Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/57d011b5-4a71-3008-a3d6-d0bad3958667.roa
File:                     57d011b5-4a71-3008-a3d6-d0bad3958667.roa (raw, json)
Hash identifier:          KKoiSNowHd6AoQE8+KHZ1yRpXrIwkSnZj2lXiAxV/jo=
Subject key identifier:   06:ED:A4:A3:31:89:AC:EF:90:DD:DA:76:96:50:9E:00:CF:05:C1:45
Certificate issuer:       /CN=32ed61a1-e1cd-40f4-ae04-a6a7a24248eb
Certificate serial:       010D0C9F4328584EF87CD204C8CE912D47BE2F00
Authority key identifier: EA:CE:FA:4E:91:37:CB:B0:FF:EE:79:E5:EA:80:CA:5C:8A:EC:EF:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/57d011b5-4a71-3008-a3d6-d0bad3958667.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     398229
IP address blocks:        170.39.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:d2:04:c8:ce:91:2d:47:be:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ed61a1-e1cd-40f4-ae04-a6a7a24248eb
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=a6f72a48-e9c5-4444-aaf2-8a3c4d44319a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:78:14:8b:9a:c5:21:79:c3:63:08:22:a5:
                    2d:3d:c5:7a:85:72:1d:22:58:d7:25:52:6a:2f:c2:
                    47:e7:9e:37:b0:7e:c8:9a:2f:96:c9:dc:a7:92:e7:
                    79:b7:75:c9:72:9a:92:89:a4:76:99:1e:d8:05:e9:
                    73:b3:f9:40:db:94:91:2c:08:53:97:89:90:6f:58:
                    a6:a9:84:81:6a:cf:d5:f2:82:2e:2d:e4:5b:19:00:
                    0e:40:78:d3:c4:5f:eb:31:42:c4:ea:c6:1d:22:7d:
                    e0:88:a6:6c:8f:65:b8:28:6b:89:5d:d2:af:a6:ce:
                    f6:79:14:f2:f7:48:86:72:03:1d:c7:54:5f:60:df:
                    0e:83:b4:f6:c7:70:58:b9:c7:4b:7a:cd:be:47:b0:
                    06:ca:08:22:05:4a:f5:66:ae:9c:62:d3:c1:32:e5:
                    44:e7:d5:3d:00:c4:67:e1:96:2d:e5:9f:13:b3:cf:
                    76:f1:19:99:26:91:3e:58:ae:9f:88:f3:74:d7:2a:
                    16:93:71:93:cd:07:e5:43:3d:65:0f:cd:88:f9:fe:
                    27:b5:ae:b3:86:02:44:85:18:31:32:ce:14:8d:30:
                    1e:c1:4f:82:bb:d5:58:70:67:b6:1b:0f:28:df:ea:
                    09:b7:0d:8a:ac:d5:d9:aa:20:4c:1e:b1:3d:3c:ce:
                    e1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:ED:A4:A3:31:89:AC:EF:90:DD:DA:76:96:50:9E:00:CF:05:C1:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/57d011b5-4a71-3008-a3d6-d0bad3958667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.crl

            X509v3 Authority Key Identifier:
                keyid:EA:CE:FA:4E:91:37:CB:B0:FF:EE:79:E5:EA:80:CA:5C:8A:EC:EF:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/32ed61a1-e1cd-40f4-ae04-a6a7a24248eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:94:e7:da:98:19:d7:d0:93:9f:96:90:63:71:94:41:33:3d:
