Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/e03dafb8-98f5-3740-8e33-54b03651c07a.roa
File:                     e03dafb8-98f5-3740-8e33-54b03651c07a.roa (raw, json)
Hash identifier:          bfaPrUjZIsGWJXdFG+2mZAIRY1wWDIWGFn5iNFMeqrE=
Subject key identifier:   71:1D:D9:B8:0C:C3:F0:D1:40:34:52:A3:17:E8:32:66:B2:A4:D8:56
Certificate issuer:       /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial:       010D0C9F4328584F49753BA5E7500D4B5C87E890
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/e03dafb8-98f5-3740-8e33-54b03651c07a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        173.195.225.0/24 maxlen: 24
                          173.195.226.0/24 maxlen: 24
                          173.195.227.0/24 maxlen: 24
                          173.195.228.0/24 maxlen: 24
                          173.195.229.0/24 maxlen: 24
                          173.195.230.0/24 maxlen: 24
                          173.195.231.0/24 maxlen: 24
                          173.195.232.0/24 maxlen: 24
                          173.195.233.0/24 maxlen: 24
                          173.195.234.0/24 maxlen: 24
                          173.195.235.0/24 maxlen: 24
                          173.195.236.0/24 maxlen: 24
                          173.195.237.0/24 maxlen: 24
                          173.195.238.0/24 maxlen: 24
                          173.195.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:3b:a5:e7:50:0d:4b:5c:87:e8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d350ad2b-703f-45d5-a43d-cc67056d0da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f1:67:c3:d7:9b:b1:8f:ed:14:bb:22:7e:e7:
                    ee:50:13:b1:58:82:39:7f:df:3e:c0:17:92:ab:61:
                    a7:39:87:5b:a6:ea:86:ed:eb:e4:20:26:91:c2:77:
                    64:28:1a:ca:89:8e:ad:e2:1c:f5:cf:cf:09:16:5f:
                    b3:15:b9:63:26:3c:41:e2:dd:24:1f:02:70:7f:2c:
                    20:48:04:80:68:97:92:d7:98:73:f4:6f:b5:70:26:
                    07:21:47:8f:7c:ae:f3:21:bf:73:15:c2:0f:8b:a1:
                    07:37:58:bb:8e:36:e2:2e:5f:97:6c:8c:97:1b:c6:
                    c7:62:df:aa:7c:30:96:57:33:9c:42:d5:7e:7f:3a:
                    ca:2b:f5:9b:a5:ab:ca:2a:b4:3c:b5:42:d0:25:22:
                    73:0b:85:c8:a9:d3:e5:ed:1e:6e:b2:cd:69:29:4e:
                    00:93:88:d3:73:d7:4a:de:0e:8c:c8:ae:3a:d2:e3:
                    76:46:68:09:5f:4a:b0:9b:b6:38:29:61:46:65:7c:
                    d6:3e:c9:45:fc:9f:b1:26:de:53:a6:57:0e:09:8e:
                    95:d7:c8:89:f2:bb:c6:42:1a:77:4c:80:3f:33:dd:
                    5c:1c:09:aa:5e:a1:9c:e4:f8:f7:42:cc:0e:ba:c3:
                    d0:f9:7b:b3:eb:bd:9d:ae:f5:88:a7:b5:49:65:f9:
                    7c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1D:D9:B8:0C:C3:F0:D1:40:34:52:A3:17:E8:32:66:B2:A4:D8:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/e03dafb8-98f5-3740-8e33-54b03651c07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl

