Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/693ebec5-628f-3c4b-9940-f8ff73ad1f43.roa
File:                     693ebec5-628f-3c4b-9940-f8ff73ad1f43.roa (raw, json)
Hash identifier:          duQ/yxco2X1N7Ah0jQilkPtP8Fr5V2B4V4DfqJotrxU=
Subject key identifier:   3A:3E:53:B7:E7:BD:7E:AA:7F:96:B9:B8:6E:92:00:36:16:8B:42:B3
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584ED9C74EFB72ED18639C737480
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/693ebec5-628f-3c4b-9940-f8ff73ad1f43.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     25655
IP address blocks:        173.241.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:4e:fb:72:ed:18:63:9c:73:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=2483a91b-4da3-49c1-9604-732d1491b86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dd:c2:d9:51:29:a2:91:1d:2c:72:75:17:c1:
                    11:eb:91:5d:1c:81:b5:56:97:13:df:56:b5:88:2b:
                    98:ed:ab:31:aa:b2:3e:cd:bd:71:c7:b4:36:07:64:
                    b8:43:a0:00:ee:e2:76:8e:87:8b:e1:ce:2f:ab:cc:
                    c8:7d:ad:71:3a:d4:01:a8:77:24:57:69:11:73:0b:
                    48:60:3a:67:4a:9d:11:28:13:52:ce:fc:ea:51:80:
                    16:63:a9:b4:a1:4a:fc:dd:9d:92:bf:ef:58:5f:1d:
                    b8:13:81:07:33:c7:bb:60:0c:f8:54:88:d8:83:04:
                    d7:ee:28:37:b4:66:19:c9:cf:9e:0e:ae:69:8a:93:
                    58:9c:4c:09:a7:14:4c:85:17:42:73:5d:35:13:00:
                    41:c1:1c:9d:27:fd:e8:bf:14:4e:0c:84:99:1a:36:
                    65:a9:35:79:3f:d2:57:99:e8:e4:d3:cd:c2:2b:f3:
                    99:6d:f2:e1:59:a7:17:e1:80:07:e6:f2:64:9b:89:
                    00:67:22:63:89:a2:ef:2c:95:3c:be:e1:4b:5e:8a:
                    12:7a:8e:b6:6b:31:fa:57:92:c4:64:e4:32:d4:e0:
                    4c:62:1d:39:ea:93:f0:96:0c:2f:56:19:97:2e:90:
                    77:e8:1e:f6:2e:6d:f1:7e:ba:42:91:02:c0:25:d7:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3E:53:B7:E7:BD:7E:AA:7F:96:B9:B8:6E:92:00:36:16:8B:42:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/693ebec5-628f-3c4b-9940-f8ff73ad1f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:07:f0:42:94:0d:5d:b2:aa:e3:aa:ea:d4:d8:52:d2:26:8d:
         16:ea:28:0f:78:f0:a0:5d:cb:93:50:65:28:8e:af:04:7b:e7:
         38:a5:f3:97:70:60:d5:4b:6d:4a:ac:b2:85:e2:10:8a:4a:be:
         ee:80:58:31:58:7f:dc:41:b0:d3:ca:34:16:5e:91:22:2e:57:
         98:f2:0b:6b:41:b0:e3:7c:47:b0:39:fe:36:ca:9b:b6:eb:d5:
         d6:5a:7c:e0:81:c4:a1:d7:63:3b:4d:95:1e:14:f0:aa:7c:b4:
         99:83:d7:5b:93:23:25:bc:b5:de:96:34:56:62:8a:7b:92:be:
         41:ca:b9:f4:0b:1d:21:4e:ab:3a:b4:b3:56:66:bc:39:b6:6f:
         c7:1e:eb:fb:cd:a7:48:b5:a3:9d:ab:6e:9e:5f:01:e8:38:57:
         47:67:e5:6b:5c:31:25:ad:51:21:27:3c:eb:ac:bf:c7:95:4b:
         36:c1:c1:c3:0a:89:83:76:79:1a:c4:a7:0f:d7:55:33:c0:09:
         3c:dc:53:8b:7b:8b:0c:44:df:7b:ae:26:9b:1a:00:a1:bd:ab:
         e8:d4:d7:d5:a1:77:6b:cb:46:80:be:49:b1:ec:8f:73:f6:22:
         21:df:d8:55:b6:09:2d:09:d0:54:cc:a3:55:18:41:04:1f:47:
         03:27:d1:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx077cu0YY5xzdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNhOTQ0Y2QtNTFhOC00ZDEwLWFlNTctNzI0ZGUyNmEx
ZDYyMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
MjQ4M2E5MWItNGRhMy00OWMxLTk2MDQtNzMyZDE0OTFiODZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt3C2VEpopEdLHJ1F8ER65FdHIG1VpcT31a1
iCuY7asxqrI+zb1xx7Q2B2S4Q6AA7uJ2joeL4c4vq8zIfa1xOtQBqHckV2kRcwtI
YDpnSp0RKBNSzvzqUYAWY6m0oUr83Z2Sv+9YXx24E4EHM8e7YAz4VIjYgwTX7ig3
tGYZyc+eDq5pipNYnEwJpxRMhRdCc101EwBBwRydJ/3ovxRODISZGjZlqTV5P9JX
mejk083CK/OZbfLhWacX4YAH5vJkm4kAZyJjiaLvLJU8vuFLXooSeo62azH6V5LE
ZOQy1OBMYh056pPwlgwvVhmXLpB36B72Lm3xfrpCkQLAJdeVdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDo+U7fnvX6qf5a5uG6SADYWi0KzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5
NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRkZTI2YTFkNjIvNjkzZWJlYzUtNjI4Zi0z
YzRiLTk5NDAtZjhmZjczYWQxZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzNhOTQ0Y2QtNTFhOC00ZDEwLWFl
NTctNzI0ZGUyNmExZDYyL2MzYTk0NGNkLTUxYTgtNGQxMC1hZTU3LTcyNGRlMjZh
MWQ2Mi5jcmwwHwYDVR0jBBgwFoAUqGCfuRfF6i7M/i9bQ1PRwl+tfbUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRk
ZTI2YTFkNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfGcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJUH8EKUDV2yquOq6tTYUtImjRbqKA948KBdy5NQZSiOrwR75zil85dw
YNVLbUqssoXiEIpKvu6AWDFYf9xBsNPKNBZekSIuV5jyC2tBsON8R7A5/jbKm7br
1dZafOCBxKHXYztNlR4U8Kp8tJmD11uTIyW8td6WNFZiinuSvkHKufQLHSFOqzq0
s1ZmvDm2b8ce6/vNp0i1o52rbp5fAeg4V0dn5WtcMSWtUSEnPOusv8eVSzbBwcMK
iYN2eRrEpw/XVTPACTzcU4t7iwxE33uuJpsaAKG9q+jU19Whd2vLRoC+SbHsj3P2
IiHf2FW2CS0J0FTMo1UYQQQfRwMn0aY=
-----END CERTIFICATE-----
Generated at Wed Aug 26 09:53:01 2026 by rpki-client