Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ee10f20-c580-4c30-9245-d84c3609c077/73bd3f0a-2b29-358c-aa18-fda2e799e313.roa
File:                     73bd3f0a-2b29-358c-aa18-fda2e799e313.roa (raw, json)
Hash identifier:          ykI9uIjgKZ/xvgsGJUt06uj6/AfVxEEMuT0mYNQ6dfM=
Subject key identifier:   43:2D:AE:0A:41:92:EA:AD:2E:DF:13:7A:0F:5A:07:BE:A2:E0:84:A8
Certificate issuer:       /CN=3ee10f20-c580-4c30-9245-d84c3609c077
Certificate serial:       010D0C9F4328584DF375E58D563E13EB30137D80
Authority key identifier: 4B:78:76:68:64:5D:89:32:4F:9F:40:F6:E1:9E:49:D0:B4:05:83:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ee10f20-c580-4c30-9245-d84c3609c077.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ee10f20-c580-4c30-9245-d84c3609c077/73bd3f0a-2b29-358c-aa18-fda2e799e313.roa
Signing time:             Mon 25 May 2026 13:00:31 +0000
ROA not before:           Mon 25 May 2026 13:00:31 +0000
ROA not after:            Sun 23 Aug 2026 13:00:31 +0000
asID:                     32867
IP address blocks:        147.92.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ee10f20-c580-4c30-9245-d84c3609c077/3ee10f20-c580-4c30-9245-d84c3609c077.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ee10f20-c580-4c30-9245-d84c3609c077/3ee10f20-c580-4c30-9245-d84c3609c077.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ee10f20-c580-4c30-9245-d84c3609c077.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:75:e5:8d:56:3e:13:eb:30:13:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee10f20-c580-4c30-9245-d84c3609c077
        Validity
            Not Before: May 25 13:00:31 2026 GMT
            Not After : Aug 23 13:00:31 2026 GMT
        Subject: CN=ccc433d5-0060-4e86-9352-b9513fc6da4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:de:6d:7e:85:da:8d:db:9f:08:03:51:60:c6:
                    da:3e:03:4c:06:23:3b:16:89:1b:f7:df:34:59:63:
                    31:53:3a:63:96:7d:7b:d5:da:09:ae:c6:11:b5:8a:
                    6e:f7:8e:46:a6:06:f6:41:a7:78:61:01:fc:b5:20:
                    1d:e0:26:0b:3b:e1:2e:1a:eb:cf:50:6e:24:bd:81:
                    42:8a:a8:12:6c:0e:d9:7e:a3:a6:42:fa:c3:d6:70:
                    35:ff:5a:c5:8a:1d:62:6f:26:c0:14:27:c8:64:b1:
                    cd:f9:dd:09:8b:c4:80:52:9e:ea:26:83:dd:09:a0:
                    59:71:62:c0:36:da:9c:97:02:a0:fe:bc:8d:7c:4b:
                    4d:ca:5d:24:96:89:2d:07:bd:3f:17:04:23:d5:d3:
                    44:7d:6a:ae:f1:95:bb:39:b5:8c:44:2d:d9:b3:04:
                    73:1d:8a:30:f6:5f:47:e6:03:7a:dd:b0:40:3e:b1:
                    f3:08:c5:7d:ec:35:62:90:b6:7e:bb:db:cc:1a:8f:
                    80:42:6e:2f:94:09:8d:5c:44:b6:47:fd:a5:81:d0:
                    74:c9:8e:90:6a:9e:35:d7:cc:eb:73:83:f5:40:6f:
                    b9:24:8f:e6:98:c9:05:d5:8c:27:9c:ce:90:16:b0:
                    9b:58:48:d6:76:30:fc:aa:a3:23:a9:2f:e9:bd:6e:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2D:AE:0A:41:92:EA:AD:2E:DF:13:7A:0F:5A:07:BE:A2:E0:84:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ee10f20-c580-4c30-9245-d84c3609c077/73bd3f0a-2b29-358c-aa18-fda2e799e313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ee10f20-c580-4c30-9245-d84c3609c077/3ee10f20-c580-4c30-9245-d84c3609c077.crl

