Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/37f8d8e7-379c-3629-aa65-e663dcf60a90.roa
File:                     37f8d8e7-379c-3629-aa65-e663dcf60a90.roa (raw, json)
Hash identifier:          dcng0+sPEq3EwV0o6kWHYPpeCAy0D2VW1j/OsqAWsx0=
Subject key identifier:   05:8D:C7:59:46:F2:09:97:32:9F:9E:CE:FF:E1:9D:94:3D:76:53:01
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D4A8F84640EBC81398DDA2B00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/37f8d8e7-379c-3629-aa65-e663dcf60a90.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     29798
IP address blocks:        173.46.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:84:64:0e:bc:81:39:8d:da:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=a31e56cc-8025-46e1-aa22-396bb1958f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ae:e3:6a:fd:ac:6d:06:ac:dc:64:0b:bc:0c:
                    dc:87:e7:88:8e:f1:a4:3e:02:31:37:f0:58:c9:73:
                    a8:94:cb:98:09:8a:27:8e:71:5a:72:8a:e1:e3:13:
                    ed:0f:79:a4:ca:c2:96:3e:9e:9f:16:d8:f2:0f:94:
                    a8:cd:8a:6f:15:d8:6c:f6:db:7f:d3:bd:bb:f0:85:
                    f9:e0:0e:e4:21:25:ea:84:45:c6:ae:34:4e:c4:5b:
                    ef:6b:3a:9c:16:bd:47:b7:c2:31:1f:95:cd:b5:29:
                    29:d4:48:07:24:df:7c:b8:46:4a:71:ef:7c:0b:b2:
                    d8:e8:c8:01:ae:47:61:18:14:55:2b:45:00:a0:eb:
                    59:11:29:51:e0:83:b4:3c:e2:d0:f7:ae:c7:17:1d:
                    a6:4d:12:74:b8:b1:96:30:7f:5d:4c:6c:50:86:8d:
                    ac:02:b3:3c:68:b2:7b:4a:f7:8e:8b:97:38:f7:5c:
                    0d:d4:1b:8c:0d:01:79:0e:2f:d6:6d:b3:6e:c7:0d:
                    e0:66:44:81:78:0a:c1:87:1f:f4:27:21:2a:5c:09:
                    c3:f3:0d:f1:15:10:46:87:17:11:9d:9d:62:39:14:
                    dc:b5:ab:3b:37:20:c7:52:d0:88:f2:eb:ec:ac:2e:
                    ae:a4:d6:d8:93:22:93:81:dc:b3:de:2b:ec:37:83:
                    e1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8D:C7:59:46:F2:09:97:32:9F:9E:CE:FF:E1:9D:94:3D:76:53:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/37f8d8e7-379c-3629-aa65-e663dcf60a90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.46.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:6f:b6:2a:5f:f4:15:27:68:45:b2:30:a5:ba:3b:48:8d:6b:
         c7:c4:c8:24:9b:1d:e9:f0:1e:b3:25:d2:b9:43:0d:90:04:1a:
         15:76:fa:d6:63:54:83:dd:90:0f:c9:2e:14:34:64:04:ef:d7:
         df:21:b9:5d:81:19:cf:37:8f:e3:93:de:67:7d:74:18:e8:b5:
         85:38:29:5b:d3:d7:0d:ea:82:8a:a1:d1:c2:6b:a1:af:d1:e7:
         76:d5:88:d6:1b:6b:29:a0:9e:02:d3:51:c8:da:33:cb:47:48:
         fa:6d:ec:a6:cf:3f:d3:3f:98:92:9e:69:ae:f6:5f:fc:7c:48:
         45:03:2a:b1:83:ba:f5:ca:89:fa:49:8b:d8:11:a8:59:f0:78:
         95:bd:a3:f5:90:3c:29:9f:9e:6b:68:b0:4e:53:df:95:1d:97:
         b9:98:fd:6a:f4:07:15:aa:7a:f2:c5:c3:db:55:e9:af:bf:57:
         a9:25:eb:3a:16:52:e2:31:0c:9b:d3:50:ee:52:59:90:3d:a3:
         18:64:ac:06:9a:59:f1:4e:a3:da:ca:6a:df:14:7b:06:3f:1f:
         78:66:63:ec:bc:53:c0:df:02:7d:1c:d1:de:e5:5d:49:5e:f1:
         44:e6:41:11:36:11:39:d6:8f:7a:5a:52:57:a7:5d:5c:d3:03:
         35:7b:3e:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj4RkDryBOY3aKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk
YTMxZTU2Y2MtODAyNS00NmUxLWFhMjItMzk2YmIxOTU4ZjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq7jav2sbQas3GQLvAzch+eIjvGkPgIxN/BY
yXOolMuYCYonjnFacorh4xPtD3mkysKWPp6fFtjyD5SozYpvFdhs9tt/07278IX5
4A7kISXqhEXGrjROxFvvazqcFr1Ht8IxH5XNtSkp1EgHJN98uEZKce98C7LY6MgB
rkdhGBRVK0UAoOtZESlR4IO0POLQ967HFx2mTRJ0uLGWMH9dTGxQho2sArM8aLJ7
SveOi5c491wN1BuMDQF5Di/WbbNuxw3gZkSBeArBhx/0JyEqXAnD8w3xFRBGhxcR
nZ1iORTctas7NyDHUtCI8uvsrC6upNbYkyKTgdyz3ivsN4Ph5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAWNx1lG8gmXMp+ezv/hnZQ9dlMBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMzdmOGQ4ZTctMzc5Yy0z
NjI5LWFhNjUtZTY2M2RjZjYwYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArS5XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANlvtipf9BUnaEWyMKW6O0iNa8fEyCSbHenwHrMl0rlDDZAEGhV2+tZj
VIPdkA/JLhQ0ZATv198huV2BGc83j+OT3md9dBjotYU4KVvT1w3qgoqh0cJroa/R
53bViNYbaymgngLTUcjaM8tHSPpt7KbPP9M/mJKeaa72X/x8SEUDKrGDuvXKifpJ
i9gRqFnweJW9o/WQPCmfnmtosE5T35Udl7mY/Wr0BxWqevLFw9tV6a+/V6kl6zoW
UuIxDJvTUO5SWZA9oxhkrAaaWfFOo9rKat8UewY/H3hmY+y8U8DfAn0c0d7lXUle
8UTmQRE2ETnWj3paUlenXVzTAzV7PuM=
-----END CERTIFICATE-----
Generated at Mon Apr 13 08:08:26 2026 by rpki-client