Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/67818fc7-8ab6-3138-abb2-01b0da986df0.roa
File:                     67818fc7-8ab6-3138-abb2-01b0da986df0.roa (raw, json)
Hash identifier:          DZqdUxwEuMV22ZIxw2NXhboj2nzengC5V4yiVgqmBxw=
Subject key identifier:   05:BE:03:9C:1A:C8:BC:A6:BF:05:75:72:20:B4:19:E1:90:AF:C5:12
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584E376461467DDE07898FADB4B8
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/67818fc7-8ab6-3138-abb2-01b0da986df0.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     25655
IP address blocks:        173.241.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:61:46:7d:de:07:89:8f:ad:b4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=898937f3-79f2-4cc7-950c-dd766ac9fc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:b5:b9:e7:41:6f:04:94:c8:1d:91:39:fd:
                    34:01:14:70:65:59:d7:c7:31:73:2f:2e:6f:b4:48:
                    db:2b:e3:49:0d:ca:11:83:f4:6b:92:c8:65:8e:9e:
                    e6:ec:79:45:0c:11:12:11:7e:f9:a0:b1:34:04:8c:
                    6b:6f:96:ba:ba:cf:b0:33:a5:41:b7:42:b2:9a:6d:
                    cc:59:b5:73:a2:ac:61:47:5d:1e:7c:18:e2:84:3d:
                    13:fa:b3:7f:e8:63:69:49:48:82:6e:49:ef:fd:dc:
                    50:cf:bb:88:0b:7c:54:36:73:9d:41:23:51:53:57:
                    eb:93:a0:a9:0a:c8:c9:84:e3:3f:c0:1b:1c:f8:71:
                    15:cc:be:17:78:bb:f5:57:e0:20:bd:06:a6:b0:c9:
                    c8:9d:23:33:61:f4:26:22:36:21:d9:9a:ba:ce:40:
                    b4:42:00:f9:55:a7:cb:45:34:03:e5:f4:22:ee:18:
                    5e:21:09:e0:fa:8e:56:96:c0:da:7f:ef:ee:71:d2:
                    88:15:4a:af:69:40:25:0c:d9:d6:18:ee:bc:fd:ff:
                    de:a5:0d:e3:b3:b5:0b:c3:83:7d:da:7a:ba:10:fe:
                    63:93:54:c3:be:0e:43:21:46:a9:ad:72:27:2a:b9:
                    5c:51:82:75:cb:c4:ad:50:0d:d3:d4:33:a6:d0:96:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BE:03:9C:1A:C8:BC:A6:BF:05:75:72:20:B4:19:E1:90:AF:C5:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/67818fc7-8ab6-3138-abb2-01b0da986df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:55:7b:4f:a9:5b:c9:a7:69:49:16:7c:34:a4:b5:61:0f:a1:
         eb:dd:8b:da:be:c0:39:0d:20:c2:fc:2a:43:5a:b1:24:fc:ec:
         2c:dc:16:e0:1d:91:af:4b:9a:51:71:58:f6:6d:04:3b:d1:de:
         66:72:7c:d9:93:cb:f4:03:5e:11:c5:79:7c:00:45:88:83:eb:
         51:19:1c:55:38:98:92:65:76:6d:bc:fc:93:14:ff:4c:d3:da:
         a8:24:32:c4:a3:06:25:c3:95:7e:bf:2f:c2:8e:ad:d2:92:ec:
         91:42:9c:6c:88:ea:62:ac:0a:65:06:3d:1b:67:7b:a9:d5:2f:
         54:f0:c6:f4:80:63:b3:f2:47:d1:ed:a8:91:f1:dc:f1:b2:01:
         f2:25:1e:ba:fa:f2:ab:d4:c7:91:7b:fb:57:82:72:6d:c1:e5:
         e1:da:e1:94:42:04:b6:8a:38:d1:d1:03:9f:13:39:4a:8f:93:
         b8:35:25:db:55:af:3d:bc:5d:3a:ba:55:8f:79:ca:b8:96:00:
         8f:13:8a:10:f7:32:1a:51:9a:f7:bc:70:de:17:b6:62:47:e4:
         69:a4:33:87:5b:cd:d9:7f:5d:36:44:0b:05:e8:f4:47:70:04:
         b0:3d:08:02:f4:24:67:61:1f:8c:52:a1:35:03:c8:0c:6f:0f:
         da:4a:0b:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZGFGfd4HiY+ttLgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNhOTQ0Y2QtNTFhOC00ZDEwLWFlNTctNzI0ZGUyNmEx
ZDYyMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
ODk4OTM3ZjMtNzlmMi00Y2M3LTk1MGMtZGQ3NjZhYzlmYzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzG1uedBbwSUyB2ROf00ARRwZVnXxzFzLy5v
tEjbK+NJDcoRg/Rrkshljp7m7HlFDBESEX75oLE0BIxrb5a6us+wM6VBt0Kymm3M
WbVzoqxhR10efBjihD0T+rN/6GNpSUiCbknv/dxQz7uIC3xUNnOdQSNRU1frk6Cp
CsjJhOM/wBsc+HEVzL4XeLv1V+AgvQamsMnInSMzYfQmIjYh2Zq6zkC0QgD5VafL
RTQD5fQi7hheIQng+o5WlsDaf+/ucdKIFUqvaUAlDNnWGO68/f/epQ3js7ULw4N9
2nq6EP5jk1TDvg5DIUaprXInKrlcUYJ1y8StUA3T1DOm0JbnPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAW+A5wayLymvwV1ciC0GeGQr8USMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5
NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRkZTI2YTFkNjIvNjc4MThmYzctOGFiNi0z
MTM4LWFiYjItMDFiMGRhOTg2ZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzNhOTQ0Y2QtNTFhOC00ZDEwLWFl
NTctNzI0ZGUyNmExZDYyL2MzYTk0NGNkLTUxYTgtNGQxMC1hZTU3LTcyNGRlMjZh
MWQ2Mi5jcmwwHwYDVR0jBBgwFoAUqGCfuRfF6i7M/i9bQ1PRwl+tfbUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRk
ZTI2YTFkNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfGQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZVe0+pW8mnaUkWfDSktWEPoevdi9q+wDkNIML8KkNasST87CzcFuAd
ka9LmlFxWPZtBDvR3mZyfNmTy/QDXhHFeXwARYiD61EZHFU4mJJldm28/JMU/0zT
2qgkMsSjBiXDlX6/L8KOrdKS7JFCnGyI6mKsCmUGPRtne6nVL1TwxvSAY7PyR9Ht
qJHx3PGyAfIlHrr68qvUx5F7+1eCcm3B5eHa4ZRCBLaKONHRA58TOUqPk7g1JdtV
rz28XTq6VY95yriWAI8TihD3MhpRmve8cN4XtmJH5GmkM4dbzdl/XTZECwXo9Edw
BLA9CAL0JGdhH4xSoTUDyAxvD9pKC1A=
-----END CERTIFICATE-----
Generated at Fri Jun 26 05:50:39 2026 by rpki-client