Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b61b7df5-a9c8-3227-bb6d-022ae7f3b4ff.roa
File:                     b61b7df5-a9c8-3227-bb6d-022ae7f3b4ff.roa (raw, json)
Hash identifier:          jpjBDe5DGwLkmhqpW1UvL+huSRbSVliOh0jJC7WYwGQ=
Subject key identifier:   CA:26:9C:57:B6:68:1D:4B:C2:98:19:FF:FC:84:9E:EB:36:B9:5B:CD
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CCFD735D1E08F366C96AE2A00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b61b7df5-a9c8-3227-bb6d-022ae7f3b4ff.roa
Signing time:             Tue 10 Feb 2026 02:00:31 +0000
ROA not before:           Tue 10 Feb 2026 02:00:31 +0000
ROA not after:            Mon 11 May 2026 01:00:31 +0000
asID:                     19905
IP address blocks:        173.17.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cf:d7:35:d1:e0:8f:36:6c:96:ae:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb 10 02:00:31 2026 GMT
            Not After : May 11 01:00:31 2026 GMT
        Subject: CN=08e2dcef-9213-404c-b309-58c41a048cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ae:d4:dc:31:40:17:3c:66:0a:91:9f:6c:b1:
                    8c:f9:e3:1a:77:38:17:1c:ca:1a:3a:db:fe:6c:ce:
                    3b:25:88:be:71:82:af:e4:17:a5:63:69:0c:99:2e:
                    07:28:bf:72:d8:72:d7:d5:b7:a2:33:b9:65:a3:46:
                    a6:44:b4:77:d5:45:97:b9:97:62:52:b6:f2:63:77:
                    b5:9f:0c:f6:72:21:89:63:25:6e:4e:21:e8:d3:01:
                    6d:b0:e7:0f:76:8d:cc:a4:b5:63:ef:c9:1c:86:ce:
                    aa:45:ad:a6:4f:fa:24:75:05:9f:ab:25:9f:d4:be:
                    2b:fe:9a:b4:16:dd:53:6f:cb:f4:38:10:09:b4:3e:
                    fe:8c:4f:1c:4f:4b:6d:d1:fb:ae:3a:f1:bc:62:00:
                    b1:20:8c:51:5d:fa:dd:26:8f:2a:02:dc:2a:d6:3c:
                    18:b3:38:6a:cf:d1:3f:8f:22:59:a2:ee:e8:41:50:
                    e4:1b:c2:f4:43:5b:d5:05:98:e5:f2:97:f5:fa:98:
                    74:60:51:a0:8e:ae:3a:86:80:fd:db:0e:2d:a5:cd:
                    a6:ca:14:01:00:fb:4e:7a:69:40:16:80:d3:74:05:
                    aa:64:a3:4c:1b:24:28:67:98:2e:01:71:7f:bc:d9:
                    84:ba:18:0f:c6:b7:92:13:2e:a5:71:3f:63:c1:aa:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:26:9C:57:B6:68:1D:4B:C2:98:19:FF:FC:84:9E:EB:36:B9:5B:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b61b7df5-a9c8-3227-bb6d-022ae7f3b4ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5f:61:6b:bf:4a:93:b0:7b:a8:23:93:0d:42:a8:e1:e7:1b:
         ef:2e:0d:c8:84:cc:b7:f6:aa:d3:27:e2:27:5a:8e:5d:05:b6:
         0d:bd:f3:4c:f3:c4:d8:f1:6f:bc:70:6a:b3:c3:c8:7d:4d:5e:
         3e:42:a1:d3:57:3b:e8:78:dd:69:bf:08:82:bf:0b:e0:a1:d6:
         c3:f2:49:35:55:c3:fc:4d:86:70:28:b0:54:35:69:6a:1a:f9:
         58:34:f8:e9:bc:44:a6:30:e0:5d:41:82:6f:43:cd:27:46:ad:
         17:d7:da:2d:64:ab:98:0e:89:4b:54:e0:2a:55:c6:b1:83:a0:
         17:ab:e1:8d:d8:cf:03:a1:db:31:a6:28:e3:63:f1:ab:77:11:
         f8:60:0e:58:7c:23:cb:58:63:d2:c6:ec:b2:14:a6:7f:b7:b7:
         de:9a:5d:00:56:48:b9:d8:88:f2:8b:a6:9b:9a:82:dc:5d:77:
         45:83:e7:c5:44:48:83:85:32:ff:46:bb:d1:c2:e0:1c:ec:c7:
         8e:a3:bc:5e:b2:b2:0a:96:a1:77:b8:b8:ee:92:5d:d2:07:d3:
         21:89:66:33:08:0a:45:36:26:b1:27:74:59:0f:f5:d8:45:fc:
         8e:4c:27:25:a6:eb:41:a3:79:3d:1e:75:08:c9:73:3b:fb:a7:
         0c:d6:31:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzP1zXR4I82bJauKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDIxMDAyMDAzMVoXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk
MDhlMmRjZWYtOTIxMy00MDRjLWIzMDktNThjNDFhMDQ4Y2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK7U3DFAFzxmCpGfbLGM+eMadzgXHMoaOtv+
bM47JYi+cYKv5BelY2kMmS4HKL9y2HLX1beiM7llo0amRLR31UWXuZdiUrbyY3e1
nwz2ciGJYyVuTiHo0wFtsOcPdo3MpLVj78kchs6qRa2mT/okdQWfqyWf1L4r/pq0
Ft1Tb8v0OBAJtD7+jE8cT0tt0fuuOvG8YgCxIIxRXfrdJo8qAtwq1jwYszhqz9E/
jyJZou7oQVDkG8L0Q1vVBZjl8pf1+ph0YFGgjq46hoD92w4tpc2myhQBAPtOemlA
FoDTdAWqZKNMGyQoZ5guAXF/vNmEuhgPxreSEy6lcT9jwaqhWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMomnFe2aB1LwpgZ//yEnus2uVvNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjYxYjdkZjUtYTljOC0z
MjI3LWJiNmQtMDIyYWU3ZjNiNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHBfYWu/SpOwe6gjkw1CqOHnG+8uDciEzLf2qtMn4idajl0Ftg2980zz
xNjxb7xwarPDyH1NXj5CodNXO+h43Wm/CIK/C+Ch1sPySTVVw/xNhnAosFQ1aWoa
+Vg0+Om8RKYw4F1Bgm9DzSdGrRfX2i1kq5gOiUtU4CpVxrGDoBer4Y3YzwOh2zGm
KONj8at3EfhgDlh8I8tYY9LG7LIUpn+3t96aXQBWSLnYiPKLppuagtxdd0WD58VE
SIOFMv9Gu9HC4Bzsx46jvF6ysgqWoXe4uO6SXdIH0yGJZjMICkU2JrEndFkP9dhF
/I5MJyWm60GjeT0edQjJczv7pwzWMc4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:38 2026 by rpki-client