Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/c46438d3-efc7-3a29-b024-983a8aaa71ec.roa
File:                     c46438d3-efc7-3a29-b024-983a8aaa71ec.roa (raw, json)
Hash identifier:          QZFXyTTOWUjq7bO0zHy6rmkW09WVxPKJkLGZtDFxKnE=
Subject key identifier:   60:49:BB:89:D0:8D:49:1A:87:FF:96:90:C9:1D:9E:3C:B2:1C:9A:D0
Certificate issuer:       /CN=01e76461-567a-47c1-a387-9b9f7415be5f
Certificate serial:       010D0C9F4328584F03A77C661C40F901ACE14600
Authority key identifier: DA:98:D7:DC:C3:99:BA:24:EE:F1:1D:1E:63:35:EE:23:6E:88:2F:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/c46438d3-efc7-3a29-b024-983a8aaa71ec.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     21833
IP address blocks:        170.232.224.0/21 maxlen: 21
                          170.232.231.0/24 maxlen: 24
                          170.232.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/01e76461-567a-47c1-a387-9b9f7415be5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/01e76461-567a-47c1-a387-9b9f7415be5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:7c:66:1c:40:f9:01:ac:e1:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01e76461-567a-47c1-a387-9b9f7415be5f
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=d7af5575-d81b-488e-b3f9-479d23464c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:ce:3b:25:13:f3:3e:31:bb:e4:f9:4d:11:
                    57:39:8d:71:e8:14:03:ea:02:8b:6d:da:e3:42:59:
                    c9:f6:55:1d:fc:2a:c4:28:1a:bf:a5:24:7f:f8:c9:
                    ce:0d:68:eb:1a:be:6b:a6:54:54:79:48:d3:e3:97:
                    7b:da:52:89:8e:1b:cd:2a:69:e3:ad:5c:6a:00:3b:
                    eb:04:4e:41:07:ff:fc:ef:4a:4c:57:34:7b:9c:01:
                    49:6b:37:02:c3:47:27:44:9c:c0:87:fa:3a:52:b4:
                    7d:81:58:88:e3:43:66:0a:3c:f1:23:64:14:01:cf:
                    77:7d:3f:fb:63:cc:26:36:f3:ea:07:92:d5:12:c9:
                    db:77:8f:92:3d:6d:4d:4e:fb:3b:df:33:17:04:06:
                    aa:b0:cc:f9:65:f1:bc:7b:0d:aa:69:bb:db:71:b7:
                    05:31:d7:f0:27:2f:62:17:21:ef:4d:cb:9b:7f:aa:
                    7e:b1:f8:45:c6:94:bd:71:12:6a:56:9b:af:19:e7:
                    6e:e4:05:c2:85:8b:c9:76:2b:25:63:1d:09:48:f1:
                    19:39:c2:80:8e:86:92:4d:40:a5:c2:42:e3:57:25:
                    76:9a:6d:e3:ac:63:1c:f0:3a:02:e6:76:68:92:2d:
                    8a:b1:2f:68:49:4b:10:2b:8d:d0:2f:22:f7:0a:28:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:49:BB:89:D0:8D:49:1A:87:FF:96:90:C9:1D:9E:3C:B2:1C:9A:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/c46438d3-efc7-3a29-b024-983a8aaa71ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f/01e76461-567a-47c1-a387-9b9f7415be5f.crl

            X509v3 Authority Key Identifier:
