Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa
File:                     28225ffa-6f14-3d86-8834-6e467dd2ec93.roa (raw, json)
Hash identifier:          FMyLFYvuSvZ67S7BkQBQmEwhff03nKhwv9tbdRdexto=
Subject key identifier:   F2:D8:B5:88:17:14:B2:E3:30:7B:25:9C:39:6D:0C:62:AF:2B:8F:DE
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584DE41B22877F7D05134DB4A8F0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     9009
IP address blocks:        172.98.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:22:87:7f:7d:05:13:4d:b4:a8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=b8a909dc-582d-4078-a422-43f64f7e9250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:35:5b:8f:e4:a8:81:e9:0f:16:cf:c5:aa:
                    ef:53:1e:46:2d:ff:60:0d:76:c5:76:56:92:8b:71:
                    e4:2b:bd:16:f5:97:6d:21:71:9e:e6:bb:0f:26:59:
                    b6:1b:c7:65:32:38:c0:5a:9a:0b:68:b3:bd:96:04:
                    9d:d1:95:a4:6e:74:ed:98:49:08:d5:b1:f5:7e:2b:
                    30:25:b5:83:bc:fc:b8:fc:4d:b7:e9:6f:56:da:44:
                    f3:8c:99:60:e8:2f:ad:db:e7:f1:8f:d9:8a:7f:46:
                    2c:ec:b0:59:e1:e6:eb:85:94:5e:5f:a4:e1:0e:de:
                    6b:da:70:9b:13:8c:88:0b:35:96:ae:68:85:20:d6:
                    06:d4:b6:b8:b0:ba:45:8b:f2:63:4c:ac:03:96:d9:
                    a6:e1:e3:c5:b3:4a:9e:61:8d:6d:b5:b1:2f:7b:68:
                    89:97:88:0d:ff:86:f1:57:3b:ac:b5:63:de:da:2f:
                    b8:ea:da:7a:48:91:8c:df:99:7c:5d:84:f6:da:07:
                    d1:ee:e9:80:46:e3:c3:5e:89:84:8e:06:90:93:83:
                    c7:a7:97:49:a9:b8:76:80:36:ca:59:1a:af:62:0f:
                    11:92:66:0b:25:9d:1b:5b:51:f1:c4:67:86:d1:30:
                    4b:66:ea:13:dc:a9:34:d6:2a:55:35:08:32:7c:ed:
                    b7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D8:B5:88:17:14:B2:E3:30:7B:25:9C:39:6D:0C:62:AF:2B:8F:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:5f:40:9f:04:2c:d1:28:04:47:be:c0:2b:56:1e:7a:7c:2f:
         58:89:d2:dd:e3:f5:b3:7d:6c:19:21:23:ca:65:ec:34:8e:7a:
         4f:3a:36:c1:49:e9:fd:6f:7d:d4:6e:82:b2:b6:72:a5:ba:36:
         fd:c5:98:6d:f5:da:c5:61:df:ee:2f:0e:81:81:27:76:1d:1a:
         6a:7f:d7:92:e3:6d:8e:35:3b:51:6f:95:05:44:bb:4e:9b:9a:
         e7:85:97:48:38:bc:9e:6e:57:da:80:08:54:94:3c:d7:5e:5d:
         48:6b:ac:da:15:91:18:3c:86:31:9e:1b:92:93:50:9a:6c:54:
         f1:38:e3:9c:7f:a9:4c:31:6d:97:72:08:48:11:f7:ef:5c:ef:
         ce:a5:c7:4a:3e:99:98:ba:2c:02:59:fc:93:e2:c4:66:50:6d:
         41:04:ce:5a:8a:fa:07:97:f6:e4:0b:16:b1:5c:78:16:15:94:
         7c:17:bf:0a:96:ca:4f:1e:e4:24:44:66:45:fa:09:ed:e6:de:
         1f:87:c5:f2:04:e1:22:10:56:5c:81:7a:04:04:50:d5:4c:96:
         be:2b:b7:4a:39:57:c7:d6:99:8f:25:cd:5b:37:88:94:cb:e8:
         bd:46:3b:fa:a0:15:c1:f3:c9:5d:3b:23:69:58:8a:3c:b2:68:
         9c:56:d8:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGyKHf30FE020qPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk
YjhhOTA5ZGMtNTgyZC00MDc4LWE0MjItNDNmNjRmN2U5MjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqY1W4/kqIHpDxbPxarvUx5GLf9gDXbFdlaS
i3HkK70W9ZdtIXGe5rsPJlm2G8dlMjjAWpoLaLO9lgSd0ZWkbnTtmEkI1bH1fisw
JbWDvPy4/E236W9W2kTzjJlg6C+t2+fxj9mKf0Ys7LBZ4ebrhZReX6ThDt5r2nCb
E4yICzWWrmiFINYG1La4sLpFi/JjTKwDltmm4ePFs0qeYY1ttbEve2iJl4gN/4bx
VzustWPe2i+46tp6SJGM35l8XYT22gfR7umARuPDXomEjgaQk4PHp5dJqbh2gDbK
WRqvYg8RkmYLJZ0bW1HxxGeG0TBLZuoT3Kk01ipVNQgyfO238wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPLYtYgXFLLjMHslnDltDGKvK4/eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjgyMjVmZmEtNmYxNC0z
ZDg2LTg4MzQtNmU0NjdkZDJlYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5fQJ8ELNEoBEe+wCtWHnp8L1iJ0t3j9bN9bBkhI8pl7DSOek86NsFJ
6f1vfdRugrK2cqW6Nv3FmG312sVh3+4vDoGBJ3YdGmp/15LjbY41O1FvlQVEu06b
mueFl0g4vJ5uV9qACFSUPNdeXUhrrNoVkRg8hjGeG5KTUJpsVPE445x/qUwxbZdy
CEgR9+9c786lx0o+mZi6LAJZ/JPixGZQbUEEzlqK+geX9uQLFrFceBYVlHwXvwqW
yk8e5CREZkX6Ce3m3h+HxfIE4SIQVlyBegQEUNVMlr4rt0o5V8fWmY8lzVs3iJTL
6L1GO/qgFcHzyV07I2lYijyyaJxW2Cc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:28:30 2026 by rpki-client