Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47c53405-00ff-30ef-9681-07bd496100de.roa
File:                     47c53405-00ff-30ef-9681-07bd496100de.roa (raw, json)
Hash identifier:          Bd4efJDHKWhL3PVVuSITHFK16u8c+MNyfBSrI/1w+8E=
Subject key identifier:   66:A2:A1:36:CD:15:83:04:78:56:14:B3:1F:44:61:94:1E:99:EA:DD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EC0A752E81275A4A437AC3D00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47c53405-00ff-30ef-9681-07bd496100de.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        172.217.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:52:e8:12:75:a4:a4:37:ac:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=38a308bd-8fca-4890-b653-634d6589f3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0f:6c:cf:14:4a:f7:54:85:20:62:b6:7f:3c:
                    93:2a:77:8e:4e:f6:8c:71:52:33:f0:94:62:6e:bd:
                    66:a6:0f:a3:50:64:41:74:c1:af:db:7c:4b:ff:ec:
                    da:3c:be:47:ce:9c:df:53:89:9f:c4:a5:74:a0:7c:
                    47:a5:34:04:39:c8:ea:95:22:67:f1:9d:aa:a5:30:
                    80:ae:1d:83:32:2b:66:08:76:8b:6b:53:fc:0a:fb:
                    43:0a:68:be:cd:7f:2d:d7:fc:e8:d2:19:5c:3e:bd:
                    b4:fd:da:f7:2e:99:52:56:c3:dd:ec:6f:e0:0f:b3:
                    9c:9f:81:df:93:f9:f5:1d:99:68:38:c9:4d:c6:03:
                    aa:4d:ba:3e:48:a2:e4:95:fa:0f:ae:16:45:6a:28:
                    33:56:87:ba:43:36:d2:8f:3f:7a:c2:c2:00:72:b6:
                    87:84:a8:cd:34:0d:4b:cd:1f:a5:70:4e:6f:db:bc:
                    42:3a:d7:d3:c1:4b:5b:3b:85:8f:2e:46:24:cf:db:
                    65:99:1d:60:10:87:97:3e:87:2e:26:ac:3d:85:f1:
                    fb:31:51:37:ba:14:b8:24:ac:fd:04:77:72:4b:56:
                    df:6d:94:59:cd:de:a5:69:a7:c3:c8:de:22:51:5a:
                    c3:0d:bb:78:df:9a:b5:1a:b1:bc:83:04:13:f9:6b:
                    7c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A2:A1:36:CD:15:83:04:78:56:14:B3:1F:44:61:94:1E:99:EA:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/47c53405-00ff-30ef-9681-07bd496100de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:78:5f:09:d8:d3:68:69:7b:53:81:1b:53:28:69:9b:66:69:
         97:78:38:d9:2f:97:26:ba:b4:af:8f:16:6a:6a:ba:37:66:e1:
         7d:38:76:96:59:b2:4e:b1:de:54:c5:de:40:41:fb:bc:5c:95:
         31:e7:cb:bc:f6:bf:2b:3f:e0:36:c6:fc:64:90:43:3f:03:ab:
         df:05:8f:a8:87:20:71:e0:2d:75:8d:cf:36:9e:a6:23:80:56:
         23:ca:0b:79:4e:8c:50:f3:7d:45:97:18:17:97:17:13:f0:80:
         33:99:23:32:cf:9a:0a:c7:41:8d:f7:5d:b4:19:bd:43:37:91:
         71:1d:cf:9c:f3:57:aa:a0:7d:fa:3c:c6:2c:23:51:10:09:21:
         9e:95:ca:a5:df:3e:47:d3:d1:14:0e:ce:5d:db:7e:10:68:b1:
         1d:0f:cc:2d:79:95:b5:ea:3d:3d:18:56:16:2d:47:11:ac:91:
         7e:0b:c2:2c:ac:fa:d2:73:d3:bc:63:26:a4:47:e5:28:6d:05:
         33:c1:f1:03:f9:26:a2:2b:f8:0c:b9:9b:47:89:ec:21:db:db:
         be:78:51:2c:6f:06:0d:c9:84:4d:18:b4:e8:ef:5b:cd:2c:97:
         0f:1f:3d:67:55:1a:f7:2e:4e:60:0a:88:9c:f3:74:36:cb:a0:
         d9:5e:5e:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap1LoEnWkpDesPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
MzhhMzA4YmQtOGZjYS00ODkwLWI2NTMtNjM0ZDY1ODlmM2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw9szxRK91SFIGK2fzyTKneOTvaMcVIz8JRi
br1mpg+jUGRBdMGv23xL/+zaPL5HzpzfU4mfxKV0oHxHpTQEOcjqlSJn8Z2qpTCA
rh2DMitmCHaLa1P8CvtDCmi+zX8t1/zo0hlcPr20/dr3LplSVsPd7G/gD7Ocn4Hf
k/n1HZloOMlNxgOqTbo+SKLklfoPrhZFaigzVoe6QzbSjz96wsIAcraHhKjNNA1L
zR+lcE5v27xCOtfTwUtbO4WPLkYkz9tlmR1gEIeXPocuJqw9hfH7MVE3uhS4JKz9
BHdyS1bfbZRZzd6laafDyN4iUVrDDbt435q1GrG8gwQT+Wt8iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGaioTbNFYMEeFYUsx9EYZQemerdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDdjNTM0MDUtMDBmZi0z
MGVmLTk2ODEtMDdiZDQ5NjEwMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFx4XwnY02hpe1OBG1MoaZtmaZd4ONkvlya6tK+PFmpqujdm4X04dpZZ
sk6x3lTF3kBB+7xclTHny7z2vys/4DbG/GSQQz8Dq98Fj6iHIHHgLXWNzzaepiOA
ViPKC3lOjFDzfUWXGBeXFxPwgDOZIzLPmgrHQY33XbQZvUM3kXEdz5zzV6qgffo8
xiwjURAJIZ6VyqXfPkfT0RQOzl3bfhBosR0PzC15lbXqPT0YVhYtRxGskX4Lwiys
+tJz07xjJqRH5ShtBTPB8QP5JqIr+Ay5m0eJ7CHb2754USxvBg3JhE0YtOjvW80s
lw8fPWdVGvcuTmAKiJzzdDbLoNleXlc=
-----END CERTIFICATE-----
Generated at Fri Aug 7 21:46:39 2026 by rpki-client