Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/54e2e85c-b1d4-30d5-8c2f-3d133568489f.roa
File:                     54e2e85c-b1d4-30d5-8c2f-3d133568489f.roa (raw, json)
Hash identifier:          qOilsX5txq4kJ4KKh8e6Ycv/2WbBKTjKZLzV9tMdlKw=
Subject key identifier:   AA:B7:06:AA:FF:11:E1:D7:D9:74:EE:06:59:70:7B:59:21:7C:B8:9F
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584E2AD460D9555E2423F806AD40
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/54e2e85c-b1d4-30d5-8c2f-3d133568489f.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     2734
IP address blocks:        173.45.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:60:d9:55:5e:24:23:f8:06:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=7f722d55-7adf-433a-9593-dbdd8b0b4f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6d:e6:3a:e8:18:cc:41:25:6b:77:ec:86:05:
                    b0:3d:8c:77:f3:d4:78:d3:df:2d:f2:08:d0:88:31:
                    1c:a6:23:81:21:63:ac:33:9d:3a:d7:a0:22:b0:c8:
                    80:ba:86:97:18:95:71:fb:8c:ba:6f:77:82:8c:dc:
                    4e:4d:a2:02:83:ba:98:e2:06:26:f5:78:15:71:99:
                    89:94:f2:49:dc:3b:8e:71:dd:7f:fa:80:a3:6d:28:
                    00:d5:8a:30:e3:73:c6:2e:50:66:6b:43:2e:d8:b1:
                    7f:b8:1f:a8:30:40:bb:48:c7:7f:19:f1:c7:37:23:
                    92:9a:27:f5:0d:a5:ff:ff:ae:40:39:6c:33:02:7e:
                    3a:38:9d:67:df:e9:9c:15:8e:f2:f9:d1:60:79:f6:
                    76:12:d2:b7:b9:c4:ec:54:1e:73:ed:95:e2:c5:4a:
                    42:d2:a3:d3:49:57:b5:0c:10:e0:a4:f0:31:2a:0d:
                    25:e7:14:33:70:d1:e9:db:08:94:c6:5b:0c:7a:d4:
                    6a:07:25:37:c1:fa:ce:32:64:89:58:2c:ba:84:b0:
                    39:9b:ff:fe:a6:f4:ff:b3:cf:3b:33:64:3f:52:b5:
                    8f:24:08:da:ba:20:c6:a7:92:60:b8:65:0d:b2:41:
                    32:32:cb:ce:0d:42:7b:ca:6c:a2:67:a7:3f:bc:22:
                    6c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B7:06:AA:FF:11:E1:D7:D9:74:EE:06:59:70:7B:59:21:7C:B8:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/54e2e85c-b1d4-30d5-8c2f-3d133568489f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.45.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3b:4e:9a:18:bf:eb:c8:a9:62:ad:db:fe:7c:7e:6a:2a:50:
         cf:e7:d4:dc:36:19:82:03:02:56:d6:1a:e8:df:07:70:b4:76:
         c7:d4:d1:13:3b:0f:a6:2a:eb:e8:0d:0a:e4:0c:df:99:7c:22:
         17:ea:4f:a6:04:32:57:10:b1:28:83:65:8a:c3:5e:ee:25:c0:
         31:8d:da:eb:61:a3:23:ae:07:5c:b2:68:ef:c8:9e:2b:cc:35:
         75:d1:a4:0b:d0:b3:de:2d:11:49:45:83:e0:16:e1:f1:36:13:
         b7:cf:04:bf:c0:7c:ed:fb:93:da:3a:9e:83:b6:65:c8:ce:ae:
         89:55:d6:f9:e0:a7:6b:95:cf:aa:8d:75:d3:17:47:9a:80:39:
         ca:b9:ed:c3:78:c9:76:af:06:17:18:e6:ee:88:6f:60:d3:74:
         6b:53:32:a0:9a:5f:8d:9d:7e:4f:bd:07:15:fd:90:c1:fd:65:
         2d:9b:2f:12:9e:54:f7:95:b2:8b:3f:92:d1:8b:ab:bc:44:20:
         93:ad:0c:2d:a8:c0:7d:5a:de:07:de:99:4d:75:1d:78:1a:aa:
         16:58:19:6b:2e:9f:06:3a:bd:24:39:f9:62:3f:7b:e2:fe:1e:
         70:1d:82:ab:81:e6:f6:16:fc:86:37:3b:56:72:21:ce:d7:ec:
         13:94:b5:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1GDZVV4kI/gGrUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk
N2Y3MjJkNTUtN2FkZi00MzNhLTk1OTMtZGJkZDhiMGI0ZjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm3mOugYzEEla3fshgWwPYx389R4098t8gjQ
iDEcpiOBIWOsM50616AisMiAuoaXGJVx+4y6b3eCjNxOTaICg7qY4gYm9XgVcZmJ
lPJJ3DuOcd1/+oCjbSgA1Yow43PGLlBma0Mu2LF/uB+oMEC7SMd/GfHHNyOSmif1
DaX//65AOWwzAn46OJ1n3+mcFY7y+dFgefZ2EtK3ucTsVB5z7ZXixUpC0qPTSVe1
DBDgpPAxKg0l5xQzcNHp2wiUxlsMetRqByU3wfrOMmSJWCy6hLA5m//+pvT/s887
M2Q/UrWPJAjauiDGp5JguGUNskEyMsvODUJ7ymyiZ6c/vCJsFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKq3Bqr/EeHX2XTuBllwe1khfLifMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvNTRlMmU4NWMtYjFkNC0z
MGQ1LThjMmYtM2QxMzM1Njg0ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArS2vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFg7TpoYv+vIqWKt2/58fmoqUM/n1Nw2GYIDAlbWGujfB3C0dsfU0RM7
D6Yq6+gNCuQM35l8IhfqT6YEMlcQsSiDZYrDXu4lwDGN2uthoyOuB1yyaO/InivM
NXXRpAvQs94tEUlFg+AW4fE2E7fPBL/AfO37k9o6noO2ZcjOrolV1vngp2uVz6qN
ddMXR5qAOcq57cN4yXavBhcY5u6Ib2DTdGtTMqCaX42dfk+9BxX9kMH9ZS2bLxKe
VPeVsos/ktGLq7xEIJOtDC2owH1a3gfemU11HXgaqhZYGWsunwY6vSQ5+WI/e+L+
HnAdgquB5vYW/IY3O1ZyIc7X7BOUtZc=
-----END CERTIFICATE-----
Generated at Tue Jun 16 11:31:01 2026 by rpki-client