Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e577cf7-001e-33b7-928f-1b41550b0b21.roa
File:                     9e577cf7-001e-33b7-928f-1b41550b0b21.roa (raw, json)
Hash identifier:          Ho1ZUiQ8yYbyulRotCUDd6VCej1U/Yw+3H8bbqB8+IQ=
Subject key identifier:   88:4E:90:0F:F5:1B:5F:46:F4:A7:0A:87:BD:C6:77:63:46:81:9F:02
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E0435F42310FCBA4F0481EC50
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e577cf7-001e-33b7-928f-1b41550b0b21.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     19905
IP address blocks:        173.17.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:f4:23:10:fc:ba:4f:04:81:ec:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=deec4b49-22e0-41be-91a0-0223801db78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:33:c7:88:5e:8a:c0:d8:87:3b:cc:94:09:73:
                    10:b8:9f:6c:21:07:fc:0d:d7:d2:42:a7:d2:54:17:
                    d7:d2:47:5b:8e:0f:c9:4c:44:7a:a8:6d:40:3f:16:
                    c7:23:ec:00:38:b5:0a:bb:28:f1:a3:84:38:f5:20:
                    09:e4:1b:3d:9d:76:bf:a8:28:3f:57:27:24:bf:a4:
                    69:e6:96:3c:89:9c:3a:41:72:28:b0:96:6f:da:0a:
                    15:8f:9c:1b:cf:d4:51:0c:b1:95:45:5b:28:89:7f:
                    36:38:6c:92:85:29:e5:2e:4a:4a:55:2c:ed:87:11:
                    eb:54:14:6a:cc:54:e2:05:5c:b7:65:07:8d:8b:1c:
                    44:15:c0:0d:70:08:2a:30:2f:b0:17:b0:f5:93:af:
                    3a:45:75:3d:1f:76:a8:51:52:37:bf:af:e2:f4:0f:
                    d5:fc:a3:ca:3f:72:01:37:86:d1:64:55:03:8f:36:
                    90:b1:3e:63:90:0f:86:89:45:ca:9a:c9:04:69:97:
                    9e:f5:75:ff:bb:c2:77:d7:57:9f:4f:13:a8:66:45:
                    7d:13:09:cf:bd:15:f4:ac:aa:5d:22:f2:53:10:56:
                    25:6e:38:75:a1:e8:8b:ca:25:d7:2a:8a:0a:a6:69:
                    2e:90:a0:7f:a5:4c:e7:a5:59:04:0a:b2:7c:1e:91:
                    08:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4E:90:0F:F5:1B:5F:46:F4:A7:0A:87:BD:C6:77:63:46:81:9F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e577cf7-001e-33b7-928f-1b41550b0b21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:76:6b:b5:ed:4b:c0:02:bf:2b:73:59:a9:75:35:32:ce:48:
         6c:f9:a7:f7:bb:f0:01:ea:04:7c:11:67:4f:cf:1f:07:ba:f1:
         cd:fa:fc:61:8e:b3:84:bf:2b:4a:01:25:5a:5b:ca:5c:e4:ec:
         17:7c:54:4d:b2:b5:60:61:dd:f3:7a:08:18:1b:a3:82:29:7a:
         88:96:d8:95:74:42:fa:88:8b:66:17:e0:f3:1c:37:fb:f8:9d:
         13:08:9e:5e:e8:20:38:fb:04:cc:cb:d1:bf:e8:c6:56:64:d3:
         07:3f:4c:19:e1:10:e5:f8:b2:7c:0f:a4:b1:06:9e:6a:a8:fd:
         36:b0:20:75:97:0b:90:1e:c0:ee:88:2e:a4:12:dd:b5:7e:d0:
         83:40:60:63:b9:32:4e:17:5a:c6:b5:8f:ab:6b:ad:73:bb:3e:
         5b:6c:67:9b:43:af:d8:3c:0f:53:dd:6d:22:02:28:66:5a:d5:
         d1:b8:97:e8:5b:ec:45:c7:8a:52:0f:57:cb:43:52:0d:d9:59:
         75:ea:e6:f9:a2:2d:79:74:cd:1b:44:82:60:d7:66:54:e9:74:
         39:fe:29:c5:91:01:e3:0b:36:8e:ee:e7:5e:44:38:a3:c7:92:
         07:7d:5a:d2:53:8e:31:6d:82:f9:94:b9:5b:36:cf:e5:65:ed:
         1f:17:60:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENfQjEPy6TwSB7FAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk
ZGVlYzRiNDktMjJlMC00MWJlLTkxYTAtMDIyMzgwMWRiNzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDPHiF6KwNiHO8yUCXMQuJ9sIQf8DdfSQqfS
VBfX0kdbjg/JTER6qG1APxbHI+wAOLUKuyjxo4Q49SAJ5Bs9nXa/qCg/Vyckv6Rp
5pY8iZw6QXIosJZv2goVj5wbz9RRDLGVRVsoiX82OGyShSnlLkpKVSzthxHrVBRq
zFTiBVy3ZQeNixxEFcANcAgqMC+wF7D1k686RXU9H3aoUVI3v6/i9A/V/KPKP3IB
N4bRZFUDjzaQsT5jkA+GiUXKmskEaZee9XX/u8J311efTxOoZkV9EwnPvRX0rKpd
IvJTEFYlbjh1oeiLyiXXKooKpmkukKB/pUznpVkECrJ8HpEI3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhOkA/1G19G9KcKh73Gd2NGgZ8CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWU1NzdjZjctMDAxZS0z
M2I3LTkyOGYtMWI0MTU1MGIwYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFB2a7XtS8ACvytzWal1NTLOSGz5p/e78AHqBHwRZ0/PHwe68c36/GGO
s4S/K0oBJVpbylzk7Bd8VE2ytWBh3fN6CBgbo4IpeoiW2JV0QvqIi2YX4PMcN/v4
nRMInl7oIDj7BMzL0b/oxlZk0wc/TBnhEOX4snwPpLEGnmqo/TawIHWXC5AewO6I
LqQS3bV+0INAYGO5Mk4XWsa1j6trrXO7PltsZ5tDr9g8D1PdbSICKGZa1dG4l+hb
7EXHilIPV8tDUg3ZWXXq5vmiLXl0zRtEgmDXZlTpdDn+KcWRAeMLNo7u515EOKPH
kgd9WtJTjjFtgvmUuVs2z+Vl7R8XYJE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:26:54 2026 by rpki-client