            X509v3 Authority Key Identifier:
                keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.225.0-173.195.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:87:70:98:10:a4:62:50:77:84:26:21:fc:ae:e3:a2:86:d9:
         7e:1e:05:35:6a:3f:f5:83:8b:c9:97:f5:c3:54:fe:bd:f4:2a:
         38:95:4c:2d:24:23:16:14:46:bf:df:ac:89:3c:b3:e3:42:07:
         b7:65:2b:b8:5c:69:52:8f:c8:a0:7d:12:78:76:f4:0f:bc:83:
         27:92:68:0a:c0:33:98:58:10:05:2e:a1:2f:6d:27:dd:bf:d9:
         e4:e1:25:b7:92:15:a5:db:a4:fc:50:8b:07:5f:8d:ab:f9:f3:
         6f:ee:fa:2a:97:da:f8:0c:00:52:a5:82:d9:87:26:cb:e0:d5:
         a2:6a:54:d9:b2:83:76:c2:f6:19:c2:af:3c:23:bc:cc:f7:43:
         4b:e0:af:2a:34:83:ae:19:30:4f:8a:e5:d0:c2:3d:ce:3b:79:
         c6:fe:31:59:29:f4:2c:d9:c1:4b:b4:a7:60:22:02:ee:e3:6b:
         5c:22:dd:83:49:71:8f:45:7b:fd:9b:bf:96:c7:03:9b:97:50:
         2b:5f:13:3c:9e:08:ee:ae:11:e4:b2:76:0e:a8:67:b1:a7:19:
         dc:0b:4e:2d:a9:c5:4d:60:2b:9e:c6:3f:94:6f:1b:8d:b9:89:
         a3:1f:45:a4:04:84:6c:b6:d3:27:a2:11:0f:47:e9:6e:88:9e:
         bc:13:07:f0
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9JdTul51ANS1yH6JAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDg2MmI1YzYtNDBhMS00MjQ5LWEyNmUtMTE5MzhhNzAy
OTg1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDM1MGFkMmItNzAzZi00NWQ1LWE0M2QtY2M2NzA1NmQwZGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvFnw9ebsY/tFLsifufuUBOxWII5f98+wBeS
q2GnOYdbpuqG7evkICaRwndkKBrKiY6t4hz1z88JFl+zFbljJjxB4t0kHwJwfywg
SASAaJeS15hz9G+1cCYHIUePfK7zIb9zFcIPi6EHN1i7jjbiLl+XbIyXG8bHYt+q
fDCWVzOcQtV+fzrKK/WbpavKKrQ8tULQJSJzC4XIqdPl7R5uss1pKU4Ak4jTc9dK
3g6MyK460uN2RmgJX0qwm7Y4KWFGZXzWPslF/J+xJt5TplcOCY6V18iJ8rvGQhp3
TIA/M91cHAmqXqGc5Pj3QswOusPQ+Xuz672drvWIp7VJZfl8UQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHEd2bgMw/DRQDRSoxfoMmaypNhWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kODYy
YjVjNi00MGExLTQyNDktYTI2ZS0xMTkzOGE3MDI5ODUvZTAzZGFmYjgtOThmNS0z
NzQwLThlMzMtNTRiMDM2NTFjMDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDg2MmI1YzYtNDBhMS00MjQ5LWEy
NmUtMTE5MzhhNzAyOTg1L2Q4NjJiNWM2LTQwYTEtNDI0OS1hMjZlLTExOTM4YTcw
Mjk4NS5jcmwwHwYDVR0jBBgwFoAUgfwOi4Mvut7//KOFwjE85iiqGdAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kODYyYjVjNi00MGExLTQyNDktYTI2ZS0xMTkz
OGE3MDI5ODUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACtw+ED
BAStw+AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAnIdwmBCkYlB3hCYh/K7joobZfh4FNWo/9YOLyZf1w1T+
vfQqOJVMLSQjFhRGv9+siTyz40IHt2UruFxpUo/IoH0SeHb0D7yDJ5JoCsAzmFgQ
BS6hL20n3b/Z5OElt5IVpduk/FCLB1+Nq/nzb+76Kpfa+AwAUqWC2Ycmy+DVompU
2bKDdsL2GcKvPCO8zPdDS+CvKjSDrhkwT4rl0MI9zjt5xv4xWSn0LNnBS7SnYCIC
7uNrXCLdg0lxj0V7/Zu/lscDm5dQK18TPJ4I7q4R5LJ2DqhnsacZ3AtOLanFTWAr
nsY/lG8bjbmJox9FpASEbLbTJ6IRD0fpboievBMH8A==
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:31:20 2026 by rpki-client