Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7c6a24e-a7d0-34d3-aa47-b31f4b498c4f.roa
File:                     b7c6a24e-a7d0-34d3-aa47-b31f4b498c4f.roa (raw, json)
Hash identifier:          Jqxv2+tJ9BmV9AKrSz6u3rkCckfkXswjUUDpfZqZupg=
Subject key identifier:   2C:9C:55:AE:46:90:7C:D0:1B:0E:CA:85:0E:FC:F6:7A:13:C7:2B:00
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584CC08E38500D3B776059310880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7c6a24e-a7d0-34d3-aa47-b31f4b498c4f.roa
Signing time:             Wed 04 Feb 2026 14:36:24 +0000
ROA not before:           Wed 04 Feb 2026 14:36:24 +0000
ROA not after:            Tue 05 May 2026 13:36:24 +0000
asID:                     15169
IP address blocks:        192.178.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:8e:38:50:0d:3b:77:60:59:31:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  4 14:36:24 2026 GMT
            Not After : May  5 13:36:24 2026 GMT
        Subject: CN=2f62d81d-d8dd-40ad-8fcf-616d02dbc853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:42:7f:7b:43:47:28:c1:d0:bd:26:3d:fa:
                    0a:cf:88:df:f9:7b:f3:d5:7c:d4:63:6f:c0:6e:eb:
                    a4:08:0a:7e:32:0c:62:02:17:e9:d3:87:4b:2d:b7:
                    ea:dc:1d:0e:fd:53:83:22:da:60:de:18:f9:62:e7:
                    7e:db:df:10:72:ba:c5:2b:68:fe:25:4c:2a:10:54:
                    d2:a7:6c:03:19:6f:13:0d:98:81:9a:20:4c:8e:07:
                    67:0f:86:6e:69:c7:ee:43:53:cf:d3:27:34:a0:82:
                    6d:13:63:1e:0b:75:f1:09:24:ac:53:be:55:79:a3:
                    bd:3b:75:6c:74:b1:61:fc:1c:20:39:3e:da:bb:49:
                    8a:d0:ae:d8:0f:23:be:d1:42:0d:23:e4:48:ea:02:
                    1b:cf:0d:b4:1f:d8:be:da:5e:74:67:38:2c:15:a4:
                    24:58:4b:0b:4a:1c:2c:a8:c5:1e:61:d3:ea:1b:bd:
                    69:4d:aa:ad:e8:4e:32:78:62:c0:4d:23:9c:de:e7:
                    cb:0e:41:dc:88:f0:ba:ed:78:0e:94:78:24:af:f7:
                    bd:12:ec:af:91:c8:1d:c8:32:cb:6d:c5:31:20:ad:
                    2c:35:01:37:b0:55:c0:5d:a9:ea:6d:6c:4a:f7:b1:
                    9e:71:80:86:b7:50:1c:55:52:08:c6:db:0f:2e:ad:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9C:55:AE:46:90:7C:D0:1B:0E:CA:85:0E:FC:F6:7A:13:C7:2B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b7c6a24e-a7d0-34d3-aa47-b31f4b498c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b9:ae:c5:6b:18:0e:47:fa:f0:04:e6:cc:ac:dc:f3:7a:f9:
         94:40:89:e7:fb:cc:19:18:9e:f6:78:e3:cf:3c:40:51:48:19:
         92:d6:da:d9:3a:da:9b:0b:7a:db:46:c8:77:d5:75:7a:ad:e7:
         28:a3:c5:29:05:ed:0e:01:9d:31:01:cb:5c:89:41:32:99:f2:
         c9:ad:25:97:a8:34:bd:1e:22:0e:04:b6:1f:b2:41:7e:ad:4c:
         a4:32:9c:9c:c3:67:00:c5:e7:56:d5:77:b7:a9:60:1f:bc:a6:
         be:d2:93:dc:d4:64:ea:24:b8:77:26:8e:04:01:d1:cd:1d:59:
         f8:e3:03:35:0a:bd:3e:43:c2:9f:9d:93:6d:40:00:a4:ea:fe:
         66:f7:b5:2f:0f:3c:36:07:dd:08:0d:86:18:d5:9c:ac:2a:88:
         be:23:8d:b2:ee:08:da:29:f2:46:4a:ec:40:1f:65:34:79:b1:
         3e:6c:06:38:a5:e5:fa:5c:7a:28:59:99:63:31:25:c4:91:92:
         e7:80:dd:e7:f6:67:ed:5c:de:a8:cf:70:80:52:0b:6e:74:36:
         4b:fd:02:af:6b:11:6b:d4:a7:23:7f:01:e0:2e:53:52:65:bd:
         ce:31:f5:77:30:7c:c7:b4:43:2b:bc:16:55:c1:3b:bb:18:3a:
         8f:01:89:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzAjjhQDTt3YFkxCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDIwNDE0MzYyNFoXDTI2MDUwNTEzMzYyNFowLzEtMCsGA1UEAxMk
MmY2MmQ4MWQtZDhkZC00MGFkLThmY2YtNjE2ZDAyZGJjODUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUVCf3tDRyjB0L0mPfoKz4jf+Xvz1XzUY2/A
buukCAp+MgxiAhfp04dLLbfq3B0O/VODItpg3hj5Yud+298QcrrFK2j+JUwqEFTS
p2wDGW8TDZiBmiBMjgdnD4ZuacfuQ1PP0yc0oIJtE2MeC3XxCSSsU75VeaO9O3Vs
dLFh/BwgOT7au0mK0K7YDyO+0UINI+RI6gIbzw20H9i+2l50ZzgsFaQkWEsLShws
qMUeYdPqG71pTaqt6E4yeGLATSOc3ufLDkHciPC67XgOlHgkr/e9EuyvkcgdyDLL
bcUxIK0sNQE3sFXAXanqbWxK97GecYCGt1AcVVIIxtsPLq2W6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCycVa5GkHzQGw7KhQ789noTxysAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjdjNmEyNGUtYTdkMC0z
NGQzLWFhNDctYjMxZjRiNDk4YzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLLsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABe5rsVrGA5H+vAE5sys3PN6+ZRAief7zBkYnvZ44888QFFIGZLW2tk6
2psLettGyHfVdXqt5yijxSkF7Q4BnTEBy1yJQTKZ8smtJZeoNL0eIg4Eth+yQX6t
TKQynJzDZwDF51bVd7epYB+8pr7Sk9zUZOokuHcmjgQB0c0dWfjjAzUKvT5Dwp+d
k21AAKTq/mb3tS8PPDYH3QgNhhjVnKwqiL4jjbLuCNop8kZK7EAfZTR5sT5sBjil
5fpceihZmWMxJcSRkueA3ef2Z+1c3qjPcIBSC250Nkv9Aq9rEWvUpyN/AeAuU1Jl
vc4x9XcwfMe0Qyu8FlXBO7sYOo8Bifs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:31 2026 by rpki-client