Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa
File:                     d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa (raw, json)
Hash identifier:          jSOoB6LhW0Xv+l9AFKJ8zIVy/TPVcgR9o5FyyoTzQb4=
Subject key identifier:   CE:75:ED:21:1A:70:CA:C7:F9:36:AE:80:9D:66:FB:0B:51:4F:D3:9C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E0005FA51F5E1F84C10AB8B00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     396982
IP address blocks:        108.170.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:fa:51:f5:e1:f8:4c:10:ab:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=4b2654a0-6f71-4944-923f-6985e8b87deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:31:21:25:ac:ab:45:04:94:bc:41:9c:cd:d3:
                    11:68:63:7f:00:0a:43:3d:c9:0a:d3:01:fa:1c:fd:
                    56:af:0c:35:89:ce:35:be:b0:71:40:96:63:dd:7e:
                    e3:46:03:b8:e8:37:66:35:c8:1a:be:e1:74:79:6b:
                    7f:68:1a:f2:b0:9d:a3:62:cd:c7:99:f0:d2:fe:11:
                    37:13:3f:c7:68:43:94:c8:ea:a6:5f:fc:b9:48:8f:
                    e9:c8:30:02:83:29:93:bb:bd:17:3b:2c:11:38:32:
                    3e:fc:7d:37:2e:d3:08:a4:db:66:af:ab:2a:fe:5a:
                    27:51:8d:11:a5:84:60:b5:f5:ce:f9:b7:00:5a:72:
                    94:05:10:a6:d2:41:b6:37:fd:6c:83:5a:73:92:bc:
                    17:5b:01:15:d4:ca:1b:6e:9a:fb:99:ca:cb:f1:7e:
                    35:05:1d:c4:63:e7:6e:1d:9a:85:8b:4a:05:ce:52:
                    a8:9c:8e:67:3d:ec:78:41:a0:65:e5:e4:97:e9:a7:
                    d3:31:09:0b:b9:ec:0e:9b:f2:58:30:7e:80:50:90:
                    14:fc:ee:77:4f:72:15:ae:6f:14:a2:b3:6d:d0:d8:
                    82:20:51:a7:80:69:0f:64:2b:6c:bc:eb:d2:34:7b:
                    31:75:a0:c1:68:81:e3:50:17:29:91:5e:ae:ff:84:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:75:ED:21:1A:70:CA:C7:F9:36:AE:80:9D:66:FB:0B:51:4F:D3:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ac:e8:87:57:38:dc:7a:78:ef:e8:1a:34:a9:21:d8:81:d0:
         a5:d1:88:6c:cf:83:ec:d0:c0:bd:70:39:b3:3e:49:b2:a6:15:
         40:4f:c0:8b:a7:27:40:aa:e4:a5:dc:50:ec:1e:88:2c:d2:24:
         01:8f:c8:27:ec:de:4f:43:de:f9:2e:0c:5f:9b:c2:d3:ee:a3:
         60:e7:e0:5b:31:1b:01:09:26:11:a5:b8:9d:46:81:2c:e8:54:
         22:40:13:bf:28:17:2d:70:a8:eb:f4:20:c8:cd:05:f7:0c:1f:
         58:80:15:db:ec:a6:ee:fc:bf:d1:d6:f2:b0:b8:28:69:05:06:
         4f:00:d7:3b:5b:39:a9:8a:64:57:ee:38:59:46:6b:12:34:84:
         2f:c9:21:4c:74:79:41:ec:44:0e:8d:13:0e:98:5a:be:38:ec:
         51:e8:9f:c1:d9:96:bf:fb:80:ac:3b:6d:1e:06:f3:fa:c2:dc:
         f5:68:f9:90:5d:65:be:19:e7:7b:3e:69:06:59:2e:5a:2a:97:
         e3:14:ad:35:c2:a6:cc:ca:8b:c8:99:22:95:77:00:32:0f:9b:
         4d:37:da:cc:a4:f2:a1:4d:58:77:a2:d2:01:44:db:21:76:f0:
         e1:25:b1:93:67:1c:bc:36:b5:ec:73:f2:cc:d0:46:3f:13:aa:
         eb:4d:c1:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABfpR9eH4TBCriwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
NGIyNjU0YTAtNmY3MS00OTQ0LTkyM2YtNjk4NWU4Yjg3ZGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTEhJayrRQSUvEGczdMRaGN/AApDPckK0wH6
HP1Wrww1ic41vrBxQJZj3X7jRgO46DdmNcgavuF0eWt/aBrysJ2jYs3HmfDS/hE3
Ez/HaEOUyOqmX/y5SI/pyDACgymTu70XOywRODI+/H03LtMIpNtmr6sq/lonUY0R
pYRgtfXO+bcAWnKUBRCm0kG2N/1sg1pzkrwXWwEV1Mobbpr7mcrL8X41BR3EY+du
HZqFi0oFzlKonI5nPex4QaBl5eSX6afTMQkLuewOm/JYMH6AUJAU/O53T3IVrm8U
orNt0NiCIFGngGkPZCtsvOvSNHsxdaDBaIHjUBcpkV6u/4S2yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM517SEacMrH+TaugJ1m+wtRT9OcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDRmZDlhOTEtZWRiMi0z
MDI1LWJjNzQtMWEwNTRkNmM2MTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKms6IdXONx6eO/oGjSpIdiB0KXRiGzPg+zQwL1wObM+SbKmFUBPwIun
J0Cq5KXcUOweiCzSJAGPyCfs3k9D3vkuDF+bwtPuo2Dn4FsxGwEJJhGluJ1GgSzo
VCJAE78oFy1wqOv0IMjNBfcMH1iAFdvspu78v9HW8rC4KGkFBk8A1ztbOamKZFfu
OFlGaxI0hC/JIUx0eUHsRA6NEw6YWr447FHon8HZlr/7gKw7bR4G8/rC3PVo+ZBd
Zb4Z53s+aQZZLloql+MUrTXCpszKi8iZIpV3ADIPm0032syk8qFNWHei0gFE2yF2
8OElsZNnHLw2texz8szQRj8TqutNwfo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:44 2026 by rpki-client