Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa
File:                     17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa (raw, json)
Hash identifier:          grAroj9mCDFf0TN9byxpQax4Yhhvm+fAe4tL4sNe1qU=
Subject key identifier:   B3:9F:A0:80:94:67:D8:3A:CC:29:F5:08:35:F4:7D:09:CD:49:31:34
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584CAE572E3B7050718A8E8C2A9C
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     8796
IP address blocks:        104.143.32.0/20 maxlen: 24
                          172.81.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:2e:3b:70:50:71:8a:8e:8c:2a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=b3eb1c92-b791-4552-9d50-87a8d3f2083b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:51:fa:c3:5d:31:d6:3f:8e:87:c1:7f:7a:d1:
                    d5:d6:87:bb:9d:ab:3d:55:a1:1a:b9:b1:e8:04:ef:
                    13:98:05:44:9e:89:0b:9e:30:2b:db:18:2c:79:6c:
                    e9:1c:d0:38:da:2b:b1:a9:c6:1c:9e:7c:76:c4:4d:
                    d6:4e:60:b2:90:05:5b:01:ff:18:86:94:a5:73:48:
                    70:3e:d6:60:ea:50:5f:4c:d7:67:c8:8b:fb:2a:f8:
                    16:02:e3:77:d6:3c:a0:81:74:b0:a4:11:02:91:be:
                    2a:67:ca:85:83:7f:ea:ff:96:11:55:c0:93:d3:0c:
                    25:99:c1:76:4f:b1:c6:bd:06:75:e0:7d:f2:2b:17:
                    ac:2b:50:c4:39:8d:1f:5b:5e:44:29:69:89:e1:35:
                    e9:ca:1a:f5:5f:78:21:2a:ef:50:ec:07:c2:6b:8e:
                    76:24:7d:29:6f:25:ab:29:13:8b:69:29:3e:0a:4a:
                    a4:67:7f:b7:c7:e0:11:d4:16:1d:76:69:20:81:63:
                    41:88:f4:9b:1b:8a:e8:bb:13:7e:4c:8a:63:52:1c:
                    6e:bd:3d:e8:9b:c0:66:f7:cb:b2:a2:b3:be:35:17:
                    92:46:21:13:6a:02:ab:d6:58:c4:de:a1:71:09:98:
                    db:fe:90:73:41:1b:34:e2:7d:70:13:cd:b8:28:7d:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9F:A0:80:94:67:D8:3A:CC:29:F5:08:35:F4:7D:09:CD:49:31:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/17f0852e-d574-316b-82ee-6b8b0ef9dcb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.143.32.0/20
                  172.81.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b1:ec:fd:7a:4e:1d:da:d2:00:54:e6:00:15:fe:4c:5b:51:
         f5:26:04:f7:28:3f:25:48:0b:76:26:03:51:25:1e:cd:b3:fa:
         a1:35:1c:92:7a:2b:e2:ed:12:53:53:86:8f:73:f5:99:3f:22:
         1d:cb:6a:68:d1:56:27:07:71:08:21:78:8e:9a:01:0e:d3:8c:
         af:91:b0:55:d4:4b:6c:da:d4:7d:39:91:39:a9:d7:dc:b1:c9:
         97:2d:a2:74:01:ba:7e:43:24:e8:c3:81:c6:8b:53:95:64:40:
         5b:6e:6c:ad:62:b0:85:6b:5a:b9:32:98:41:6f:c3:c9:bd:34:
         f4:39:ac:85:cd:bc:27:d2:bc:b7:06:dd:ea:56:4a:89:07:7d:
         25:38:ed:e3:4b:5e:dc:0c:99:2e:86:a5:cb:30:51:87:32:a7:
         cf:3e:ba:d5:be:10:f4:90:f8:7f:2c:4b:b1:ee:44:5b:c4:f9:
         47:97:c9:76:3a:ac:b4:b2:dc:22:45:11:c9:d9:37:60:32:bb:
         4e:39:78:7f:8d:5b:c4:e5:bf:f0:91:37:3b:91:09:60:6b:75:
         0f:cb:7e:bf:61:b2:87:2c:2f:d8:84:22:5b:f3:4e:ca:04:8c:
         c0:a1:f0:f6:18:ce:84:6e:7d:bd:61:50:9a:f4:cd:db:bb:02:
         05:09:2c:e9
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyuVy47cFBxio6MKpwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm
MDYzMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YjNlYjFjOTItYjc5MS00NTUyLTlkNTAtODdhOGQzZjIwODNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlH6w10x1j+Oh8F/etHV1oe7nas9VaEaubHo
BO8TmAVEnokLnjAr2xgseWzpHNA42iuxqcYcnnx2xE3WTmCykAVbAf8YhpSlc0hw
PtZg6lBfTNdnyIv7KvgWAuN31jyggXSwpBECkb4qZ8qFg3/q/5YRVcCT0wwlmcF2
T7HGvQZ14H3yKxesK1DEOY0fW15EKWmJ4TXpyhr1X3ghKu9Q7AfCa452JH0pbyWr
KROLaSk+CkqkZ3+3x+AR1BYddmkggWNBiPSbG4rouxN+TIpjUhxuvT3om8Bm98uy
orO+NReSRiETagKr1ljE3qFxCZjb/pBzQRs04n1wE824KH0jSQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLOfoICUZ9g6zCn1CDX0fQnNSTE0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi
MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvMTdmMDg1MmUtZDU3NC0z
MTZiLTgyZWUtNmI4YjBlZjlkY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1
YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky
ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4
NzY5MmYwNjMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEaI8gAwQB
rFFkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAWx7P16Th3a0gBU5gAV/kxbUfUmBPcoPyVIC3YmA1ElHs2z
+qE1HJJ6K+LtElNTho9z9Zk/Ih3LamjRVicHcQgheI6aAQ7TjK+RsFXUS2za1H05
kTmp19yxyZctonQBun5DJOjDgcaLU5VkQFtubK1isIVrWrkymEFvw8m9NPQ5rIXN
vCfSvLcG3epWSokHfSU47eNLXtwMmS6GpcswUYcyp88+utW+EPSQ+H8sS7HuRFvE
+UeXyXY6rLSy3CJFEcnZN2Ayu045eH+NW8Tlv/CRNzuRCWBrdQ/Lfr9hsocsL9iE
IlvzTsoEjMCh8PYYzoRufb1hUJr0zdu7AgUJLOk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:30 2026 by rpki-client