Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c1583dc-b142-3bfb-b02e-c9f037c86159.roa
File:                     4c1583dc-b142-3bfb-b02e-c9f037c86159.roa (raw, json)
Hash identifier:          +4aiNjO+ZtGaAZYapDxfW6cNZtb7gJCsbBjq0wKjSrE=
Subject key identifier:   57:48:01:11:D9:13:DC:F4:43:DB:6B:7B:51:62:90:5D:FD:17:22:CF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EE7BCD3211BF0C0BDD3E89300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c1583dc-b142-3bfb-b02e-c9f037c86159.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        172.108.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:d3:21:1b:f0:c0:bd:d3:e8:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=81fe3304-64ce-4e72-b4a9-f3d4b163adf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:35:c4:2f:3f:0e:1d:18:d4:0d:7a:bb:c1:75:
                    98:dc:e2:01:39:64:1f:80:1d:b9:d4:93:60:a4:92:
                    f6:7d:59:57:4d:b4:b1:1f:4a:6d:d1:22:3b:9f:63:
                    5c:bb:ea:24:14:3f:c1:cd:20:e3:a4:7f:db:72:18:
                    22:3d:80:11:1e:0a:46:16:0f:1a:6f:0f:f5:22:dd:
                    47:3e:88:13:91:4e:84:5a:4f:3d:f4:24:9f:81:4a:
                    97:66:c1:2e:f3:d0:09:64:ab:73:06:4d:2d:37:07:
                    8a:b4:72:ec:69:3c:ce:85:cf:f8:b8:ab:20:08:6a:
                    6a:80:b6:9b:56:bf:f1:60:66:c1:38:63:2a:d2:ce:
                    59:2c:55:85:20:8f:78:f7:c3:7e:fc:57:ea:82:76:
                    68:e2:35:ab:25:4f:0c:f2:cb:9d:7b:88:43:97:30:
                    00:8f:33:83:cb:ea:7c:b3:59:33:d8:2e:a1:f7:ca:
                    38:39:03:a3:06:48:ad:e2:4f:ba:43:92:49:92:2c:
                    91:ac:b6:c6:47:75:ec:24:5b:0e:be:d3:8d:66:38:
                    f9:d5:eb:cb:0d:bb:19:8b:ba:03:7e:ce:1b:f4:27:
                    ff:42:d7:07:0d:72:94:1d:aa:49:c5:4b:90:04:9d:
                    19:67:2f:4c:10:af:a4:d1:e6:93:59:8f:3b:5a:31:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:48:01:11:D9:13:DC:F4:43:DB:6B:7B:51:62:90:5D:FD:17:22:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c1583dc-b142-3bfb-b02e-c9f037c86159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ab:f6:a5:ce:c0:ca:66:47:fc:e7:6c:a3:b8:55:37:45:79:
         20:ac:fb:7e:e2:d8:3b:48:94:42:d2:50:67:20:bb:7b:9a:da:
         31:67:2a:b0:d2:2e:6d:9d:94:9d:dc:91:77:4e:e8:76:eb:64:
         75:fc:7d:d1:ea:7c:a9:38:cf:05:05:7c:b6:44:1b:c2:95:9a:
         28:01:f2:4c:f8:02:d0:c6:4b:fe:8f:61:16:09:c6:c6:7c:a6:
         97:01:55:1c:93:7f:b6:bd:4d:63:23:7a:f9:3f:27:a4:34:6b:
         4f:18:84:dd:ef:1e:45:3b:e4:29:b4:b4:9d:61:db:b8:ec:0b:
         ae:0b:5a:e7:af:61:44:42:a4:a0:5b:99:ed:53:0d:4e:4c:45:
         b4:5a:e7:d7:21:2c:75:93:51:32:a6:50:4a:c2:cb:2e:5c:6f:
         55:44:52:66:34:52:ed:54:1b:6d:17:88:fd:92:6c:38:a6:32:
         e4:3c:19:cc:17:ff:91:5b:88:d5:24:4e:a8:74:45:ce:cc:fc:
         68:a4:57:6a:8b:bd:a5:60:d8:a9:7a:f5:6b:09:90:c5:94:17:
         df:ba:80:c7:74:94:47:ed:41:83:37:82:2a:6c:b5:69:0e:8f:
         0e:c8:c5:00:d6:1c:3e:76:b3:ed:67:0e:0a:21:c3:5e:7b:f4:
         ad:98:13:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvNMhG/DAvdPokwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk
ODFmZTMzMDQtNjRjZS00ZTcyLWI0YTktZjNkNGIxNjNhZGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzXELz8OHRjUDXq7wXWY3OIBOWQfgB251JNg
pJL2fVlXTbSxH0pt0SI7n2Ncu+okFD/BzSDjpH/bchgiPYARHgpGFg8abw/1It1H
PogTkU6EWk899CSfgUqXZsEu89AJZKtzBk0tNweKtHLsaTzOhc/4uKsgCGpqgLab
Vr/xYGbBOGMq0s5ZLFWFII9498N+/FfqgnZo4jWrJU8M8sude4hDlzAAjzODy+p8
s1kz2C6h98o4OQOjBkit4k+6Q5JJkiyRrLbGR3XsJFsOvtONZjj51evLDbsZi7oD
fs4b9Cf/QtcHDXKUHapJxUuQBJ0ZZy9MEK+k0eaTWY87WjFzXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFdIARHZE9z0Q9tre1FikF39FyLPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGMxNTgzZGMtYjE0Mi0z
YmZiLWIwMmUtYzlmMDM3Yzg2MTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGxsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACer9qXOwMpmR/znbKO4VTdFeSCs+37i2DtIlELSUGcgu3ua2jFnKrDS
Lm2dlJ3ckXdO6HbrZHX8fdHqfKk4zwUFfLZEG8KVmigB8kz4AtDGS/6PYRYJxsZ8
ppcBVRyTf7a9TWMjevk/J6Q0a08YhN3vHkU75Cm0tJ1h27jsC64LWuevYURCpKBb
me1TDU5MRbRa59chLHWTUTKmUErCyy5cb1VEUmY0Uu1UG20XiP2SbDimMuQ8GcwX
/5FbiNUkTqh0Rc7M/GikV2qLvaVg2Kl69WsJkMWUF9+6gMd0lEftQYM3gipstWkO
jw7IxQDWHD52s+1nDgohw1579K2YE7Y=
-----END CERTIFICATE-----
Generated at Thu Aug 27 23:51:55 2026 by rpki-client