Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f224b0d3-4510-3f89-826c-e939a66b2874.roa
File:                     f224b0d3-4510-3f89-826c-e939a66b2874.roa (raw, json)
Hash identifier:          4ayOiSamj9GtqLBa6vYJ9Ck2AXKlTrZD13ihMEbCG44=
Subject key identifier:   76:1F:9C:21:EA:11:19:CD:FE:7F:DC:FF:67:A8:AC:7C:9E:BC:9F:B9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584CCD0C943F45FD0D9978EE8110
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f224b0d3-4510-3f89-826c-e939a66b2874.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     30036
IP address blocks:        173.17.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:94:3f:45:fd:0d:99:78:ee:81:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=57df1321-b746-4285-b2d3-1187ec797c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:23:18:08:a8:7b:21:e1:b1:ea:dd:f8:bc:72:
                    1e:34:b5:ef:3e:a7:c8:7c:aa:c1:f5:20:ec:df:2a:
                    f7:2c:af:bb:66:41:52:70:d7:51:b5:63:ad:91:f0:
                    da:c1:3f:3f:49:b1:9f:2c:2e:87:0b:0c:f0:25:80:
                    f1:8c:6f:3a:0a:0b:be:07:52:59:3d:e7:41:b6:ca:
                    2c:65:25:96:20:74:10:48:db:49:71:62:d6:61:f1:
                    92:d7:92:4e:64:ee:e7:d7:18:4c:f2:cb:86:24:f4:
                    2a:e8:df:19:27:af:8e:96:14:67:cb:19:48:9c:d8:
                    91:28:8c:0c:c0:7c:0e:d8:a7:02:ee:1a:ee:16:bc:
                    c2:cd:3b:4a:60:89:73:98:4f:f0:46:ee:b8:f4:1b:
                    8a:f9:77:b9:8e:be:1e:c9:43:c9:41:73:d7:7e:53:
                    88:aa:19:c9:65:f8:39:8d:b9:13:49:37:c0:03:a5:
                    f6:3c:a7:5d:db:8b:4e:1a:eb:f3:df:e6:6e:45:a0:
                    6d:3e:e3:14:e8:a4:01:c6:00:de:07:43:97:5f:57:
                    fb:0e:f7:c9:09:d9:f0:a2:41:52:a9:e7:c1:6a:87:
                    4d:d4:9e:46:44:19:68:cf:4a:cf:92:23:0a:72:fb:
                    01:35:3f:92:e8:25:37:1c:82:0a:2a:c2:1e:d4:cb:
                    47:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1F:9C:21:EA:11:19:CD:FE:7F:DC:FF:67:A8:AC:7C:9E:BC:9F:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f224b0d3-4510-3f89-826c-e939a66b2874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4e:44:b8:53:6d:73:f6:f6:e4:1b:58:af:63:dc:c4:90:e5:
         ea:04:ba:4c:bf:01:dd:5f:aa:42:7b:d0:4a:6f:c0:8a:65:a5:
         43:27:ee:5b:c8:14:ca:a7:2f:72:53:fc:df:ba:00:aa:dc:9b:
         17:2c:16:c2:dd:47:0d:9d:8a:a8:19:c0:5e:1e:29:c2:dd:83:
         42:8a:10:a5:e9:b1:6f:75:b5:8f:d8:6c:e4:dc:01:cf:36:d2:
         f9:6d:1c:13:54:63:65:50:c7:21:83:05:5c:01:40:4e:a8:8d:
         f8:81:f1:be:7a:a7:72:47:70:f9:fd:32:4d:7f:80:d3:96:94:
         8f:99:74:88:41:37:ac:5e:6b:d7:8d:37:fc:6a:bf:c4:27:53:
         b9:3f:3a:84:96:ae:4a:a4:fe:bc:67:47:cc:a0:82:42:87:0d:
         3b:8f:7f:05:d1:53:74:d6:61:d4:88:64:6d:3e:75:ad:01:45:
         3b:6d:0c:0d:7f:ef:de:7d:c9:15:09:da:f5:02:fe:6b:8b:ea:
         57:cb:7e:e9:fd:dd:6a:87:a6:70:83:17:92:47:be:cc:fb:01:
         ce:73:e1:ea:bb:0b:01:f5:e4:34:31:11:46:b6:c5:cb:9e:11:
         a9:ab:a0:ae:fb:57:cc:3b:02:88:13:dc:a3:1a:96:af:fe:aa:
         31:89:d9:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzNDJQ/Rf0NmXjugRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDIwOTAyMDAzMVoXDTI2MDUxMDAxMDAzMVowLzEtMCsGA1UEAxMk
NTdkZjEzMjEtYjc0Ni00Mjg1LWIyZDMtMTE4N2VjNzk3YzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SMYCKh7IeGx6t34vHIeNLXvPqfIfKrB9SDs
3yr3LK+7ZkFScNdRtWOtkfDawT8/SbGfLC6HCwzwJYDxjG86Cgu+B1JZPedBtsos
ZSWWIHQQSNtJcWLWYfGS15JOZO7n1xhM8suGJPQq6N8ZJ6+OlhRnyxlInNiRKIwM
wHwO2KcC7hruFrzCzTtKYIlzmE/wRu649BuK+Xe5jr4eyUPJQXPXflOIqhnJZfg5
jbkTSTfAA6X2PKdd24tOGuvz3+ZuRaBtPuMU6KQBxgDeB0OXX1f7DvfJCdnwokFS
qefBaodN1J5GRBloz0rPkiMKcvsBNT+S6CU3HIIKKsIe1MtHQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYfnCHqERnN/n/c/2eorHyevJ+5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjIyNGIwZDMtNDUxMC0z
Zjg5LTgyNmMtZTkzOWE2NmIyODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxORLhTbXP29uQbWK9j3MSQ5eoEuky/Ad1fqkJ70EpvwIplpUMn7lvI
FMqnL3JT/N+6AKrcmxcsFsLdRw2diqgZwF4eKcLdg0KKEKXpsW91tY/YbOTcAc82
0vltHBNUY2VQxyGDBVwBQE6ojfiB8b56p3JHcPn9Mk1/gNOWlI+ZdIhBN6xea9eN
N/xqv8QnU7k/OoSWrkqk/rxnR8yggkKHDTuPfwXRU3TWYdSIZG0+da0BRTttDA1/
7959yRUJ2vUC/muL6lfLfun93WqHpnCDF5JHvsz7Ac5z4eq7CwH15DQxEUa2xcue
EamroK77V8w7AogT3KMalq/+qjGJ2YE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:53 2026 by rpki-client