Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32f738d-e272-3502-be6b-3b1726c0da29.roa
File:                     f32f738d-e272-3502-be6b-3b1726c0da29.roa (raw, json)
Hash identifier:          vor+oUPgb+dOfe/Zje5kPiBwK8NPeOQas4OqUNwYYDI=
Subject key identifier:   01:F2:4B:EA:02:11:DF:38:5A:E0:C2:CD:38:ED:80:1C:C7:D7:F0:97
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584E059C4C8405E707DBBB30AEA0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32f738d-e272-3502-be6b-3b1726c0da29.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     15169
IP address blocks:        172.217.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:4c:84:05:e7:07:db:bb:30:ae:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=9f77feae-e7fe-447e-ac2c-28d6076197fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:28:7d:c1:91:3d:68:79:d4:f0:bf:e8:30:
                    de:20:03:28:2c:f7:56:7c:d5:c5:85:23:bd:5a:e4:
                    0d:a3:58:35:42:30:92:83:9d:5d:73:17:66:8c:b4:
                    a1:68:06:e6:3c:7d:75:7c:8c:a5:c1:25:e6:06:b4:
                    d6:1c:5f:f4:04:8c:0c:ff:90:d4:d4:fc:7d:88:2b:
                    58:32:da:ca:59:24:d5:28:93:51:df:d8:b7:60:0a:
                    76:84:f6:1d:31:c8:c5:6f:a2:8c:f6:2f:01:57:ae:
                    45:7e:6b:70:89:44:24:c4:82:78:4a:60:e2:9c:61:
                    b3:d3:01:8c:5c:d8:64:92:93:68:2a:38:81:b0:2e:
                    c5:90:08:c5:7e:52:dd:f5:3a:91:95:67:91:da:d0:
                    17:89:83:74:ef:ea:cb:3d:16:1c:57:28:b9:18:2c:
                    f1:84:7e:04:88:6b:b2:cb:fa:5a:f4:a7:85:d7:9c:
                    56:95:4e:69:57:3e:6f:49:66:ef:d3:bd:05:8b:eb:
                    02:2d:4e:48:50:e2:eb:ad:f7:e3:69:60:a3:9f:99:
                    07:0c:5e:ac:c2:2b:ce:30:5b:8d:44:88:27:44:3e:
                    d0:c8:f4:8b:21:9e:d5:93:93:ee:43:58:a5:57:54:
                    37:51:26:3a:04:72:e7:f1:3c:ee:d7:de:b5:b4:74:
                    ff:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F2:4B:EA:02:11:DF:38:5A:E0:C2:CD:38:ED:80:1C:C7:D7:F0:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f32f738d-e272-3502-be6b-3b1726c0da29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:63:9a:a7:d4:07:43:6e:9f:28:b1:a2:28:a7:49:07:02:8c:
         96:98:84:4b:ea:67:c4:e5:7b:af:07:0d:7d:ce:df:a5:e5:ba:
         4e:d2:5e:90:15:56:fb:36:18:f8:e3:07:49:8f:ce:aa:c9:90:
         4c:73:61:85:50:66:e6:0a:08:64:13:de:fe:6a:a3:97:37:87:
         95:fe:41:0b:19:5c:55:58:a3:07:76:aa:70:ce:77:8d:ba:7a:
         33:67:82:db:da:0f:30:75:41:76:70:00:a6:c8:08:30:f9:2e:
         4c:63:7a:42:87:54:88:a5:b9:01:13:d3:f7:bc:40:23:fc:c7:
         65:22:ac:40:a6:2c:81:5a:b3:7c:6a:66:a9:f8:0a:78:3f:3e:
         d5:cc:ee:10:92:65:13:cf:a9:bc:f9:d0:3a:b1:ef:84:20:a7:
         5a:3f:52:14:54:80:a7:b1:eb:ba:cc:b1:1d:8b:b0:5b:8b:27:
         8b:06:6c:47:b7:e9:36:bd:3a:57:cd:9e:2f:e1:1e:72:47:76:
         fa:a9:57:46:5c:5f:ec:7a:9a:e3:2b:79:6e:c4:8b:2e:d3:04:
         da:c5:a7:5b:f3:2f:34:46:51:b8:08:93:ab:d0:d8:e6:ee:16:
         94:4d:84:35:a1:8d:6b:8d:ca:88:2b:2e:9a:cc:21:49:65:87:
         6c:c4:e6:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnEyEBecH27swrqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk
OWY3N2ZlYWUtZTdmZS00NDdlLWFjMmMtMjhkNjA3NjE5N2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHcofcGRPWh51PC/6DDeIAMoLPdWfNXFhSO9
WuQNo1g1QjCSg51dcxdmjLShaAbmPH11fIylwSXmBrTWHF/0BIwM/5DU1Px9iCtY
MtrKWSTVKJNR39i3YAp2hPYdMcjFb6KM9i8BV65FfmtwiUQkxIJ4SmDinGGz0wGM
XNhkkpNoKjiBsC7FkAjFflLd9TqRlWeR2tAXiYN07+rLPRYcVyi5GCzxhH4EiGuy
y/pa9KeF15xWlU5pVz5vSWbv070Fi+sCLU5IUOLrrffjaWCjn5kHDF6swivOMFuN
RIgnRD7QyPSLIZ7Vk5PuQ1ilV1Q3USY6BHLn8Tzu1961tHT/NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHyS+oCEd84WuDCzTjtgBzH1/CXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjMyZjczOGQtZTI3Mi0z
NTAyLWJlNmItM2IxNzI2YzBkYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdjmqfUB0NunyixoiinSQcCjJaYhEvqZ8Tle68HDX3O36Xluk7SXpAV
Vvs2GPjjB0mPzqrJkExzYYVQZuYKCGQT3v5qo5c3h5X+QQsZXFVYowd2qnDOd426
ejNngtvaDzB1QXZwAKbICDD5LkxjekKHVIiluQET0/e8QCP8x2UirECmLIFas3xq
Zqn4Cng/PtXM7hCSZRPPqbz50Dqx74Qgp1o/UhRUgKex67rMsR2LsFuLJ4sGbEe3
6Ta9OlfNni/hHnJHdvqpV0ZcX+x6muMreW7Eiy7TBNrFp1vzLzRGUbgIk6vQ2Obu
FpRNhDWhjWuNyogrLprMIUllh2zE5u4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:19:05 2026 by rpki-client