Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ae0857b-014b-3e54-a84d-e870cfb7a555.roa
File:                     0ae0857b-014b-3e54-a84d-e870cfb7a555.roa (raw, json)
Hash identifier:          fId32IJoVnxRALxJ54femNfB4pddwbIkBZsOayf38eA=
Subject key identifier:   3E:90:1E:ED:F0:86:97:AF:C7:93:44:6B:B2:1A:13:B2:70:1D:2D:B4
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059BBF278EBF877DBA4DF800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ae0857b-014b-3e54-a84d-e870cfb7a555.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        173.194.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:bf:27:8e:bf:87:7d:ba:4d:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=8e47f8ed-2523-460d-aee1-1bc9872f86f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2a:e4:f1:32:64:6c:dc:d9:38:62:71:9a:bc:
                    66:f0:b0:cb:14:8f:00:97:0e:97:74:88:44:d1:69:
                    a6:65:c3:1d:76:e2:4d:d1:82:04:b7:80:f9:5c:b9:
                    7c:97:2d:64:9c:a4:72:27:99:d1:00:ed:96:ce:18:
                    43:53:d4:b9:72:5c:c5:4c:26:f3:a6:e0:34:59:f7:
                    62:3c:7f:1d:8f:82:a8:26:af:74:b9:fe:82:42:b0:
                    19:72:d4:b1:a5:e1:ff:47:db:18:2f:74:92:02:89:
                    36:d2:e6:80:3a:8c:db:f0:61:0b:bf:85:71:15:41:
                    ca:1d:9f:e1:38:9b:d8:54:8d:aa:e5:bf:f6:11:0a:
                    76:46:21:85:07:11:18:0d:61:72:3c:25:55:9f:fe:
                    1d:1a:de:e2:4c:6c:dc:68:a9:25:b4:0e:35:33:f6:
                    b8:39:c3:26:46:88:d2:2b:ed:c7:76:e6:9b:98:80:
                    de:30:72:1e:b0:39:35:db:f3:6e:fd:36:d7:b6:04:
                    55:6d:9a:50:28:69:28:18:95:39:a5:67:2b:ee:21:
                    04:c9:ae:0c:53:24:b0:f6:b7:4c:7f:f3:88:8d:5c:
                    d0:29:8e:77:d4:99:32:0e:f7:cb:5f:63:e3:33:b7:
                    0b:1f:56:8f:99:1a:41:a7:71:50:1f:6f:d8:d6:f8:
                    6b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:90:1E:ED:F0:86:97:AF:C7:93:44:6B:B2:1A:13:B2:70:1D:2D:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ae0857b-014b-3e54-a84d-e870cfb7a555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:98:90:b4:77:27:01:e3:39:cc:52:69:7f:e1:a9:51:c0:20:
         e3:53:b2:62:17:e9:3e:70:b6:11:f0:0f:98:e3:54:1e:85:3d:
         6e:9e:e9:78:a0:5f:e4:df:77:ce:9d:58:22:36:fe:aa:fc:de:
         06:d7:84:79:fa:06:9e:cf:4f:14:e6:86:21:bf:94:b7:e8:04:
         79:ad:06:78:46:a7:43:78:e6:47:40:24:d8:3f:37:8c:2f:08:
         4a:9f:0a:5a:57:13:cc:d8:18:92:37:6c:07:a6:c5:12:78:bf:
         a6:40:20:f0:54:ce:7f:8b:86:66:1d:c8:dd:80:b6:ee:83:d6:
         e7:74:27:ad:26:9b:6d:e5:50:7f:75:be:51:04:b9:af:5d:90:
         57:45:80:1d:15:da:63:27:e5:3c:5a:b9:bd:ff:fb:61:bf:f1:
         f4:40:c7:ca:a4:d6:6f:6e:fd:91:e7:55:de:37:62:bf:36:a2:
         49:37:28:6a:2d:cb:27:92:5b:44:58:d4:6a:3f:b7:98:fb:9f:
         4c:a2:dd:39:3b:09:f8:2f:d8:49:b4:e3:4d:a4:9f:d8:0f:ac:
         45:77:21:42:30:99:e7:c0:55:ad:6b:34:d8:51:35:41:a6:70:
         26:13:a0:95:a0:06:63:19:ec:4d:07:62:dd:e1:0c:89:ca:32:
         a7:be:40:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm78njr+HfbpN+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
OGU0N2Y4ZWQtMjUyMy00NjBkLWFlZTEtMWJjOTg3MmY4NmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSrk8TJkbNzZOGJxmrxm8LDLFI8Alw6XdIhE
0WmmZcMdduJN0YIEt4D5XLl8ly1knKRyJ5nRAO2WzhhDU9S5clzFTCbzpuA0Wfdi
PH8dj4KoJq90uf6CQrAZctSxpeH/R9sYL3SSAok20uaAOozb8GELv4VxFUHKHZ/h
OJvYVI2q5b/2EQp2RiGFBxEYDWFyPCVVn/4dGt7iTGzcaKkltA41M/a4OcMmRojS
K+3HduabmIDeMHIesDk12/Nu/TbXtgRVbZpQKGkoGJU5pWcr7iEEya4MUySw9rdM
f/OIjVzQKY531JkyDvfLX2PjM7cLH1aPmRpBp3FQH2/Y1vhrNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6QHu3whpevx5NEa7IaE7JwHS20MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMGFlMDg1N2ItMDE0Yi0z
ZTU0LWE4NGQtZTg3MGNmYjdhNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErcIwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJWYkLR3JwHjOcxSaX/hqVHAIONTsmIX6T5wthHwD5jjVB6FPW6e6Xig
X+Tfd86dWCI2/qr83gbXhHn6Bp7PTxTmhiG/lLfoBHmtBnhGp0N45kdAJNg/N4wv
CEqfClpXE8zYGJI3bAemxRJ4v6ZAIPBUzn+LhmYdyN2Atu6D1ud0J60mm23lUH91
vlEEua9dkFdFgB0V2mMn5Txaub3/+2G/8fRAx8qk1m9u/ZHnVd43Yr82okk3KGot
yyeSW0RY1Go/t5j7n0yi3Tk7Cfgv2Em0402kn9gPrEV3IUIwmefAVa1rNNhRNUGm
cCYToJWgBmMZ7E0HYt3hDInKMqe+QJI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:03 2026 by rpki-client