         25:c4:8f:e1:69:6c:75:e9:bf:b3:d0:f1:39:e0:79:7f:0a:ee:
         e3:fd:dc:46:62:5e:43:1d:1d:35:7d:4b:b2:0f:96:6d:32:95:
         32:81:05:fc:2d:d8:4b:d9:2f:b4:3c:27:37:a4:15:7e:fe:e7:
         3b:9d:0f:e1:9d:cd:d6:57:da:d1:b2:fa:bd:1e:aa:37:9e:8d:
         64:64:5d:ec:54:61:43:43:e6:12:50:8e:a3:5d:3f:8b:46:1d:
         a6:fa:21:7b:52:25:ec:d0:69:0a:44:38:92:00:d6:c6:67:73:
         5e:a4:aa:aa:0b:27:32:8c:18:60:3b:3b:58:39:a6:6d:59:5f:
         e9:aa:2c:02:e5:3f:b9:3f:fb:c8:fa:7b:5b:08:36:44:28:2b:
         a5:06:28:bd:b9:10:82:e9:f3:79:da:ae:e3:2b:f9:43:4a:4e:
         87:57:a6:6a:a9:69:30:fe:11:4b:9b:51:68:d1:84:68:4f:b2:
         55:f2:bd:db:8b:96:d1:06:6f:00:e8:0a:68:88:55:38:61:b4:
         ad:a9:4b:ae:6f:6a:be:d4:f8:e6:5f:c7:75:d7:b4:6d:3f:9c:
         32:37:aa:a3:60:e1:50:25:65:90:d0:94:06:f5:90:3a:b7:aa:
         d4:cf:a5:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fNIEyM6RLUe+LwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJlZDYxYTEtZTFjZC00MGY0LWFlMDQtYTZhN2EyNDI0
OGViMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk
YTZmNzJhNDgtZTljNS00NDQ0LWFhZjItOGEzYzRkNDQzMTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwR4FIuaxSF5w2MIIqUtPcV6hXIdIljXJVJq
L8JH5543sH7Imi+Wydynkud5t3XJcpqSiaR2mR7YBelzs/lA25SRLAhTl4mQb1im
qYSBas/V8oIuLeRbGQAOQHjTxF/rMULE6sYdIn3giKZsj2W4KGuJXdKvps72eRTy
90iGcgMdx1RfYN8Og7T2x3BYucdLes2+R7AGyggiBUr1Zq6cYtPBMuVE59U9AMRn
4ZYt5Z8Ts8928RmZJpE+WK6fiPN01yoWk3GTzQflQz1lD82I+f4nta6zhgJEhRgx
Ms4UjTAewU+Cu9VYcGe2Gw8o3+oJtw2KrNXZqiBMHrE9PM7h0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbtpKMxiazvkN3adpZQngDPBcFFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMmVk
NjFhMS1lMWNkLTQwZjQtYWUwNC1hNmE3YTI0MjQ4ZWIvNTdkMDExYjUtNGE3MS0z
MDA4LWEzZDYtZDBiYWQzOTU4NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzJlZDYxYTEtZTFjZC00MGY0LWFl
MDQtYTZhN2EyNDI0OGViLzMyZWQ2MWExLWUxY2QtNDBmNC1hZTA0LWE2YTdhMjQy
NDhlYi5jcmwwHwYDVR0jBBgwFoAU6s76TpE3y7D/7nnl6oDKXIrs73UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMmVkNjFhMS1lMWNkLTQwZjQtYWUwNC1hNmE3
YTI0MjQ4ZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqif0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD+U59qYGdfQk5+WkGNxlEEzPSXEj+FpbHXpv7PQ8TngeX8K7uP93EZi
XkMdHTV9S7IPlm0ylTKBBfwt2EvZL7Q8JzekFX7+5zudD+GdzdZX2tGy+r0eqjee
jWRkXexUYUND5hJQjqNdP4tGHab6IXtSJezQaQpEOJIA1sZnc16kqqoLJzKMGGA7
O1g5pm1ZX+mqLALlP7k/+8j6e1sINkQoK6UGKL25EILp83naruMr+UNKTodXpmqp
aTD+EUubUWjRhGhPslXyvduLltEGbwDoCmiIVThhtK2pS65var7U+OZfx3XXtG0/
nDI3qqNg4VAlZZDQlAb1kDq3qtTPpVE=
-----END CERTIFICATE-----
Generated at Sat Sep 19 16:09:28 2026 by rpki-client