Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/44a7f58b-00a4-36c5-b816-5c96203cd990.roa
File:                     44a7f58b-00a4-36c5-b816-5c96203cd990.roa (raw, json)
Hash identifier:          hGLS6Oz98f621JMxVNMV1q6tAW/RrHx0KoAgYX1bQ48=
Subject key identifier:   17:9E:7E:72:8E:57:FF:E5:F8:59:3F:DA:90:45:63:A9:4B:48:F0:67
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584E2D9F16BAAC934704D47BDD80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/44a7f58b-00a4-36c5-b816-5c96203cd990.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        173.199.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:16:ba:ac:93:47:04:d4:7b:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=ce5aa48c-90b6-46df-a186-30e4025b2ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cf:c9:e0:c1:be:b0:c8:60:16:ef:12:0d:15:
                    50:7d:a8:2d:3d:ed:4e:e6:77:b2:15:2a:8a:de:3e:
                    30:bf:fa:ee:f8:74:25:fe:6c:a4:2d:a2:a6:e9:54:
                    02:cb:bf:21:58:0c:7a:fe:cc:12:2e:1c:c8:48:bc:
                    00:de:cf:4d:64:28:30:bd:2f:35:b7:91:91:c9:be:
                    2e:6f:3c:df:cb:a8:45:3c:65:2b:46:91:8c:13:64:
                    22:d2:b3:d1:ff:52:e6:c7:b0:5e:e1:45:cf:0f:d9:
                    da:a6:f5:b7:c9:ab:fc:e8:d6:d8:f4:74:92:34:6f:
                    05:01:b5:d6:16:7c:3e:63:65:4a:ad:f5:ac:a4:9d:
                    84:c4:d8:1b:4f:43:9d:87:54:3b:f3:29:88:44:fb:
                    8f:8c:be:fa:0b:e7:c9:7c:6b:62:2b:a6:9d:c6:03:
                    10:c1:07:82:26:d5:a3:ce:5c:f8:9f:b0:5b:d8:8e:
                    8f:f5:82:86:77:59:dd:cb:c2:b7:95:36:f9:52:18:
                    40:80:7f:d9:6b:df:72:d3:93:dd:bd:3b:a7:ef:39:
                    23:8f:a6:ff:a2:c0:3d:19:6c:ba:c6:da:18:73:bb:
                    08:52:fb:b1:69:74:a9:f1:6e:f6:99:00:a4:a8:91:
                    de:36:05:89:37:eb:7f:a5:3b:07:72:e7:e3:a1:4a:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9E:7E:72:8E:57:FF:E5:F8:59:3F:DA:90:45:63:A9:4B:48:F0:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/44a7f58b-00a4-36c5-b816-5c96203cd990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:c7:a3:dc:e8:b4:20:fa:8c:0c:5a:14:84:e2:f8:70:a9:e5:
         82:0a:0a:de:09:64:5b:63:9d:fd:dc:21:a3:4a:bc:9c:91:f0:
         f1:31:1f:9d:66:0f:0a:6e:47:0d:29:79:7c:b2:2f:87:43:a1:
         ed:92:f8:c3:e4:54:9c:0e:6d:bd:2a:16:8c:da:1d:9b:06:73:
         09:a8:ae:90:e4:23:19:6f:63:55:91:92:85:23:d4:2a:98:06:
         fd:20:c8:39:1c:59:43:68:af:c7:fc:f5:fe:f5:31:1b:1c:e5:
         71:72:9d:fd:3f:b6:2f:7b:3c:f2:18:5b:ed:a1:e6:a1:cd:f3:
         44:24:b2:56:85:e9:c7:19:69:9f:46:74:02:43:b8:e6:4e:e8:
         09:33:c1:8d:46:f1:11:41:57:f3:1e:cb:00:02:64:fc:f4:b6:
         67:72:2c:99:34:6c:b3:fe:63:55:9a:05:90:26:62:46:bc:c8:
         2c:b6:b9:27:82:6f:e8:20:e6:d6:02:bc:3d:38:f2:e9:b3:5f:
         fd:e0:8e:c5:14:4e:b0:d6:e4:35:f7:2c:06:5b:ad:9d:5f:87:
         d1:3e:84:9b:54:59:62:b8:c7:2a:2c:a6:4b:f8:8d:4d:90:b0:
         c1:4d:df:18:d3:93:98:92:40:cd:76:c0:9f:8e:9d:45:83:b9:
         ca:c2:1d:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnxa6rJNHBNR73YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
Y2U1YWE0OGMtOTBiNi00NmRmLWExODYtMzBlNDAyNWIyZWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM/J4MG+sMhgFu8SDRVQfagtPe1O5neyFSqK
3j4wv/ru+HQl/mykLaKm6VQCy78hWAx6/swSLhzISLwA3s9NZCgwvS81t5GRyb4u
bzzfy6hFPGUrRpGME2Qi0rPR/1Lmx7Be4UXPD9napvW3yav86NbY9HSSNG8FAbXW
Fnw+Y2VKrfWspJ2ExNgbT0Odh1Q78ymIRPuPjL76C+fJfGtiK6adxgMQwQeCJtWj
zlz4n7Bb2I6P9YKGd1ndy8K3lTb5UhhAgH/Za99y05PdvTun7zkjj6b/osA9GWy6
xtoYc7sIUvuxaXSp8W72mQCkqJHeNgWJN+t/pTsHcufjoUo0kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBeefnKOV//l+Fk/2pBFY6lLSPBnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDRhN2Y1OGItMDBhNC0z
NmM1LWI4MTYtNWM5NjIwM2NkOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcclMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMTHo9zotCD6jAxaFITi+HCp5YIKCt4JZFtjnf3cIaNKvJyR8PExH51m
DwpuRw0peXyyL4dDoe2S+MPkVJwObb0qFozaHZsGcwmorpDkIxlvY1WRkoUj1CqY
Bv0gyDkcWUNor8f89f71MRsc5XFynf0/ti97PPIYW+2h5qHN80QkslaF6ccZaZ9G
dAJDuOZO6AkzwY1G8RFBV/MeywACZPz0tmdyLJk0bLP+Y1WaBZAmYka8yCy2uSeC
b+gg5tYCvD048umzX/3gjsUUTrDW5DX3LAZbrZ1fh9E+hJtUWWK4xyospkv4jU2Q
sMFN3xjTk5iSQM12wJ+OnUWDucrCHXE=
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:20:55 2026 by rpki-client