Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/c9f02343-ec67-3d12-b9ef-76d959411bfc.roa
File:                     c9f02343-ec67-3d12-b9ef-76d959411bfc.roa (raw, json)
Hash identifier:          c8ln+DxzmMU0wSPR+UAviaGM2M0ZBwcz1nWgPeycqsM=
Subject key identifier:   EE:D9:21:EF:19:7E:EA:31:3A:6D:98:90:D3:FE:7B:C3:62:17:A0:C1
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584E210EF5D568057508FA19087C
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/c9f02343-ec67-3d12-b9ef-76d959411bfc.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     11641
IP address blocks:        173.240.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f5:d5:68:05:75:08:fa:19:08:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=324da104-a45d-4370-a779-9d760d3121f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:a0:a3:77:85:52:bd:6f:db:9e:c2:05:c3:
                    d2:59:54:2b:95:81:bc:14:a2:10:c2:6e:00:31:be:
                    e3:72:a3:1b:b6:4b:e0:0e:58:22:79:dc:92:af:e4:
                    24:d6:37:28:6f:af:cc:19:8a:b7:2b:f5:82:c0:84:
                    1f:68:ca:42:e2:f2:d1:e6:52:a3:2c:90:69:82:be:
                    3b:0b:81:95:9f:b7:b8:e7:d6:3e:a8:71:b7:ed:cd:
                    38:2e:86:67:1b:4a:0d:f7:f0:05:88:c6:c4:80:58:
                    18:69:78:8e:25:e9:90:6c:59:a1:88:9f:ad:3e:75:
                    ba:90:6b:c2:65:35:57:f8:72:4a:a1:52:1d:3d:e0:
                    11:1b:4e:51:82:34:d6:12:0a:84:67:61:fb:9e:09:
                    53:a0:1c:37:c7:23:66:36:62:28:bb:d9:9e:ff:bc:
                    b1:81:f5:a8:a8:90:6e:e9:52:9d:bb:6b:b1:f8:eb:
                    6c:85:a0:a8:a4:dc:45:b4:cd:0c:fc:52:83:06:55:
                    82:02:c4:80:d7:f1:bc:a4:81:6d:59:5a:f7:02:2c:
                    ce:ce:29:2e:ed:de:78:08:bd:9e:c9:b8:a7:dd:85:
                    8a:39:6d:4a:ab:5d:a0:6a:1c:61:7a:c2:e2:48:bc:
                    42:aa:5f:8e:9b:28:43:99:e7:e7:a0:83:b7:c4:bf:
                    c5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D9:21:EF:19:7E:EA:31:3A:6D:98:90:D3:FE:7B:C3:62:17:A0:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/c9f02343-ec67-3d12-b9ef-76d959411bfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.240.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:84:e6:fd:b9:8d:9f:f9:a9:c2:70:de:72:12:36:64:20:45:
         29:10:5b:ef:0e:b7:dd:c8:d6:3e:fb:74:a6:f0:35:ce:db:7c:
         1d:ed:20:50:53:6f:aa:9a:8d:9a:eb:57:30:83:a5:30:34:c6:
         ea:6b:f1:1a:03:c1:8e:45:7d:0d:18:54:0f:dc:f4:d9:a0:1b:
         d1:f2:19:ae:02:f9:75:4d:33:06:ec:0e:37:50:90:a6:09:d5:
         24:a0:bb:94:26:31:0b:bb:2a:e6:5d:c6:7f:95:e6:df:60:b4:
         38:55:24:9d:f4:ea:c7:df:31:ad:97:8d:de:8f:5e:1d:06:53:
         dc:2f:71:6d:f5:b1:21:6f:54:bb:be:19:f5:42:79:3e:47:56:
         66:0b:bd:42:2e:0f:e8:09:e1:54:82:7c:06:32:b0:56:4f:0a:
         0b:92:1d:f1:ff:53:99:01:56:25:ba:8b:f0:21:33:5d:40:e7:
         fa:bf:e9:fa:44:aa:7a:72:d7:7f:39:cf:28:7e:2b:b4:22:c9:
         25:75:53:c0:97:d4:0f:1d:4f:96:2a:d4:93:84:5d:9d:73:84:
         13:78:4c:80:c1:3b:31:96:35:ab:4a:e3:a5:fa:79:0b:e3:1d:
         55:67:78:76:51:64:cb:c3:71:ef:3a:ac:39:ff:15:cc:43:26:
         b6:57:86:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDvXVaAV1CPoZCHwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0
MGRmMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
MzI0ZGExMDQtYTQ1ZC00MzcwLWE3NzktOWQ3NjBkMzEyMWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5ygo3eFUr1v257CBcPSWVQrlYG8FKIQwm4A
Mb7jcqMbtkvgDlgiedySr+Qk1jcob6/MGYq3K/WCwIQfaMpC4vLR5lKjLJBpgr47
C4GVn7e459Y+qHG37c04LoZnG0oN9/AFiMbEgFgYaXiOJemQbFmhiJ+tPnW6kGvC
ZTVX+HJKoVIdPeARG05RgjTWEgqEZ2H7nglToBw3xyNmNmIou9me/7yxgfWoqJBu
6VKdu2ux+OtshaCopNxFtM0M/FKDBlWCAsSA1/G8pIFtWVr3AizOziku7d54CL2e
ybin3YWKOW1Kq12gahxhesLiSLxCql+OmyhDmefnoIO3xL/FkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO7ZIe8ZfuoxOm2YkNP+e8NiF6DBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThh
OGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvYzlmMDIzNDMtZWM2Ny0z
ZDEyLWI5ZWYtNzZkOTU5NDExYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE4YThhZTQtYmU2Mi00ZWYwLTlk
YzctNGM0ZDgyNmE0MGRmLzYxOGE4YWU0LWJlNjItNGVmMC05ZGM3LTRjNGQ4MjZh
NDBkZi5jcmwwHwYDVR0jBBgwFoAUlz5X9TGBsVJSZ9MGK6XxSki+o3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRk
ODI2YTQwZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfCgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKE5v25jZ/5qcJw3nISNmQgRSkQW+8Ot93I1j77dKbwNc7bfB3tIFBT
b6qajZrrVzCDpTA0xupr8RoDwY5FfQ0YVA/c9NmgG9HyGa4C+XVNMwbsDjdQkKYJ
1SSgu5QmMQu7KuZdxn+V5t9gtDhVJJ306sffMa2Xjd6PXh0GU9wvcW31sSFvVLu+
GfVCeT5HVmYLvUIuD+gJ4VSCfAYysFZPCguSHfH/U5kBViW6i/AhM11A5/q/6fpE
qnpy1385zyh+K7QiySV1U8CX1A8dT5Yq1JOEXZ1zhBN4TIDBOzGWNatK46X6eQvj
HVVneHZRZMvDce86rDn/FcxDJrZXhhE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:37:40 2026 by rpki-client