Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa
File:                     735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa (raw, json)
Hash identifier:          6x85LvSSz1+b6b9vCmKZp9Q0cIC+GXYV/Vm06UI1wqE=
Subject key identifier:   D4:6D:2B:E6:F2:75:1D:E6:E1:FF:48:F5:2A:C1:B4:4A:F9:7B:B4:68
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584F497523E30796460D48EFE600
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     140224
IP address blocks:        172.81.96.0/22 maxlen: 24
                          172.81.100.0/23 maxlen: 24
                          198.176.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:23:e3:07:96:46:0d:48:ef:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=99815a39-ca27-4d11-b174-3b637d606679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:4c:57:87:92:bb:81:09:19:59:7e:81:ce:
                    6b:15:ca:19:45:cd:f1:f9:db:19:ab:2b:90:93:43:
                    10:f0:00:74:b3:76:b4:20:dc:6e:87:f7:49:5a:e0:
                    56:3a:82:52:8e:06:1c:69:ba:32:2d:9e:af:7c:ad:
                    b0:33:b1:b7:9f:58:88:10:15:46:ae:c5:a6:21:27:
                    fd:05:ef:21:a4:84:90:a0:1d:dd:44:7e:90:3d:ae:
                    5d:d2:de:6f:3f:96:d5:1e:9c:c4:26:6a:f9:96:3b:
                    e4:6d:15:31:25:4a:95:f8:22:bf:6b:fb:ce:7e:10:
                    0a:fe:0c:ee:41:e6:1a:4b:f4:52:c4:65:45:f6:4a:
                    42:0a:d5:40:2f:bb:de:64:ec:ea:26:35:23:bd:87:
                    41:fd:27:c3:ef:83:b9:5c:b5:11:90:83:0b:87:d0:
                    2d:5d:a8:4c:22:b1:c4:b7:b3:06:c1:7c:16:66:01:
                    6f:73:33:44:73:e9:65:84:da:ab:8e:75:de:eb:48:
                    62:4d:26:53:31:87:a0:c8:85:f6:9a:18:e4:76:56:
                    ad:a3:46:2f:93:92:67:2e:37:d3:62:66:0e:79:17:
                    92:b6:2e:88:be:6f:64:5b:f9:4d:98:7a:2d:be:56:
                    7a:6a:44:18:96:1a:01:bb:2b:c4:85:e9:25:3d:58:
                    67:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6D:2B:E6:F2:75:1D:E6:E1:FF:48:F5:2A:C1:B4:4A:F9:7B:B4:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/735a1c6f-5e05-3f5e-b641-5bed8aa93848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.96.0-172.81.101.255
                  198.176.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:82:4d:1b:04:bd:25:91:1c:f4:4e:61:30:5c:a3:54:03:24:
         2b:19:5b:50:5f:b4:99:bd:6b:fd:a3:3e:a1:a8:65:d4:47:85:
         03:6a:95:1d:d1:8b:bc:66:23:5d:c3:c3:a6:2a:9e:19:5d:b9:
         8c:0d:1f:d0:0a:23:a9:98:29:c1:99:74:f9:06:75:65:91:78:
         f5:3f:fc:a9:3d:a2:a8:58:fe:de:ec:b1:3c:4d:1a:fe:17:3f:
         84:5f:a3:0b:a6:1b:6e:37:8e:cf:f4:77:f3:5a:00:d5:23:3d:
         60:9e:25:b0:95:44:9d:ad:b4:d9:66:4a:4b:44:f8:4d:a0:90:
         7c:c6:23:87:aa:65:8b:c4:35:96:f8:58:14:cc:5a:2a:3c:f3:
         ed:87:8d:05:d1:fc:5b:21:2f:14:66:a0:25:cf:b6:96:08:5b:
         cc:c3:ed:c7:db:5f:4a:84:23:fc:b5:60:83:17:c7:e8:68:10:
         6e:c4:59:1d:99:3d:37:35:68:58:fc:da:04:61:ec:91:74:b7:
         3f:6c:37:6e:4a:70:94:dc:b8:b5:91:42:ce:61:2f:5b:52:c1:
         8a:93:a2:28:ad:bf:8c:02:0d:00:5d:7a:af:95:4f:2f:4b:ae:
         b1:c0:4d:bb:36:f7:cb:1b:71:12:35:54:bd:ed:80:42:fe:30:
         5a:01:aa:b4
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE9JdSPjB5ZGDUjv5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm
MDYzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTk4MTVhMzktY2EyNy00ZDExLWIxNzQtM2I2MzdkNjA2Njc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFFMV4eSu4EJGVl+gc5rFcoZRc3x+dsZqyuQ
k0MQ8AB0s3a0INxuh/dJWuBWOoJSjgYcaboyLZ6vfK2wM7G3n1iIEBVGrsWmISf9
Be8hpISQoB3dRH6QPa5d0t5vP5bVHpzEJmr5ljvkbRUxJUqV+CK/a/vOfhAK/gzu
QeYaS/RSxGVF9kpCCtVAL7veZOzqJjUjvYdB/SfD74O5XLURkIMLh9AtXahMIrHE
t7MGwXwWZgFvczNEc+llhNqrjnXe60hiTSZTMYegyIX2mhjkdlato0Yvk5JnLjfT
YmYOeReSti6Ivm9kW/lNmHotvlZ6akQYlhoBuyvEheklPVhnQwIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFNRtK+bydR3m4f9I9SrBtEr5e7RoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi
MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvNzM1YTFjNmYtNWUwNS0z
ZjVlLWI2NDEtNWJlZDhhYTkzODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1
YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky
ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4
NzY5MmYwNjMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAWsUWAD
BAGsUWQDBALGsDwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAF4JNGwS9JZEc9E5hMFyjVAMkKxlbUF+0mb1r
/aM+oahl1EeFA2qVHdGLvGYjXcPDpiqeGV25jA0f0AojqZgpwZl0+QZ1ZZF49T/8
qT2iqFj+3uyxPE0a/hc/hF+jC6YbbjeOz/R381oA1SM9YJ4lsJVEna202WZKS0T4
TaCQfMYjh6pli8Q1lvhYFMxaKjzz7YeNBdH8WyEvFGagJc+2lghbzMPtx9tfSoQj
/LVggxfH6GgQbsRZHZk9NzVoWPzaBGHskXS3P2w3bkpwlNy4tZFCzmEvW1LBipOi
KK2/jAINAF16r5VPL0uuscBNuzb3yxtxEjVUve2AQv4wWgGqtA==
-----END CERTIFICATE-----
Generated at Fri Oct 23 20:39:35 2026 by rpki-client