Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68dab11e-d192-3f30-83b6-9ea314f94268.roa
File:                     68dab11e-d192-3f30-83b6-9ea314f94268.roa (raw, json)
Hash identifier:          2tWWhq6tUrshPxYPv0sfgJH1ul69+ib51IJ3E+Lr08Q=
Subject key identifier:   19:27:10:D5:44:7D:92:B6:90:BB:2D:2F:EB:F1:96:7D:8A:0A:E6:58
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059BBBB0ABA0178ACCF73880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68dab11e-d192-3f30-83b6-9ea314f94268.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        173.194.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:bb:b0:ab:a0:17:8a:cc:f7:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=377d6c5e-c3ec-491f-ae37-ac2ba0c744c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:e0:97:4d:71:dd:04:e2:a9:6a:5b:ba:fc:9a:
                    c7:42:a9:4f:24:2c:2d:43:c7:7d:23:71:08:af:d6:
                    77:49:89:49:4d:68:78:6b:df:06:d7:18:a0:25:f1:
                    81:29:b0:e9:5a:1d:2c:89:29:a2:9d:f3:8e:aa:75:
                    21:c2:8c:ee:0d:fa:16:4b:dd:8f:8f:f2:b2:80:06:
                    9c:c9:c7:12:a9:a9:6c:77:f2:6c:81:f3:b3:11:07:
                    33:5d:94:91:87:2c:7c:a8:08:f3:0d:af:3e:0d:e5:
                    2a:33:c1:93:32:50:af:e9:b1:71:4e:41:be:57:cc:
                    49:0b:08:ae:dc:f1:cb:0f:3b:4b:17:ea:f3:fc:01:
                    fc:a2:65:94:bd:4a:c0:cf:a4:33:1f:b2:a2:ed:55:
                    d1:fa:df:0a:13:ac:8a:1d:30:56:15:20:89:e9:e2:
                    91:07:c4:1e:ab:9e:41:53:e1:2e:e8:4e:4b:55:2e:
                    7f:ab:73:3b:39:7e:4c:9a:da:fa:bb:26:cd:53:3c:
                    b7:9b:98:fb:50:28:63:79:7b:bc:82:58:80:0f:3c:
                    f0:64:0a:74:ed:94:63:c6:8b:2b:26:70:05:d8:88:
                    75:89:dd:64:2a:f3:7a:05:c1:67:8a:18:aa:de:0e:
                    82:6a:87:e9:b7:53:ac:40:3a:da:9f:d5:8c:57:40:
                    ca:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:27:10:D5:44:7D:92:B6:90:BB:2D:2F:EB:F1:96:7D:8A:0A:E6:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68dab11e-d192-3f30-83b6-9ea314f94268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6a:44:a6:f9:01:41:b6:f1:ca:54:21:41:0c:b5:e8:68:e8:
         d9:c6:3b:61:fd:a0:06:29:ca:0c:45:8d:35:52:7f:29:44:0b:
         9f:0e:96:7d:ad:23:8a:85:b8:89:91:f6:cd:5f:de:98:99:cd:
         ab:04:5d:ca:38:2e:2c:c5:a0:00:87:57:12:38:67:d8:73:fd:
         5d:84:29:9f:9d:f7:d8:87:76:55:c1:92:37:1e:78:2c:37:a2:
         00:ef:48:9b:f0:b2:93:a6:14:86:48:16:3f:b2:f7:5e:46:d6:
         53:4a:f7:9c:0f:bf:29:f1:aa:d4:ba:e2:6d:ce:a5:b4:83:09:
         dc:8c:7b:d9:b8:a9:39:3c:11:eb:cf:cc:d3:53:dd:bc:d5:54:
         dd:9e:3e:5e:ce:4e:47:aa:d3:4b:56:13:22:cb:00:a2:14:cd:
         28:ee:64:8b:e8:d0:66:cb:1e:39:2a:d0:77:29:a4:60:d7:e3:
         d7:22:05:49:fb:93:01:90:90:cb:5c:9f:f2:02:ad:47:71:70:
         1d:2d:ec:95:59:a5:13:d2:66:20:8b:b0:0c:ec:72:e6:5b:84:
         3c:e5:32:96:65:14:68:e2:95:b1:7b:3e:46:03:56:47:4c:e9:
         2c:4f:ba:56:5c:86:cf:13:ac:b4:59:c0:eb:b8:e7:8c:b3:0d:
         1a:f3:38:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm7uwq6AXisz3OIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
Mzc3ZDZjNWUtYzNlYy00OTFmLWFlMzctYWMyYmEwYzc0NGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+eCXTXHdBOKpalu6/JrHQqlPJCwtQ8d9I3EI
r9Z3SYlJTWh4a98G1xigJfGBKbDpWh0siSminfOOqnUhwozuDfoWS92Pj/KygAac
yccSqalsd/JsgfOzEQczXZSRhyx8qAjzDa8+DeUqM8GTMlCv6bFxTkG+V8xJCwiu
3PHLDztLF+rz/AH8omWUvUrAz6QzH7Ki7VXR+t8KE6yKHTBWFSCJ6eKRB8Qeq55B
U+Eu6E5LVS5/q3M7OX5Mmtr6uybNUzy3m5j7UChjeXu8gliADzzwZAp07ZRjxosr
JnAF2Ih1id1kKvN6BcFnihiq3g6Caofpt1OsQDran9WMV0DKawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBknENVEfZK2kLstL+vxln2KCuZYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhkYWIxMWUtZDE5Mi0z
ZjMwLTgzYjYtOWVhMzE0Zjk0MjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJqRKb5AUG28cpUIUEMteho6NnGO2H9oAYpygxFjTVSfylEC58Oln2t
I4qFuImR9s1f3piZzasEXco4LizFoACHVxI4Z9hz/V2EKZ+d99iHdlXBkjceeCw3
ogDvSJvwspOmFIZIFj+y915G1lNK95wPvynxqtS64m3OpbSDCdyMe9m4qTk8EevP
zNNT3bzVVN2ePl7OTkeq00tWEyLLAKIUzSjuZIvo0GbLHjkq0HcppGDX49ciBUn7
kwGQkMtcn/ICrUdxcB0t7JVZpRPSZiCLsAzscuZbhDzlMpZlFGjilbF7PkYDVkdM
6SxPulZchs8TrLRZwOu454yzDRrzOHg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:14:28 2026 by rpki-client