Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e9b7509c-3dcc-3c01-9db3-e148c542f9c0.roa
File:                     e9b7509c-3dcc-3c01-9db3-e148c542f9c0.roa (raw, json)
Hash identifier:          SMdRBanDdxAGJOferEv50uxssydjl+/5/xQt33JndJk=
Subject key identifier:   BF:81:EE:3D:DB:D4:54:6A:1F:FD:57:8F:B8:13:C9:F0:25:9E:36:66
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584E6B0A1E0471A8915C1BA25F70
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e9b7509c-3dcc-3c01-9db3-e148c542f9c0.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     33695
IP address blocks:        173.237.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:1e:04:71:a8:91:5c:1b:a2:5f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=3a0af808-9e85-47e2-ab09-624df732595f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:53:f8:c1:da:1d:dc:62:ba:b4:82:38:5e:cf:
                    3d:a0:9b:fb:df:a2:cf:b4:f8:6e:4b:a4:8d:8e:b5:
                    cb:a9:01:3b:22:cd:9f:30:b4:2b:d5:52:3a:8b:33:
                    b5:16:23:0c:45:32:4a:c2:aa:93:14:4c:a3:c1:5d:
                    24:e1:8f:5c:6a:2d:0e:61:57:65:d6:01:f1:0e:4c:
                    c4:83:68:0f:55:41:96:0e:b1:27:99:bd:98:38:ad:
                    cb:48:93:22:9f:64:05:cb:31:8e:e3:e5:43:16:d0:
                    f6:b3:58:79:ee:9b:a3:d8:5d:7f:29:1c:cd:c2:72:
                    5f:90:b8:79:ea:0e:12:e1:4e:b3:ae:a8:e4:67:5d:
                    00:6f:93:4e:33:6f:d0:79:a6:de:bc:b0:a0:c7:3d:
                    dc:77:83:2e:47:cf:b3:ae:0c:6e:27:1c:50:d5:8a:
                    c4:cc:d0:cc:fd:0f:3f:32:8c:82:3d:f3:9d:56:ff:
                    26:61:15:34:97:ea:29:20:18:0d:1b:d8:b4:75:6c:
                    ea:0a:17:c6:48:94:1a:92:ac:1c:00:0c:53:38:de:
                    44:f1:00:d0:aa:12:f4:c6:ab:4b:19:c2:82:da:6e:
                    95:ba:ec:2c:b7:81:53:34:de:e8:61:e3:1e:b6:fd:
                    1e:69:d7:9e:63:1b:67:73:f2:64:7b:f2:e3:e5:94:
                    36:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:81:EE:3D:DB:D4:54:6A:1F:FD:57:8F:B8:13:C9:F0:25:9E:36:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e9b7509c-3dcc-3c01-9db3-e148c542f9c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.237.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e8:f3:a3:9d:6a:ea:5f:1e:03:2d:0d:20:bd:3a:f4:03:d8:
         aa:c1:9f:7a:72:74:c7:fe:f2:71:f9:7d:00:47:f5:20:34:df:
         06:de:da:28:89:94:ec:a2:69:62:b0:43:5b:d1:5f:04:0c:8d:
         9b:4e:ee:93:da:a1:eb:7f:8f:ec:ed:9f:63:7e:ea:4e:09:79:
         d7:39:ee:31:fa:b4:1c:e6:91:56:fd:ae:7d:3c:a1:1d:92:cb:
         f5:61:68:8f:fa:fe:f7:9e:97:b1:d7:9f:df:d9:cb:28:4e:21:
         be:fd:90:f6:9e:fe:fe:e2:28:46:a5:f2:e7:0a:c0:06:ea:18:
         ea:31:50:3a:44:98:1f:78:a1:e2:b8:42:93:b0:2c:11:97:54:
         73:e6:d7:c7:8b:f9:6d:47:3b:95:8b:d0:72:dd:9d:02:4e:4d:
         bb:21:30:9e:71:2f:cb:4e:0c:ff:0b:99:a3:e5:bc:53:87:2b:
         77:fd:5d:6d:13:f2:d4:28:d3:b7:6d:83:3e:f3:a5:a7:55:10:
         bc:9f:06:20:c6:08:73:d3:b6:31:fa:cf:87:44:c7:e6:b7:d2:
         cb:8f:4c:38:ec:67:f5:ea:a4:14:24:2f:63:40:96:50:10:c0:
         9e:c1:e4:6d:97:97:bc:23:09:2f:c4:45:ad:2a:9a:1e:bf:64:
         97:3f:1e:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCh4EcaiRXBuiX3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk
M2EwYWY4MDgtOWU4NS00N2UyLWFiMDktNjI0ZGY3MzI1OTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVP4wdod3GK6tII4Xs89oJv736LPtPhuS6SN
jrXLqQE7Is2fMLQr1VI6izO1FiMMRTJKwqqTFEyjwV0k4Y9cai0OYVdl1gHxDkzE
g2gPVUGWDrEnmb2YOK3LSJMin2QFyzGO4+VDFtD2s1h57puj2F1/KRzNwnJfkLh5
6g4S4U6zrqjkZ10Ab5NOM2/QeabevLCgxz3cd4MuR8+zrgxuJxxQ1YrEzNDM/Q8/
MoyCPfOdVv8mYRU0l+opIBgNG9i0dWzqChfGSJQakqwcAAxTON5E8QDQqhL0xqtL
GcKC2m6Vuuwst4FTNN7oYeMetv0eadeeYxtnc/Jke/Lj5ZQ2TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+B7j3b1FRqH/1Xj7gTyfAlnjZmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvZTliNzUwOWMtM2RjYy0z
YzAxLTlkYjMtZTE0OGM1NDJmOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAre20MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELo86OdaupfHgMtDSC9OvQD2KrBn3pydMf+8nH5fQBH9SA03wbe2iiJ
lOyiaWKwQ1vRXwQMjZtO7pPaoet/j+ztn2N+6k4Jedc57jH6tBzmkVb9rn08oR2S
y/VhaI/6/veel7HXn9/ZyyhOIb79kPae/v7iKEal8ucKwAbqGOoxUDpEmB94oeK4
QpOwLBGXVHPm18eL+W1HO5WL0HLdnQJOTbshMJ5xL8tODP8LmaPlvFOHK3f9XW0T
8tQo07dtgz7zpadVELyfBiDGCHPTtjH6z4dEx+a30suPTDjsZ/XqpBQkL2NAllAQ
wJ7B5G2Xl7wjCS/ERa0qmh6/ZJc/HgU=
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:07:32 2026 by rpki-client