                keyid:DA:98:D7:DC:C3:99:BA:24:EE:F1:1D:1E:63:35:EE:23:6E:88:2F:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01e76461-567a-47c1-a387-9b9f7415be5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.232.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:31:db:80:93:0d:1a:c3:fd:a0:f6:6c:47:a8:85:0a:a9:e0:
         4b:e2:4e:e3:a6:d8:b7:29:54:3d:36:1e:4c:fe:fc:6d:79:32:
         7a:d6:6b:84:3e:c5:e9:f9:92:3c:62:59:80:03:1c:2a:ce:bc:
         aa:3a:7f:fd:93:12:b7:a4:6a:90:16:a3:c7:31:68:08:76:ca:
         bf:fc:68:46:1c:0d:59:42:4f:34:4e:3f:3c:ec:f3:c5:6c:f0:
         82:72:b1:27:a3:1e:5c:bb:07:84:e2:1f:be:9d:ff:28:01:d7:
         d7:af:c9:1b:2c:71:86:e3:d6:96:93:e6:49:c2:86:a5:ff:6f:
         a2:7a:18:ca:51:59:af:a6:7d:b6:9f:d2:19:a8:29:a2:90:06:
         fc:a3:63:af:ea:d3:70:e6:2b:05:2e:13:fc:da:e1:9c:fa:74:
         11:cc:c0:58:3b:14:ca:a0:98:92:42:f7:d1:f1:d0:8b:d3:d8:
         6c:67:d8:0e:37:92:56:62:fc:0c:42:87:65:51:3a:32:53:4d:
         b5:94:62:d9:47:f5:3e:64:d8:2f:15:18:d5:18:f3:f9:6b:1e:
         40:1f:90:1d:ba:93:2d:d3:93:94:d2:56:15:77:c1:05:43:43:
         db:4c:a3:ee:25:3c:ed:7f:5f:10:db:89:b8:19:fe:27:15:0e:
         d6:62:8c:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp3xmHED5AazhRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDFlNzY0NjEtNTY3YS00N2MxLWEzODctOWI5Zjc0MTVi
ZTVmMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
ZDdhZjU1NzUtZDgxYi00ODhlLWIzZjktNDc5ZDIzNDY0YzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP/OOyUT8z4xu+T5TRFXOY1x6BQD6gKLbdrj
QlnJ9lUd/CrEKBq/pSR/+MnODWjrGr5rplRUeUjT45d72lKJjhvNKmnjrVxqADvr
BE5BB//870pMVzR7nAFJazcCw0cnRJzAh/o6UrR9gViI40NmCjzxI2QUAc93fT/7
Y8wmNvPqB5LVEsnbd4+SPW1NTvs73zMXBAaqsMz5ZfG8ew2qabvbcbcFMdfwJy9i
FyHvTcubf6p+sfhFxpS9cRJqVpuvGedu5AXChYvJdislYx0JSPEZOcKAjoaSTUCl
wkLjVyV2mm3jrGMc8DoC5nZoki2KsS9oSUsQK43QLyL3CihIqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGBJu4nQjUkah/+WkMkdnjyyHJrQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMWU3
NjQ2MS01NjdhLTQ3YzEtYTM4Ny05YjlmNzQxNWJlNWYvYzQ2NDM4ZDMtZWZjNy0z
YTI5LWIwMjQtOTgzYThhYWE3MWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDFlNzY0NjEtNTY3YS00N2MxLWEz
ODctOWI5Zjc0MTViZTVmLzAxZTc2NDYxLTU2N2EtNDdjMS1hMzg3LTliOWY3NDE1
YmU1Zi5jcmwwHwYDVR0jBBgwFoAU2pjX3MOZuiTu8R0eYzXuI26IL6swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMWU3NjQ2MS01NjdhLTQ3YzEtYTM4Ny05Yjlm
NzQxNWJlNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqujgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFox24CTDRrD/aD2bEeohQqp4EviTuOm2LcpVD02Hkz+/G15MnrWa4Q+
xen5kjxiWYADHCrOvKo6f/2TErekapAWo8cxaAh2yr/8aEYcDVlCTzROPzzs88Vs
8IJysSejHly7B4TiH76d/ygB19evyRsscYbj1paT5knChqX/b6J6GMpRWa+mfbaf
0hmoKaKQBvyjY6/q03DmKwUuE/za4Zz6dBHMwFg7FMqgmJJC99Hx0IvT2Gxn2A43
klZi/AxCh2VROjJTTbWUYtlH9T5k2C8VGNUY8/lrHkAfkB26ky3Tk5TSVhV3wQVD
Q9tMo+4lPO1/XxDbibgZ/icVDtZijGo=
-----END CERTIFICATE-----
Generated at Thu Oct 8 21:02:54 2026 by rpki-client