Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/32976551-f95e-35a6-96f0-7ed38529abde.roa
File:                     32976551-f95e-35a6-96f0-7ed38529abde.roa (raw, json)
Hash identifier:          MKGTDMvVQhy3Ly5YnJFOlvU5loELZ9G5T7yVDEL7+8M=
Subject key identifier:   AD:9F:E8:84:5C:B1:3C:10:AC:C9:DE:80:16:03:1E:9A:9F:CA:CF:3C
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584D0BC804A379F385855599BD80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/32976551-f95e-35a6-96f0-7ed38529abde.roa
Signing time:             Tue 03 Mar 2026 13:18:29 +0000
ROA not before:           Tue 03 Mar 2026 13:18:29 +0000
ROA not after:            Mon 01 Jun 2026 12:18:29 +0000
asID:                     16509
IP address blocks:        67.217.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:c8:04:a3:79:f3:85:85:55:99:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Mar  3 13:18:29 2026 GMT
            Not After : Jun  1 12:18:29 2026 GMT
        Subject: CN=b8b62aef-4217-4404-ac6b-87617cd39f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:bf:a0:e5:bb:32:61:f6:fc:3b:9a:e0:4c:
                    ec:a5:70:f6:78:18:d4:65:65:8e:87:7c:ea:4e:9b:
                    1e:91:f5:b2:52:93:53:8c:d6:4d:9b:06:d3:1f:69:
                    f2:e4:b1:6f:b9:75:94:d5:7a:09:0c:cb:9a:18:26:
                    df:81:d8:b4:96:36:47:02:20:3e:5a:39:b7:dd:9a:
                    67:eb:24:84:d6:88:ca:de:02:9e:a7:0e:91:d8:5b:
                    89:a2:a1:bf:be:17:3a:d8:4a:38:67:5e:c1:2c:9c:
                    5b:40:63:30:19:03:20:3d:cc:48:4e:3c:30:11:1c:
                    69:91:f3:71:91:f9:ae:b6:36:b7:3f:bf:ac:59:ea:
                    88:1a:cd:44:fc:47:43:df:45:69:59:1b:b9:ed:b1:
                    94:3f:d6:82:af:ba:2e:d5:47:61:72:94:2b:ac:1b:
                    e8:5f:fb:71:7b:b7:74:11:1c:c9:44:ab:23:cb:d0:
                    1a:3e:d8:cc:ab:bb:3b:71:6a:0d:e2:79:16:35:a4:
                    64:c6:42:17:54:75:32:1a:d0:90:27:46:4c:7b:ee:
                    24:56:9f:51:d1:43:c4:40:0b:88:e1:1d:81:d0:8b:
                    f5:f7:d8:5e:51:93:c8:3a:64:33:2d:91:98:f2:67:
                    25:f9:40:83:51:1c:09:e9:17:34:8d:31:15:7e:6b:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9F:E8:84:5C:B1:3C:10:AC:C9:DE:80:16:03:1E:9A:9F:CA:CF:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/32976551-f95e-35a6-96f0-7ed38529abde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:26:fa:c4:57:bf:65:fb:9f:d5:a3:c0:28:38:c3:00:35:33:
         ee:e7:a6:5a:2a:85:cd:55:be:56:da:81:83:13:88:3d:b8:d1:
         79:2a:80:ed:4d:6e:76:b9:20:92:9d:b5:19:d7:b8:90:db:c5:
         c0:2b:8a:6f:88:b3:bd:02:8d:d5:d2:f4:c7:49:3c:19:73:bb:
         b0:b9:5d:88:e2:ed:1d:bd:54:65:dd:34:3b:7e:d8:90:c5:f9:
         60:88:5c:cf:46:0b:06:89:03:98:70:8a:38:c6:71:e1:7d:8e:
         bb:2e:f6:66:35:d0:b0:01:78:ba:c0:9c:77:b2:6b:3c:33:5f:
         9f:7e:54:08:e1:b8:19:be:6a:b6:de:e0:00:a1:53:66:f9:bb:
         e7:38:2e:d3:7e:c0:45:a3:01:bb:0b:9a:f2:20:bf:67:6f:e6:
         3d:59:e4:b9:81:e5:e9:12:b5:58:6b:13:c6:ce:08:15:33:cb:
         f9:06:8e:2a:7e:79:f1:1f:6b:cf:b4:0c:d4:f9:01:b6:f7:3c:
         23:ee:46:31:04:9e:65:ff:49:63:9a:75:a3:1f:9a:1c:5a:1d:
         fa:46:73:f2:9d:23:de:33:8d:d8:6c:04:8a:12:cb:74:d9:35:
         4d:1a:6d:4e:85:f9:94:16:59:27:35:81:82:b0:64:b2:aa:19:
         64:7c:e7:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0LyASjefOFhVWZvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI2MDMwMzEzMTgyOVoXDTI2MDYwMTEyMTgyOVowLzEtMCsGA1UEAxMk
YjhiNjJhZWYtNDIxNy00NDA0LWFjNmItODc2MTdjZDM5ZjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVS/oOW7MmH2/Dua4EzspXD2eBjUZWWOh3zq
TpsekfWyUpNTjNZNmwbTH2ny5LFvuXWU1XoJDMuaGCbfgdi0ljZHAiA+Wjm33Zpn
6ySE1ojK3gKepw6R2FuJoqG/vhc62Eo4Z17BLJxbQGMwGQMgPcxITjwwERxpkfNx
kfmutja3P7+sWeqIGs1E/EdD30VpWRu57bGUP9aCr7ou1UdhcpQrrBvoX/txe7d0
ERzJRKsjy9AaPtjMq7s7cWoN4nkWNaRkxkIXVHUyGtCQJ0ZMe+4kVp9R0UPEQAuI
4R2B0Iv199heUZPIOmQzLZGY8mcl+UCDURwJ6Rc0jTEVfmtYMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK2f6IRcsTwQrMnegBYDHpqfys88MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMzI5NzY1NTEtZjk1ZS0z
NWE2LTk2ZjAtN2VkMzg1MjlhYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwm+sRXv2X7n9WjwCg4wwA1M+7nploqhc1VvlbagYMTiD240XkqgO1N
bna5IJKdtRnXuJDbxcArim+Is70CjdXS9MdJPBlzu7C5XYji7R29VGXdNDt+2JDF
+WCIXM9GCwaJA5hwijjGceF9jrsu9mY10LABeLrAnHeyazwzX59+VAjhuBm+arbe
4AChU2b5u+c4LtN+wEWjAbsLmvIgv2dv5j1Z5LmB5ekStVhrE8bOCBUzy/kGjip+
efEfa8+0DNT5Abb3PCPuRjEEnmX/SWOadaMfmhxaHfpGc/KdI94zjdhsBIoSy3TZ
NU0abU6F+ZQWWSc1gYKwZLKqGWR85ys=
-----END CERTIFICATE-----
Generated at Tue Mar 10 22:23:57 2026 by rpki-client