            X509v3 Authority Key Identifier:
                keyid:4B:78:76:68:64:5D:89:32:4F:9F:40:F6:E1:9E:49:D0:B4:05:83:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3ee10f20-c580-4c30-9245-d84c3609c077.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.92.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:61:43:a2:6d:8e:02:c6:38:13:5f:48:6f:63:7c:2f:7a:1c:
         cb:33:c7:d8:bf:d4:fb:ba:54:f1:41:51:85:a1:48:b1:4a:4b:
         61:4e:3c:80:0d:e0:c8:c7:f5:aa:0b:fd:e4:91:48:5b:14:c2:
         3e:3c:c1:1e:1b:20:45:50:9f:43:3e:1e:57:27:68:38:c6:60:
         2b:02:fa:c5:73:5e:de:7a:01:b5:aa:8a:7c:e2:d9:42:2f:6f:
         60:85:42:c3:d3:53:72:8e:27:7c:01:12:9e:1f:3e:53:f6:fa:
         5c:b0:8f:49:0e:92:9c:d1:84:0c:ea:12:f5:cb:f7:97:14:19:
         d7:09:0f:d3:9a:1f:53:87:d6:10:3c:0a:58:cf:f6:74:30:0a:
         20:1f:5a:88:fd:d4:66:ca:0b:89:fc:17:79:df:2b:90:6a:2f:
         2f:86:79:ce:17:11:b9:0f:2d:98:c8:06:1a:73:c8:27:8b:d6:
         bc:67:17:2a:08:a8:52:ae:87:c2:dc:35:19:12:ef:70:97:57:
         e5:cb:19:26:03:ca:bd:82:11:7c:42:4c:55:06:93:10:23:43:
         61:a0:96:6b:0d:b3:17:72:cb:e9:ed:e2:cf:b8:77:1a:18:e4:
         42:75:2e:6e:13:36:f3:fc:fe:b1:a5:56:5b:9c:da:4a:62:53:
         6f:46:ff:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zdeWNVj4T6zATfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VlMTBmMjAtYzU4MC00YzMwLTkyNDUtZDg0YzM2MDlj
MDc3MB4XDTI2MDUyNTEzMDAzMVoXDTI2MDgyMzEzMDAzMVowLzEtMCsGA1UEAxMk
Y2NjNDMzZDUtMDA2MC00ZTg2LTkzNTItYjk1MTNmYzZkYTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt5tfoXajdufCANRYMbaPgNMBiM7Fokb9980
WWMxUzpjln171doJrsYRtYpu945Gpgb2Qad4YQH8tSAd4CYLO+EuGuvPUG4kvYFC
iqgSbA7ZfqOmQvrD1nA1/1rFih1ibybAFCfIZLHN+d0Ji8SAUp7qJoPdCaBZcWLA
NtqclwKg/ryNfEtNyl0kloktB70/FwQj1dNEfWqu8ZW7ObWMRC3ZswRzHYow9l9H
5gN63bBAPrHzCMV97DVikLZ+u9vMGo+AQm4vlAmNXES2R/2lgdB0yY6Qap4118zr
c4P1QG+5JI/mmMkF1YwnnM6QFrCbWEjWdjD8qqMjqS/pvW4ANQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEMtrgpBkuqtLt8Teg9aB76i4ISoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zZWUx
MGYyMC1jNTgwLTRjMzAtOTI0NS1kODRjMzYwOWMwNzcvNzNiZDNmMGEtMmIyOS0z
NThjLWFhMTgtZmRhMmU3OTllMzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2VlMTBmMjAtYzU4MC00YzMwLTky
NDUtZDg0YzM2MDljMDc3LzNlZTEwZjIwLWM1ODAtNGMzMC05MjQ1LWQ4NGMzNjA5
YzA3Ny5jcmwwHwYDVR0jBBgwFoAUS3h2aGRdiTJPn0D24Z5J0LQFg3owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zZWUxMGYyMC1jNTgwLTRjMzAtOTI0NS1kODRj
MzYwOWMwNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk1wDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEFhQ6JtjgLGOBNfSG9jfC96HMszx9i/1Pu6VPFBUYWhSLFKS2FOPIAN
4MjH9aoL/eSRSFsUwj48wR4bIEVQn0M+HlcnaDjGYCsC+sVzXt56AbWqinzi2UIv
b2CFQsPTU3KOJ3wBEp4fPlP2+lywj0kOkpzRhAzqEvXL95cUGdcJD9OaH1OH1hA8
CljP9nQwCiAfWoj91GbKC4n8F3nfK5BqLy+Gec4XEbkPLZjIBhpzyCeL1rxnFyoI
qFKuh8LcNRkS73CXV+XLGSYDyr2CEXxCTFUGkxAjQ2GglmsNsxdyy+nt4s+4dxoY
5EJ1Lm4TNvP8/rGlVluc2kpiU29G/24=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:26:01 2026 by rpki-client