Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c4940145-68cd-3268-b555-36ef2c4ba03f.roa
File:                     c4940145-68cd-3268-b555-36ef2c4ba03f.roa (raw, json)
Hash identifier:          jiv82VlYTF0ekiB8ENYYfWNL1GTCgJ4SK1Lsm+OxBQY=
Subject key identifier:   C6:10:52:18:CE:08:C2:02:1C:78:4E:4C:BE:03:5B:A6:D9:BB:87:91
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CAA8B6832204AB0C721D40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c4940145-68cd-3268-b555-36ef2c4ba03f.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     36522
IP address blocks:        206.172.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:a8:b6:83:22:04:ab:0c:72:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=867caf87-c367-40d7-a745-2196264b738f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:ef:84:b6:26:f1:bd:03:ba:6c:c0:d4:fb:
                    e3:ee:83:c4:10:ef:5e:24:e1:10:96:f0:2a:06:ad:
                    43:63:0e:0f:2d:2e:3c:23:be:31:9c:62:bb:9b:6a:
                    d2:b7:76:1c:77:28:97:e1:47:8b:f6:e5:55:61:d6:
                    fc:e8:e2:ae:23:e1:eb:c7:00:81:93:67:bb:24:37:
                    4c:ee:ce:73:c7:fa:30:ad:3b:56:64:6f:46:71:b1:
                    fa:59:3d:4e:32:b7:4d:92:c1:76:57:af:cc:a4:86:
                    39:60:11:45:51:1a:82:ad:cd:21:b8:34:d2:84:f8:
                    56:e1:b0:11:db:96:90:9e:c9:dc:62:5a:19:c6:09:
                    85:e0:6f:c4:f9:47:0f:dc:5b:64:fc:90:40:b9:99:
                    b2:9f:65:20:88:ae:a1:b1:92:a1:79:ea:a2:a4:ff:
                    4e:7f:a6:a5:69:d8:29:fb:85:df:57:dc:28:c8:fa:
                    6a:5a:44:a6:5f:6d:97:e0:ab:41:0a:38:5a:4e:aa:
                    e5:02:a5:c1:57:aa:a4:40:79:a4:28:9b:fa:a8:fd:
                    6a:5b:d9:e0:67:95:29:8e:96:60:22:0f:e9:0b:6a:
                    49:3c:71:f1:83:b2:09:a2:8d:57:90:7d:68:74:16:
                    9d:fb:92:2c:93:70:e9:30:d7:7c:0a:50:0b:1c:26:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:10:52:18:CE:08:C2:02:1C:78:4E:4C:BE:03:5B:A6:D9:BB:87:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c4940145-68cd-3268-b555-36ef2c4ba03f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.172.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b1:8d:33:0b:51:8f:4c:0b:7b:f1:5b:2b:f8:37:f1:16:e8:
         39:b9:b6:00:bd:3d:76:3d:60:c0:54:be:ff:f1:29:49:17:63:
         74:7c:ca:70:ed:d7:57:d7:88:fb:4d:e0:11:dd:50:d1:7a:c4:
         0b:32:d4:f7:a5:41:86:52:ef:00:8a:a6:e1:bd:74:2a:49:e4:
         69:77:48:cf:b4:a0:0d:33:8b:c5:ad:3a:ff:7d:e8:f9:06:a0:
         8f:28:21:4e:99:ca:ee:32:d0:7b:66:38:96:c7:ed:83:1e:e0:
         00:e9:81:48:c0:26:d2:00:32:cb:3a:db:65:05:4c:09:96:93:
         ff:1c:5d:c6:40:d5:88:76:b6:64:59:a2:be:8f:2d:b4:d5:c3:
         8d:52:35:5c:25:e4:75:f6:e9:c4:82:53:89:8f:6e:5f:1f:2f:
         12:83:95:28:3c:bd:2a:d9:8f:33:e9:ed:05:2b:d6:5e:c5:2c:
         5f:bc:29:6d:a9:76:9c:ce:ba:75:ed:db:c3:cd:4e:12:15:2c:
         8f:38:b2:7b:14:47:04:e2:da:e4:e3:44:47:90:c3:e1:0c:d7:
         8e:10:dd:3a:17:a2:5b:d1:04:65:ed:00:49:be:36:6c:d3:99:
         f0:20:97:86:8e:1e:fc:75:2e:e3:85:9e:64:d4:a8:49:6e:92:
         70:07:05:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Dyqi2gyIEqwxyHUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
ODY3Y2FmODctYzM2Ny00MGQ3LWE3NDUtMjE5NjI2NGI3MzhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06jvhLYm8b0DumzA1Pvj7oPEEO9eJOEQlvAq
Bq1DYw4PLS48I74xnGK7m2rSt3YcdyiX4UeL9uVVYdb86OKuI+HrxwCBk2e7JDdM
7s5zx/owrTtWZG9GcbH6WT1OMrdNksF2V6/MpIY5YBFFURqCrc0huDTShPhW4bAR
25aQnsncYloZxgmF4G/E+UcP3Ftk/JBAuZmyn2UgiK6hsZKheeqipP9Of6aladgp
+4XfV9woyPpqWkSmX22X4KtBCjhaTqrlAqXBV6qkQHmkKJv6qP1qW9ngZ5UpjpZg
Ig/pC2pJPHHxg7IJoo1XkH1odBad+5Isk3DpMNd8ClALHCYI5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYQUhjOCMICHHhOTL4DW6bZu4eRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYzQ5NDAxNDUtNjhjZC0z
MjY4LWI1NTUtMzZlZjJjNGJhMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqwRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6xjTMLUY9MC3vxWyv4N/EW6Dm5tgC9PXY9YMBUvv/xKUkXY3R8ynDt
11fXiPtN4BHdUNF6xAsy1PelQYZS7wCKpuG9dCpJ5Gl3SM+0oA0zi8WtOv996PkG
oI8oIU6Zyu4y0HtmOJbH7YMe4ADpgUjAJtIAMss622UFTAmWk/8cXcZA1Yh2tmRZ
or6PLbTVw41SNVwl5HX26cSCU4mPbl8fLxKDlSg8vSrZjzPp7QUr1l7FLF+8KW2p
dpzOunXt28PNThIVLI84snsURwTi2uTjREeQw+EM144Q3ToXolvRBGXtAEm+NmzT
mfAgl4aOHvx1LuOFnmTUqEluknAHBZw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:50:58 2026 by rpki-client