Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e6df7284-56ef-31d5-8312-27779de40064.roa
File:                     e6df7284-56ef-31d5-8312-27779de40064.roa (raw, json)
Hash identifier:          hRELOjBm1I7pI1i4vfMoFXJ2bA4HdMNaY1GV9PfhuSE=
Subject key identifier:   64:35:61:60:5D:AB:74:A6:92:27:CE:3D:2E:F6:AD:6C:8A:B0:34:CA
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F67A8938E12E1607D9A5DFC20
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e6df7284-56ef-31d5-8312-27779de40064.roa
Signing time:             Mon 05 Oct 2026 20:43:22 +0000
ROA not before:           Mon 05 Oct 2026 20:43:22 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     40934
IP address blocks:        189.25.43.0/24 maxlen: 24
                          189.25.54.0/24 maxlen: 24
                          189.25.55.0/24 maxlen: 24
                          189.25.57.0/24 maxlen: 24
                          189.25.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:67:a8:93:8e:12:e1:60:7d:9a:5d:fc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Oct  5 20:43:22 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=faf90e09-8845-4a15-b0fe-f1ca26035215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:82:10:eb:c9:3b:ff:1e:72:c2:fa:83:8d:fa:
                    04:74:c8:dc:14:db:4b:e8:5d:73:ed:35:23:77:49:
                    f4:8e:82:7c:ee:1d:94:9d:de:94:c7:fb:d3:02:fe:
                    59:02:20:42:70:2a:c6:20:5f:b4:b3:3e:4e:3f:d6:
                    d2:f0:d6:9d:b7:c7:0c:b3:d5:71:68:81:ef:63:eb:
                    bc:24:c2:04:84:ef:d2:d6:87:6c:10:f6:84:0e:68:
                    db:d1:a0:77:10:69:39:29:0d:98:25:78:61:49:5a:
                    93:12:90:a8:e8:b2:f8:bb:16:dd:0b:ab:ac:a8:b6:
                    e7:ae:50:2f:06:bc:8d:09:14:8a:64:da:c6:1a:b9:
                    f1:5b:55:c7:d7:d8:6c:a8:99:2f:51:ed:b6:ac:a8:
                    df:7f:8c:e7:49:96:50:e1:fc:d7:17:42:d0:54:d2:
                    dc:6c:c6:1b:07:31:66:2a:c6:fa:c6:cc:df:3d:e7:
                    19:99:f9:03:c7:9e:20:5b:db:30:ef:69:7a:f4:bd:
                    51:7a:9c:49:8f:bb:5f:c6:d0:99:ec:df:64:57:2c:
                    23:f8:38:08:66:ff:c2:46:76:c0:35:28:b1:6e:3a:
                    53:4f:91:78:7b:a6:c3:f1:18:53:bd:10:56:81:25:
                    59:bf:51:ac:2d:17:75:b5:4f:cf:8e:fa:47:7b:ed:
                    00:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:35:61:60:5D:AB:74:A6:92:27:CE:3D:2E:F6:AD:6C:8A:B0:34:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/e6df7284-56ef-31d5-8312-27779de40064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.25.43.0/24
                  189.25.54.0/23
                  189.25.57.0-189.25.58.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:19:bf:19:9c:74:09:3a:0a:00:31:62:ea:3b:ea:53:e0:67:
         64:9f:68:50:48:1f:e6:47:44:a9:dc:bd:02:27:72:5d:cf:f5:
         85:ce:7b:68:6c:8c:17:c0:03:1f:76:d9:43:c8:a3:cd:10:c7:
         8b:76:c9:fe:80:01:45:a9:4f:88:2e:d9:e9:52:81:78:d5:b1:
         41:77:6c:a6:12:9f:27:11:05:3a:86:98:e0:b3:ce:67:8a:40:
         53:c7:7c:53:1b:3d:7b:44:cd:8a:e0:2b:a0:7f:b3:67:26:cb:
         ec:15:fd:b1:7b:ee:9c:c1:d9:e5:1c:9e:34:62:ae:ee:5d:9a:
         e3:d7:d5:50:98:ca:62:0c:ac:e8:a4:d8:77:73:68:c6:05:51:
         fc:a1:60:a1:a1:15:d6:cb:3d:3a:59:f0:5e:a0:ad:11:48:2a:
         b5:89:22:19:55:71:bf:ae:a2:66:bf:41:af:0d:fa:de:83:e1:
         08:65:26:73:a1:b3:3d:42:1f:8e:32:12:82:34:d5:8e:3f:dd:
         05:e4:f2:00:34:9c:29:0f:39:94:65:54:69:0d:c6:dc:95:71:
         92:e5:f1:48:ab:c2:11:5c:a2:82:73:d1:32:6f:79:f0:28:73:
         0e:c7:9d:f2:18:38:2c:42:15:d4:58:43:6d:0b:b7:8a:91:8f:
         82:9b:8a:60
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWE9nqJOOEuFgfZpd/CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1
NTg0MB4XDTI2MTAwNTIwNDMyMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk
ZmFmOTBlMDktODg0NS00YTE1LWIwZmUtZjFjYTI2MDM1MjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IIQ68k7/x5ywvqDjfoEdMjcFNtL6F1z7TUj
d0n0joJ87h2Und6Ux/vTAv5ZAiBCcCrGIF+0sz5OP9bS8Nadt8cMs9VxaIHvY+u8
JMIEhO/S1odsEPaEDmjb0aB3EGk5KQ2YJXhhSVqTEpCo6LL4uxbdC6usqLbnrlAv
BryNCRSKZNrGGrnxW1XH19hsqJkvUe22rKjff4znSZZQ4fzXF0LQVNLcbMYbBzFm
Ksb6xszfPecZmfkDx54gW9sw72l69L1RepxJj7tfxtCZ7N9kVywj+DgIZv/CRnbA
NSixbjpTT5F4e6bD8RhTvRBWgSVZv1GsLRd1tU/PjvpHe+0ALQIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFGQ1YWBdq3SmkifOPS72rWyKsDTKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk
YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvZTZkZjcyODQtNTZlZi0z
MWQ1LTgzMTItMjc3NzlkZTQwMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx
OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh
NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk
ZmQ0YTU1ODQuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAvRkrAwQB
vRk2MAwDBAC9GTkDBAC9GTowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADxm/GZx0CToKADFi6jvqU+BnZJ9o
UEgf5kdEqdy9AidyXc/1hc57aGyMF8ADH3bZQ8ijzRDHi3bJ/oABRalPiC7Z6VKB
eNWxQXdsphKfJxEFOoaY4LPOZ4pAU8d8Uxs9e0TNiuAroH+zZybL7BX9sXvunMHZ
5RyeNGKu7l2a49fVUJjKYgys6KTYd3NoxgVR/KFgoaEV1ss9OlnwXqCtEUgqtYki
GVVxv66iZr9Brw363oPhCGUmc6GzPUIfjjISgjTVjj/dBeTyADScKQ85lGVUaQ3G
3JVxkuXxSKvCEVyignPRMm958ChzDsed8hg4LEIV1FhDbQu3ipGPgpuKYA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:32:03 2026 by rpki-client