Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b4814e0b-ad93-33e8-ba14-3e8f8d3aaae4.roa
File:                     b4814e0b-ad93-33e8-ba14-3e8f8d3aaae4.roa (raw, json)
Hash identifier:          6mB0kFonhXK0CRtNFFCMsjm8iY0hFyUUBWcSi1nGus4=
Subject key identifier:   B6:22:73:8C:F5:BF:CF:CD:B9:E6:37:39:BD:B1:A7:B9:45:66:9D:A2
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E9D82750DF6E5F1245887A980
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b4814e0b-ad93-33e8-ba14-3e8f8d3aaae4.roa
Signing time:             Sat 25 Jul 2026 10:53:17 +0000
ROA not before:           Sat 25 Jul 2026 10:53:17 +0000
ROA not after:            Fri 23 Oct 2026 10:53:17 +0000
asID:                     174
IP address blocks:        173.232.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:82:75:0d:f6:e5:f1:24:58:87:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 25 10:53:17 2026 GMT
            Not After : Oct 23 10:53:17 2026 GMT
        Subject: CN=00d9e6c7-4780-4398-bdc4-1621de9f3f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3f:c8:18:33:a8:1e:bb:40:76:69:bc:97:35:
                    b2:92:52:5e:dc:8e:fe:f5:06:c8:13:30:8b:98:f5:
                    00:c9:d7:22:b2:48:02:34:5d:70:f2:ab:ee:49:8a:
                    c1:c7:6b:49:67:3c:05:92:9a:20:d9:aa:5d:fe:61:
                    ba:d6:ef:12:4b:50:9e:14:01:06:1a:76:1d:2e:4b:
                    31:bc:3f:79:b0:44:c7:17:5f:b2:f7:3d:0e:b9:fb:
                    5e:1b:a4:bf:4a:b6:99:67:20:74:b6:70:e3:b6:73:
                    2d:30:a1:3b:59:d5:04:65:c8:86:5f:67:99:a7:41:
                    1c:d6:48:04:48:e4:68:e8:fd:6a:86:68:74:a8:d2:
                    7a:3e:7f:14:a9:2d:87:d1:0f:07:e0:d7:28:2f:88:
                    cf:79:09:d4:44:31:44:ec:72:9c:80:79:2f:94:58:
                    8a:75:e4:04:c3:9b:af:29:c6:2b:69:92:ed:17:58:
                    50:bb:ab:e9:eb:e6:cc:d9:d9:42:f3:bb:fc:e9:14:
                    84:09:62:cc:0f:34:cd:e8:ad:a5:11:82:29:e4:97:
                    47:88:2d:2c:e7:2f:1c:c6:e3:37:23:da:8c:94:a3:
                    33:83:db:44:a3:b1:ce:a7:e7:18:da:8b:98:9b:77:
                    70:26:c1:42:96:0a:c3:cd:d1:84:5f:bd:31:2f:06:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:22:73:8C:F5:BF:CF:CD:B9:E6:37:39:BD:B1:A7:B9:45:66:9D:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b4814e0b-ad93-33e8-ba14-3e8f8d3aaae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:7e:8a:b8:70:6a:55:ed:9b:78:82:25:09:30:0c:e7:fb:d6:
         15:73:5c:66:1f:3a:d5:73:1f:50:47:e3:41:50:67:4c:8f:a6:
         e8:0a:8f:6b:b7:61:d1:71:38:b6:e2:42:4c:fa:65:75:8a:f1:
         3d:8a:57:cc:e3:02:52:99:cc:3a:59:75:f8:66:93:0e:a6:7e:
         31:1e:45:87:c5:2f:92:9e:b6:81:95:f9:a3:68:0e:11:81:18:
         bf:2b:d7:c6:11:79:86:94:da:31:f6:51:53:a7:a5:af:82:b8:
         8f:a0:88:fc:d8:fc:51:c9:20:16:7b:d3:9f:9f:7b:9f:9e:7d:
         51:7e:b1:8b:d5:c6:b4:9c:00:f7:9a:b2:e9:59:18:f1:ac:9f:
         ef:df:d4:8d:96:fd:9b:64:0a:ce:06:fb:94:53:40:94:34:81:
         3a:69:46:36:67:79:e0:85:3d:1a:ba:53:c8:91:f0:f3:84:57:
         b1:60:05:7b:3c:76:85:2e:ef:2a:20:0c:c3:7b:86:de:b5:1e:
         14:5b:af:37:bf:ce:f2:b5:3c:0d:70:02:88:54:6c:cb:f3:f4:
         04:c8:6a:bb:64:b0:5e:b5:fe:bb:c4:f5:51:14:7a:25:93:22:
         3e:dc:70:c4:26:8e:01:6e:7d:ed:79:1c:61:d1:19:22:e5:27:
         b7:bb:73:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dgnUN9uXxJFiHqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDcyNTEwNTMxN1oXDTI2MTAyMzEwNTMxN1owLzEtMCsGA1UEAxMk
MDBkOWU2YzctNDc4MC00Mzk4LWJkYzQtMTYyMWRlOWYzZjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD/IGDOoHrtAdmm8lzWyklJe3I7+9QbIEzCL
mPUAydciskgCNF1w8qvuSYrBx2tJZzwFkpog2apd/mG61u8SS1CeFAEGGnYdLksx
vD95sETHF1+y9z0OufteG6S/SraZZyB0tnDjtnMtMKE7WdUEZciGX2eZp0Ec1kgE
SORo6P1qhmh0qNJ6Pn8UqS2H0Q8H4NcoL4jPeQnURDFE7HKcgHkvlFiKdeQEw5uv
KcYraZLtF1hQu6vp6+bM2dlC87v86RSECWLMDzTN6K2lEYIp5JdHiC0s5y8cxuM3
I9qMlKMzg9tEo7HOp+cY2ouYm3dwJsFClgrDzdGEX70xLwb9AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYic4z1v8/NueY3Ob2xp7lFZp2iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjQ4MTRlMGItYWQ5My0z
M2U4LWJhMTQtM2U4ZjhkM2FhYWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACd+irhwalXtm3iCJQkwDOf71hVzXGYfOtVzH1BH40FQZ0yPpugKj2u3
YdFxOLbiQkz6ZXWK8T2KV8zjAlKZzDpZdfhmkw6mfjEeRYfFL5KetoGV+aNoDhGB
GL8r18YReYaU2jH2UVOnpa+CuI+giPzY/FHJIBZ705+fe5+efVF+sYvVxrScAPea
sulZGPGsn+/f1I2W/ZtkCs4G+5RTQJQ0gTppRjZneeCFPRq6U8iR8POEV7FgBXs8
doUu7yogDMN7ht61HhRbrze/zvK1PA1wAohUbMvz9ATIartksF61/rvE9VEUeiWT
Ij7ccMQmjgFufe15HGHRGSLlJ7e7c3I=
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:44 2026 by rpki-client