Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/048b8fef-f334-35c6-982c-3f5c3d01c3aa.roa
File:                     048b8fef-f334-35c6-982c-3f5c3d01c3aa.roa (raw, json)
Hash identifier:          833vozbi3rw5b678wkolJ6bJ2QSvP0ZjWzmzKy9Glcg=
Subject key identifier:   1C:39:14:3A:86:F6:7C:EC:C5:9A:CB:58:DB:82:A1:23:F4:B1:B5:7F
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E7A64DA3E2240A85F5973CC20
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/048b8fef-f334-35c6-982c-3f5c3d01c3aa.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     62904
IP address blocks:        173.232.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:da:3e:22:40:a8:5f:59:73:cc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=e2e976bf-457c-407e-82c5-60547bbe406c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:44:a1:e0:30:5b:5d:a0:64:d4:bc:22:d4:b0:
                    f4:62:29:72:15:2c:d9:17:a2:18:e9:85:78:9a:91:
                    1d:8f:86:d6:e4:78:12:f8:31:ed:86:8b:4d:3e:69:
                    bb:13:23:f9:c1:05:c5:18:7c:8f:00:aa:61:8f:3c:
                    88:a1:a3:1e:59:0c:e7:ab:0e:51:9b:40:b7:cd:28:
                    ed:b7:33:61:55:27:90:aa:51:98:94:93:8b:70:62:
                    ac:ad:cd:28:93:ea:91:51:4d:ac:25:83:ac:48:a3:
                    95:c8:7b:65:27:e6:d7:5f:92:fc:1c:df:8e:3b:eb:
                    52:62:f9:37:9a:2f:b0:1f:9c:2f:54:5b:16:43:0b:
                    68:ed:81:af:06:f7:fe:26:c5:81:36:0b:58:26:3d:
                    fc:d1:56:ea:a9:3d:e2:b5:f4:c6:be:ff:df:d9:f2:
                    47:70:6c:7f:c2:81:95:be:8e:c8:b9:e5:6a:35:4a:
                    d8:ac:24:47:a9:24:6a:c6:3b:62:eb:6d:ec:90:32:
                    6e:97:97:3a:aa:7c:aa:18:f2:53:43:19:ec:d3:56:
                    89:05:65:f3:07:94:fe:1e:f1:1a:0b:e1:9e:a8:39:
                    9b:bd:2c:a7:7b:dd:18:5b:f9:02:5f:32:c9:95:ff:
                    da:c0:3f:e1:04:c7:a3:04:e1:b7:43:f4:8b:a6:37:
                    09:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:39:14:3A:86:F6:7C:EC:C5:9A:CB:58:DB:82:A1:23:F4:B1:B5:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/048b8fef-f334-35c6-982c-3f5c3d01c3aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:71:33:c7:55:5a:38:f3:69:47:94:eb:db:fd:48:9a:a7:44:
         19:87:9c:e7:3f:af:2e:2a:3d:66:19:fc:a5:35:2c:70:3f:47:
         91:19:7c:a0:02:c5:bf:62:55:ee:88:ec:5d:78:68:6c:67:98:
         e4:ee:ab:d0:4c:0e:9d:e0:c1:52:4b:68:d1:38:ad:fc:d1:70:
         65:b7:bf:9b:71:d5:29:9d:68:c5:f6:7f:54:04:9f:51:b7:4d:
         27:f3:84:bb:b6:41:12:17:20:a3:41:5d:a2:14:19:11:67:8d:
         f3:31:02:2b:08:de:0c:8a:af:71:a2:ff:96:4c:15:92:86:7f:
         8e:19:5f:4a:3e:0b:bb:d6:e8:cb:bd:df:40:04:37:d9:b3:22:
         65:e5:e1:f0:ff:1e:42:a2:f3:7d:18:fd:54:ad:46:e4:a2:b1:
         6c:d9:4f:5c:30:5b:44:96:54:82:30:9f:fd:5e:be:54:54:2f:
         cf:38:3d:36:c0:ec:73:9e:0c:50:fa:b4:1a:d7:86:24:99:bd:
         34:2c:08:7b:6a:ad:8f:74:ff:31:2d:4f:b5:af:ba:b2:27:55:
         f5:45:38:5e:3d:7f:ca:00:9e:73:fb:17:da:fb:ed:79:b4:23:
         a9:5f:6f:61:e4:14:42:63:3c:4a:90:68:ac:9b:ec:7c:ab:ae:
         50:28:a0:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNo+IkCoX1lzzCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
ZTJlOTc2YmYtNDU3Yy00MDdlLTgyYzUtNjA1NDdiYmU0MDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkSh4DBbXaBk1Lwi1LD0YilyFSzZF6IY6YV4
mpEdj4bW5HgS+DHthotNPmm7EyP5wQXFGHyPAKphjzyIoaMeWQznqw5Rm0C3zSjt
tzNhVSeQqlGYlJOLcGKsrc0ok+qRUU2sJYOsSKOVyHtlJ+bXX5L8HN+OO+tSYvk3
mi+wH5wvVFsWQwto7YGvBvf+JsWBNgtYJj380VbqqT3itfTGvv/f2fJHcGx/woGV
vo7IueVqNUrYrCRHqSRqxjti623skDJul5c6qnyqGPJTQxns01aJBWXzB5T+HvEa
C+GeqDmbvSyne90YW/kCXzLJlf/awD/hBMejBOG3Q/SLpjcJqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBw5FDqG9nzsxZrLWNuCoSP0sbV/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMDQ4YjhmZWYtZjMzNC0z
NWM2LTk4MmMtM2Y1YzNkMDFjM2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrehUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5xM8dVWjjzaUeU69v9SJqnRBmHnOc/ry4qPWYZ/KU1LHA/R5EZfKAC
xb9iVe6I7F14aGxnmOTuq9BMDp3gwVJLaNE4rfzRcGW3v5tx1SmdaMX2f1QEn1G3
TSfzhLu2QRIXIKNBXaIUGRFnjfMxAisI3gyKr3Gi/5ZMFZKGf44ZX0o+C7vW6Mu9
30AEN9mzImXl4fD/HkKi830Y/VStRuSisWzZT1wwW0SWVIIwn/1evlRUL884PTbA
7HOeDFD6tBrXhiSZvTQsCHtqrY90/zEtT7WvurInVfVFOF49f8oAnnP7F9r77Xm0
I6lfb2HkFEJjPEqQaKyb7HyrrlAooLY=
-----END CERTIFICATE-----
Generated at Tue Jul 14 15:27:42 2026 by rpki-client