:7C:3B:5A:75:87:76:D6:F3:09:FA:34:55
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584DFBBFB4A508607F84927F4880
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9bb93b5-67a8-32e8-b395-ea74723d3667.roa
Signing time:             Thu 28 May 2026 12:15:44 +0000
ROA not before:           Thu 28 May 2026 12:15:44 +0000
ROA not after:            Wed 26 Aug 2026 12:15:44 +0000
asID:                     19905
IP address blocks:        173.22.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:bf:b4:a5:08:60:7f:84:92:7f:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 28 12:15:44 2026 GMT
            Not After : Aug 26 12:15:44 2026 GMT
        Subject: CN=ebe8a400-1a85-4b2c-859c-4a1d1d3c0510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:79:c9:65:12:40:e8:0b:73:9c:1e:7b:54:5f:
                    16:bf:f8:14:f5:e9:55:92:03:8b:b6:1c:4d:48:f0:
                    8b:79:b4:ec:bd:47:89:15:8d:fe:a7:e2:e2:a6:cf:
                    44:ac:da:1f:77:90:80:64:33:8b:a8:33:dd:24:d6:
                    47:c2:f6:8a:87:58:0a:d9:ee:e8:cb:aa:c6:1c:ad:
                    76:3f:b9:9a:2b:d2:a2:8e:fd:2b:4a:80:79:76:ad:
                    9a:c9:69:4d:bb:ca:9a:98:d2:6f:47:99:f2:1f:9c:
                    53:3f:06:02:a4:fb:09:aa:94:4d:ae:3f:ea:0c:88:
                    83:87:eb:b3:2f:74:49:4e:bd:72:1d:30:51:96:36:
                    8a:5e:86:93:79:f4:8a:82:48:03:43:62:36:b5:c6:
                    4b:56:03:b5:58:a0:36:11:89:41:b6:33:93:47:bc:
                    84:c3:7e:a2:b8:05:4a:e4:f5:8d:df:53:53:d3:bf:
                    fd:1a:58:ed:6e:db:fb:c6:8b:6b:a2:e6:9b:ec:94:
                    52:91:35:46:db:30:ba:c9:48:36:b2:d0:be:c9:de:
                    eb:a5:43:35:0f:05:06:33:81:58:13:fc:f6:fd:7b:
                    56:63:3a:5d:95:63:ef:ac:c6:e8:31:25:20:3e:eb:
                    bf:e4:c5:34:58:7c:7f:59:15:2f:d6:88:e6:4b:5a:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B3:9F:19:89:3A:19:AA:7C:3B:5A:75:87:76:D6:F3:09:FA:34:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9bb93b5-67a8-32e8-b395-ea74723d3667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:01:63:16:9f:4f:a1:e0:35:49:76:05:0a:de:c9:4f:0a:14:
         23:b3:db:8d:79:33:f1:a1:07:55:79:7b:e2:18:50:9d:f9:f5:
         dc:c6:d6:d6:14:f9:3b:a7:f2:ae:62:36:b4:54:ae:4c:15:49:
         c8:05:a5:e8:60:05:08:3d:ea:e7:35:08:22:dc:a6:fa:89:18:
         2e:85:3c:1b:43:d6:51:bf:d8:ad:ed:c6:f1:9b:82:ac:2e:08:
         30:80:1e:f1:25:23:ec:6a:fc:a2:6d:7a:6f:50:d2:39:88:a7:
         a6:6d:7c:4c:58:b3:d6:2f:b0:09:5e:6d:57:dc:08:2d:3c:db:
         ce:a7:3e:72:db:d3:1e:93:b5:f4:8f:eb:d9:99:5c:c2:0d:e0:
         01:06:24:49:0e:e1:14:61:76:36:3a:56:d5:7a:ab:02:57:1c:
         ca:8c:cd:86:d2:2c:3a:3f:eb:e3:4a:83:e8:f3:84:57:e4:c5:
         1d:68:02:94:a8:c4:f1:6e:de:be:62:dc:45:a4:7f:a5:4e:0c:
         b2:31:d1:b2:1e:c5:75:d5:fe:e3:ae:db:fb:71:e2:5f:e6:d5:
         5b:57:95:42:37:6f:15:c2:06:1a:00:99:84:5f:76:60:83:a7:
         1f:89:70:ba:42:0e:7f:7b:9c:31:6b:27:f1:5c:17:6a:8d:ca:
         4b:37:03:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE37v7SlCGB/hJJ/SIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUyODEyMTU0NFoXDTI2MDgyNjEyMTU0NFowLzEtMCsGA1UEAxMk
ZWJlOGE0MDAtMWE4NS00YjJjLTg1OWMtNGExZDFkM2MwNTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3nJZRJA6AtznB57VF8Wv/gU9elVkgOLthxN
SPCLebTsvUeJFY3+p+Lips9ErNofd5CAZDOLqDPdJNZHwvaKh1gK2e7oy6rGHK12
P7maK9Kijv0rSoB5dq2ayWlNu8qamNJvR5nyH5xTPwYCpPsJqpRNrj/qDIiDh+uz
L3RJTr1yHTBRljaKXoaTefSKgkgDQ2I2tcZLVgO1WKA2EYlBtjOTR7yEw36iuAVK
5PWN31NT07/9Gljtbtv7xotrouab7JRSkTVG2zC6yUg2stC+yd7rpUM1DwUGM4FY
E/z2/XtWYzpdlWPvrMboMSUgPuu/5MU0WHx/WRUv1ojmS1qigQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCznxmJOhmqfDtadYd21vMJ+jRVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTliYjkzYjUtNjdhOC0z
MmU4LWIzOTUtZWE3NDcyM2QzNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRaqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGsBYxafT6HgNUl2BQreyU8KFCOz2415M/GhB1V5e+IYUJ359dzG1tYU
+Tun8q5iNrRUrkwVScgFpehgBQg96uc1CCLcpvqJGC6FPBtD1lG/2K3txvGbgqwu
CDCAHvElI+xq/KJtem9Q0jmIp6ZtfExYs9YvsAlebVfcCC08286nPnLb0x6TtfSP
69mZXMIN4AEGJEkO4RRhdjY6VtV6qwJXHMqMzYbSLDo/6+NKg+jzhFfkxR1oApSo
xPFu3r5i3EWkf6VODLIx0bIexXXV/uOu2/tx4l/m1VtXlUI3bxXCBhoAmYRfdmCD
px+JcLpCDn97nDFrJ/FcF2qNyks3AxY=
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:19:14 2026 by rpki-client