Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10c8a852-1546-3ba9-a321-65a61ee6b600.roa
File:                     10c8a852-1546-3ba9-a321-65a61ee6b600.roa (raw, json)
Hash identifier:          3OyGwOOryPl9u8Fv3GwMabA5ybk3uJ9c4oeGARC6ueU=
Subject key identifier:   03:CE:7F:75:60:03:B1:43:2D:A7:C8:D5:4D:10:00:65:FC:5A:A9:79
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CEDCEBA90FEEF6ECB753DDD00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10c8a852-1546-3ba9-a321-65a61ee6b600.roa
Signing time:             Fri 20 Feb 2026 19:37:45 +0000
ROA not before:           Fri 20 Feb 2026 19:37:45 +0000
ROA not after:            Thu 21 May 2026 18:37:45 +0000
asID:                     19905
IP address blocks:        173.16.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:ce:ba:90:fe:ef:6e:cb:75:3d:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 20 19:37:45 2026 GMT
            Not After : May 21 18:37:45 2026 GMT
        Subject: CN=91cf4560-5cc6-492c-84dc-2df3a2874035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b4:51:fc:c5:42:37:7f:fa:26:64:e9:37:24:
                    eb:93:e4:66:44:02:2a:37:01:70:9f:6a:d2:5b:5a:
                    d7:81:c9:ed:fa:39:72:75:cc:f5:46:9e:8b:f5:35:
                    22:38:0a:48:eb:91:c1:df:d5:80:a9:c8:16:1d:34:
                    74:65:2f:55:b2:d2:26:e7:07:7b:b7:2e:b1:1c:4e:
                    6a:1f:c9:75:91:e5:3e:00:50:e0:1a:0e:7e:3d:d6:
                    0c:df:2f:5a:8a:f2:bb:18:c3:bd:b2:96:7a:da:22:
                    0c:78:d9:28:90:76:c9:77:81:fb:a4:ee:26:8b:16:
                    e3:cc:37:3f:0a:2c:4b:44:23:b8:d6:ec:ca:69:6d:
                    a9:66:69:3d:f5:5d:59:d5:fe:84:42:f2:90:3f:4c:
                    6c:57:e5:2d:64:19:c6:a8:82:aa:bb:64:8e:d9:b5:
                    b2:54:36:25:b3:1a:23:0a:c0:24:0a:73:13:aa:e8:
                    ae:46:c4:9c:2b:e4:f6:4a:01:55:de:ab:fd:4c:f2:
                    df:65:70:90:ce:6d:83:53:0e:60:62:a6:97:9c:28:
                    07:99:2b:c7:e5:3e:a5:ca:93:03:70:b1:5c:cf:c4:
                    6e:95:fe:08:bf:99:e6:fd:e3:23:15:35:a3:a8:bf:
                    8e:89:f7:9b:04:18:3b:ff:10:59:9f:87:89:5f:1b:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CE:7F:75:60:03:B1:43:2D:A7:C8:D5:4D:10:00:65:FC:5A:A9:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10c8a852-1546-3ba9-a321-65a61ee6b600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:41:b6:14:6d:64:60:ec:50:a9:e9:29:d3:41:9c:fa:d3:f2:
         88:ac:0b:a6:e7:9f:dc:ac:f4:ea:c4:fd:db:09:47:bf:46:31:
         04:7c:ed:10:87:d9:10:51:5e:39:64:10:d1:7e:c4:bd:d7:88:
         18:ba:84:8a:fc:dc:34:f5:de:94:e8:d5:28:ab:0e:20:fb:f4:
         96:58:7a:27:03:35:e5:48:90:b3:02:16:92:f4:91:f2:a2:08:
         ad:1a:8c:f7:55:89:56:b6:c1:5d:33:2b:8a:a2:e8:45:af:dc:
         3c:fd:0c:05:77:e3:64:25:12:95:8e:bf:93:b2:21:49:a8:2f:
         b0:91:23:bb:4d:45:10:34:b2:2c:d4:41:47:2f:44:89:ec:ae:
         61:51:49:6c:d6:47:a3:b7:20:b7:98:03:c7:0a:e0:ef:70:68:
         cb:fb:57:ae:1c:3b:ab:b9:23:35:41:62:ba:89:b8:52:6c:a8:
         f5:39:0f:b2:7c:2e:6d:62:1a:7f:9e:1b:1a:d8:db:2a:dd:43:
         be:db:a6:20:e8:cf:a3:93:b5:ef:55:54:6f:90:ff:af:fe:24:
         77:47:a3:d3:3f:99:7a:86:d2:ae:a9:46:73:9c:b3:df:b9:d1:
         27:f7:22:1f:6f:8d:45:16:bf:90:09:4e:93:e0:2b:42:44:98:
         ff:39:ab:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztzrqQ/u9uy3U93QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDIyMDE5Mzc0NVoXDTI2MDUyMTE4Mzc0NVowLzEtMCsGA1UEAxMk
OTFjZjQ1NjAtNWNjNi00OTJjLTg0ZGMtMmRmM2EyODc0MDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7RR/MVCN3/6JmTpNyTrk+RmRAIqNwFwn2rS
W1rXgcnt+jlydcz1Rp6L9TUiOApI65HB39WAqcgWHTR0ZS9VstIm5wd7ty6xHE5q
H8l1keU+AFDgGg5+PdYM3y9aivK7GMO9spZ62iIMeNkokHbJd4H7pO4mixbjzDc/
CixLRCO41uzKaW2pZmk99V1Z1f6EQvKQP0xsV+UtZBnGqIKqu2SO2bWyVDYlsxoj
CsAkCnMTquiuRsScK+T2SgFV3qv9TPLfZXCQzm2DUw5gYqaXnCgHmSvH5T6lypMD
cLFcz8Rulf4Iv5nm/eMjFTWjqL+OifebBBg7/xBZn4eJXxtqEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAPOf3VgA7FDLafI1U0QAGX8Wql5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTBjOGE4NTItMTU0Ni0z
YmE5LWEzMjEtNjVhNjFlZTZiNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRAgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpBthRtZGDsUKnpKdNBnPrT8oisC6bnn9ys9OrE/dsJR79GMQR87RCH
2RBRXjlkENF+xL3XiBi6hIr83DT13pTo1SirDiD79JZYeicDNeVIkLMCFpL0kfKi
CK0ajPdViVa2wV0zK4qi6EWv3Dz9DAV342QlEpWOv5OyIUmoL7CRI7tNRRA0sizU
QUcvRInsrmFRSWzWR6O3ILeYA8cK4O9waMv7V64cO6u5IzVBYrqJuFJsqPU5D7J8
Lm1iGn+eGxrY2yrdQ77bpiDoz6OTte9VVG+Q/6/+JHdHo9M/mXqG0q6pRnOcs9+5
0Sf3Ih9vjUUWv5AJTpPgK0JEmP85q2g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:42:17 2026 by rpki-client