Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0376bbf4-c384-32a2-b50b-361b5a25dad5.roa
File:                     0376bbf4-c384-32a2-b50b-361b5a25dad5.roa (raw, json)
Hash identifier:          VtMaZOWRBuPa3hVgboGViKOg1vYJ+qqFVD1BOJb8eqg=
Subject key identifier:   E4:B6:59:CD:58:06:6A:21:65:33:3F:08:FC:9E:C5:F7:96:3A:A6:28
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584D100D0215A142114863A93D60
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0376bbf4-c384-32a2-b50b-361b5a25dad5.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     15164
IP address blocks:        173.244.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0d:02:15:a1:42:11:48:63:a9:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=60e98d86-17db-4b53-8e01-e675afb49fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:e5:82:b3:0d:0b:fe:94:88:f4:60:1b:5f:
                    82:dc:57:24:6e:83:6a:a2:22:02:1a:fc:c4:21:69:
                    64:7f:53:5e:8d:7d:9f:5e:25:3d:85:5d:ca:77:dd:
                    9b:22:bb:c4:6a:8d:f1:df:1a:29:98:ee:80:41:0b:
                    b1:be:84:bc:d8:d5:97:44:48:32:ae:46:d3:91:21:
                    bd:31:e9:72:6d:4b:87:d3:1a:25:0c:a7:1b:19:f4:
                    34:af:eb:74:5f:00:28:0a:f6:a2:6f:0d:22:58:d1:
                    56:7c:e9:25:05:fb:34:ba:1f:4c:bb:d6:36:e1:e8:
                    35:96:aa:66:12:da:22:0e:60:ab:cc:6b:35:69:c7:
                    1d:c2:9a:3d:20:3a:f0:c6:1b:69:82:31:c0:bc:05:
                    98:d0:f7:5b:82:b7:e5:1d:61:82:4f:ff:1b:99:7d:
                    47:8f:0e:59:9a:63:39:1f:2d:c1:03:b1:f7:ef:d5:
                    aa:b2:a6:51:a6:64:59:31:3b:68:7b:98:55:9d:86:
                    3f:99:0c:92:9f:0a:a9:dd:c6:3d:83:8e:15:e5:79:
                    ed:d4:38:b6:2c:75:85:52:7d:1e:6b:00:8b:7e:ef:
                    a8:58:f5:c7:40:83:bf:1c:4f:b1:b0:02:5c:0f:6b:
                    54:41:86:1d:8b:b2:34:93:a3:f7:53:ec:4a:0a:31:
                    ac:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B6:59:CD:58:06:6A:21:65:33:3F:08:FC:9E:C5:F7:96:3A:A6:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/0376bbf4-c384-32a2-b50b-361b5a25dad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:1e:0b:55:51:fb:64:6e:d4:21:50:25:9e:10:8a:39:83:c4:
         76:13:ce:42:ef:10:97:d9:e9:b8:de:c1:c7:72:71:0d:d4:96:
         25:f8:05:5c:70:ed:74:69:8b:f9:af:62:af:27:34:9c:e0:e9:
         08:4a:a1:26:3b:bd:2a:16:7c:99:47:83:42:0e:bb:e3:b6:97:
         b7:07:3d:3a:6f:e4:3e:3c:89:89:c4:6d:c5:f8:d8:d1:c9:cb:
         de:2b:80:23:ee:d8:ae:fb:20:4d:fc:4c:cc:26:c4:7d:03:a9:
         60:72:f4:a7:5c:01:5b:99:5e:32:b0:ac:70:c0:e3:e5:67:50:
         fd:44:f5:f3:ec:1e:f1:29:33:0b:b0:08:83:9c:a1:1c:0e:72:
         6e:56:99:37:64:1d:fb:44:04:2c:bb:d7:52:b5:9b:e1:cf:b7:
         8b:39:64:96:89:58:2e:8d:35:2f:81:ac:f1:6b:7d:a7:39:a1:
         f1:9f:26:4c:00:8c:40:ab:5e:d3:0f:51:f5:ed:c9:b1:ae:2d:
         bb:91:21:93:46:d4:99:09:31:21:c1:9a:fd:fa:ad:3c:e1:fb:
         ec:b3:dd:62:46:1b:a9:3c:f5:f8:fc:2a:57:ae:e8:6a:76:95:
         ce:a8:ec:4c:56:6a:4c:37:2c:fa:bc:90:48:c8:54:67:00:93:
         71:4e:0d:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDQIVoUIRSGOpPWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk
NjBlOThkODYtMTdkYi00YjUzLThlMDEtZTY3NWFmYjQ5ZmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfDlgrMNC/6UiPRgG1+C3FckboNqoiICGvzE
IWlkf1NejX2fXiU9hV3Kd92bIrvEao3x3xopmO6AQQuxvoS82NWXREgyrkbTkSG9
MelybUuH0xolDKcbGfQ0r+t0XwAoCvaibw0iWNFWfOklBfs0uh9Mu9Y24eg1lqpm
EtoiDmCrzGs1accdwpo9IDrwxhtpgjHAvAWY0PdbgrflHWGCT/8bmX1Hjw5ZmmM5
Hy3BA7H379WqsqZRpmRZMTtoe5hVnYY/mQySnwqp3cY9g44V5Xnt1Di2LHWFUn0e
awCLfu+oWPXHQIO/HE+xsAJcD2tUQYYdi7I0k6P3U+xKCjGsPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOS2Wc1YBmohZTM/CPyexfeWOqYoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvMDM3NmJiZjQtYzM4NC0z
MmEyLWI1MGItMzYxYjVhMjVkYWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfSCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIoeC1VR+2Ru1CFQJZ4QijmDxHYTzkLvEJfZ6bjewcdycQ3UliX4BVxw
7XRpi/mvYq8nNJzg6QhKoSY7vSoWfJlHg0IOu+O2l7cHPTpv5D48iYnEbcX42NHJ
y94rgCPu2K77IE38TMwmxH0DqWBy9KdcAVuZXjKwrHDA4+VnUP1E9fPsHvEpMwuw
CIOcoRwOcm5WmTdkHftEBCy711K1m+HPt4s5ZJaJWC6NNS+BrPFrfac5ofGfJkwA
jECrXtMPUfXtybGuLbuRIZNG1JkJMSHBmv36rTzh++yz3WJGG6k89fj8Kleu6Gp2
lc6o7ExWakw3LPq8kEjIVGcAk3FODQQ=
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:35:10 2026 by rpki-client