Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eeec8410-d9cb-36a8-9611-d2afc748957c.roa
File:                     eeec8410-d9cb-36a8-9611-d2afc748957c.roa (raw, json)
Hash identifier:          aV5fGcay10tjN13j2X4002bdWBDkaLGOF5y0qaxrlOQ=
Subject key identifier:   02:AB:37:D9:AB:72:9A:08:90:48:3E:A1:56:57:C4:CA:8B:62:26:80
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584EE7BCB2A90ABAD82426FD0BC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eeec8410-d9cb-36a8-9611-d2afc748957c.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        173.18.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:b2:a9:0a:ba:d8:24:26:fd:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=74d620be-2106-46d8-9bea-53d9c7858bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:fe:eb:e4:1e:0b:95:e8:e9:d1:bf:d3:5f:
                    b6:94:07:e4:30:d2:06:58:65:1c:4d:17:a9:cc:1f:
                    4d:b6:21:b9:bd:8d:de:15:84:3a:ad:a3:96:e0:5d:
                    b4:36:12:d4:b6:3e:c2:cb:5b:b9:87:81:6a:7a:f7:
                    b4:b9:76:a3:e8:51:c9:dc:cd:07:30:d4:ac:5a:cd:
                    9a:1d:16:ac:73:37:86:4c:d8:5a:a2:9d:b9:2e:b4:
                    bf:23:f8:57:69:6c:d6:1f:31:ba:9c:fb:ec:c6:35:
                    ca:a4:ec:e0:4a:3c:e6:f4:22:22:66:5d:e6:2d:7f:
                    70:37:41:f0:9a:20:73:96:2a:b5:7f:50:98:e6:08:
                    cf:c8:ce:83:72:80:58:72:4c:57:32:f4:62:f6:c4:
                    63:63:4e:50:3b:a5:47:56:d0:96:d2:8f:a6:b3:8e:
                    93:ec:82:21:c7:01:4b:51:0b:7c:57:3c:08:d5:51:
                    d0:94:10:44:16:fc:a9:80:66:31:70:b4:38:05:05:
                    cc:e5:5d:c3:27:8b:26:9c:85:c9:8f:f7:b4:77:9d:
                    e2:8a:cc:89:40:68:b2:fb:44:d5:58:ed:c2:d3:4c:
                    33:2b:23:c2:f0:0c:b5:e9:31:0d:18:67:0a:56:bb:
                    85:f1:3f:73:93:45:a8:61:33:96:b0:96:86:4d:04:
                    38:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AB:37:D9:AB:72:9A:08:90:48:3E:A1:56:57:C4:CA:8B:62:26:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eeec8410-d9cb-36a8-9611-d2afc748957c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.18.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:6e:f8:18:33:6f:a8:77:0a:7c:83:0e:4a:15:ec:4f:44:6d:
         99:09:b4:02:60:00:26:bf:9d:bc:69:e5:42:57:4c:b6:df:53:
         1f:ce:e4:8b:35:20:1a:5f:c9:78:d9:09:5d:be:1c:24:53:08:
         0e:16:32:9a:02:c3:87:d0:79:82:b7:fc:cc:79:db:fd:5b:0d:
         72:92:d4:68:ab:9a:8c:1d:58:8f:69:b6:8e:e5:47:2c:65:2d:
         51:da:4b:05:fd:2b:ae:12:aa:e4:b5:91:bf:73:4e:ef:3f:f2:
         a2:47:18:2b:7a:51:35:06:33:5f:5d:16:5f:a0:67:c7:35:12:
         72:72:b5:02:95:1f:ef:39:ba:3b:41:65:ec:da:00:6b:b5:a7:
         3b:e1:11:c8:e3:18:a4:ad:05:47:ba:bd:79:12:d0:82:d9:3c:
         dc:af:3d:74:e1:63:c4:1f:bf:5a:97:80:a2:68:fc:30:f4:ed:
         9e:1e:e0:fc:2c:51:47:51:84:7c:29:e9:46:fe:6c:6d:a6:69:
         7e:e0:52:5e:55:e7:53:e2:d2:d2:23:0a:78:61:24:28:e9:07:
         83:07:52:0d:36:dd:b7:c7:4f:26:65:1e:dc:14:b0:ef:f9:e7:
         e2:99:30:4e:8a:e4:06:9c:b1:41:f5:ef:5d:01:5a:3b:34:50:
         89:e8:eb:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvLKpCrrYJCb9C8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk
NzRkNjIwYmUtMjEwNi00NmQ4LTliZWEtNTNkOWM3ODU4YmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQb+6+QeC5Xo6dG/01+2lAfkMNIGWGUcTRep
zB9NtiG5vY3eFYQ6raOW4F20NhLUtj7Cy1u5h4Fqeve0uXaj6FHJ3M0HMNSsWs2a
HRasczeGTNhaop25LrS/I/hXaWzWHzG6nPvsxjXKpOzgSjzm9CIiZl3mLX9wN0Hw
miBzliq1f1CY5gjPyM6DcoBYckxXMvRi9sRjY05QO6VHVtCW0o+ms46T7IIhxwFL
UQt8VzwI1VHQlBBEFvypgGYxcLQ4BQXM5V3DJ4smnIXJj/e0d53iisyJQGiy+0TV
WO3C00wzKyPC8Ay16TENGGcKVruF8T9zk0WoYTOWsJaGTQQ4TwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKrN9mrcpoIkEg+oVZXxMqLYiaAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWVlYzg0MTAtZDljYi0z
NmE4LTk2MTEtZDJhZmM3NDg5NTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRJfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABBu+Bgzb6h3CnyDDkoV7E9EbZkJtAJgACa/nbxp5UJXTLbfUx/O5Is1
IBpfyXjZCV2+HCRTCA4WMpoCw4fQeYK3/Mx52/1bDXKS1GirmowdWI9pto7lRyxl
LVHaSwX9K64SquS1kb9zTu8/8qJHGCt6UTUGM19dFl+gZ8c1EnJytQKVH+85ujtB
ZezaAGu1pzvhEcjjGKStBUe6vXkS0ILZPNyvPXThY8Qfv1qXgKJo/DD07Z4e4Pws
UUdRhHwp6Ub+bG2maX7gUl5V51Pi0tIjCnhhJCjpB4MHUg023bfHTyZlHtwUsO/5
5+KZME6K5AacsUH1710BWjs0UIno65M=
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:41:17 2026 by rpki-client