Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/17081104-1472-3424-a75e-699ec47d4f30.roa
File:                     17081104-1472-3424-a75e-699ec47d4f30.roa (raw, json)
Hash identifier:          O2LMBToQBYYCSgmR+H6xXE3IVu0FBrRba4aRAKapwzM=
Subject key identifier:   74:69:20:9A:D0:2C:18:A0:6C:02:82:F5:4B:79:7F:D4:CA:D1:D0:57
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584F6F23063B15A4958810A25480
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/17081104-1472-3424-a75e-699ec47d4f30.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     27552
IP address blocks:        198.160.60.0/23 maxlen: 24
                          198.160.62.0/23 maxlen: 24
                          199.114.248.0/22 maxlen: 24
                          208.118.224.0/20 maxlen: 24
                          216.93.240.0/20 maxlen: 24
                          2001:4830::/32 maxlen: 48
                          2001:4830:100::/40 maxlen: 48
                          2001:4830:c000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:06:3b:15:a4:95:88:10:a2:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=0ae22f54-865a-4e0f-b3b8-fc97f97c4c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9e:15:96:17:cf:c3:e0:62:08:79:3c:27:51:
                    8f:2f:72:ff:5c:b4:09:04:3f:90:22:ad:70:d3:b2:
                    f2:23:e2:43:73:c6:f4:ab:7f:05:8b:b5:41:05:1b:
                    92:36:80:a0:dc:cc:97:2d:92:4e:d6:a8:af:1a:0a:
                    e4:ae:e4:59:9a:03:55:d4:7f:3d:95:07:9a:ab:96:
                    6c:87:40:6c:b2:d5:57:43:1f:00:ba:59:6f:bb:69:
                    0e:0f:be:d7:fc:d3:3c:52:82:30:7d:b2:41:89:65:
                    01:30:2a:c1:5d:57:0c:0d:ef:9f:fc:bb:da:9a:c6:
                    45:53:ef:21:30:f8:b5:32:a7:4a:a1:5f:57:24:eb:
                    f0:9a:20:0c:64:57:50:57:95:18:6c:52:c8:e8:0b:
                    12:bc:a1:bb:4f:ef:e7:ad:c7:36:7a:a2:ab:e6:4d:
                    19:35:c3:21:8f:73:8b:81:3a:af:a3:d2:f3:d5:53:
                    34:7e:6f:82:55:88:93:24:c3:4a:f0:77:62:24:e5:
                    ac:ad:80:87:91:a0:2d:42:cb:89:04:af:01:49:43:
                    7b:b3:c3:fa:1c:94:ad:14:75:0a:25:41:f9:88:bf:
                    ec:15:f4:56:2c:60:f8:15:e1:74:c7:08:92:a0:30:
                    ef:ec:ce:e9:3f:78:3c:bb:42:07:76:88:3f:29:1a:
                    ee:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:69:20:9A:D0:2C:18:A0:6C:02:82:F5:4B:79:7F:D4:CA:D1:D0:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/17081104-1472-3424-a75e-699ec47d4f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.60.0/22
                  199.114.248.0/22
                  208.118.224.0/20
                  216.93.240.0/20
                IPv6:
                  2001:4830::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:3b:53:ed:60:4a:53:81:c9:82:fe:1c:44:73:b8:30:96:3c:
         44:0e:32:2f:59:3c:af:d0:e9:cd:59:c3:2d:18:af:0e:e8:88:
         a3:e5:07:42:73:d9:b6:6a:64:db:61:0c:bd:51:ad:0f:ca:84:
         65:1d:ad:1d:27:d5:6a:b4:7a:7b:c6:33:9e:03:aa:48:0f:24:
         22:d6:c1:49:f1:c5:a8:85:a8:e9:73:58:de:b1:48:56:8b:75:
         b8:78:ca:35:f5:40:14:56:8e:df:2f:c3:93:c4:d1:72:55:6d:
         f5:86:f0:01:af:cc:0f:7c:de:14:4c:f5:0f:ea:2d:e8:3d:16:
         a6:35:6a:b0:05:74:43:f9:8d:cf:32:32:ef:10:7d:73:42:1a:
         0c:fb:73:cf:9a:e3:26:77:c2:d7:88:d9:83:d9:1b:8b:cc:cf:
         e5:3d:c9:46:aa:79:dc:79:ad:93:c3:3e:c5:00:9d:66:1e:96:
         91:43:94:5e:b5:e9:d6:06:4c:6e:43:ed:1f:98:99:a2:3b:ec:
         d2:2a:3c:ae:62:35:ef:40:0d:21:e7:78:83:1c:88:59:86:64:
         65:52:68:89:7e:2d:9c:e5:85:6b:76:1d:e5:cd:45:93:c3:1b:
         60:9f:fc:12:c9:3a:34:28:4e:5d:26:ed:97:e4:1d:f1:70:d9:
         02:17:bf:93
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE9vIwY7FaSViBCiVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5
MWRkMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
MGFlMjJmNTQtODY1YS00ZTBmLWIzYjgtZmM5N2Y5N2M0YzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp4VlhfPw+BiCHk8J1GPL3L/XLQJBD+QIq1w
07LyI+JDc8b0q38Fi7VBBRuSNoCg3MyXLZJO1qivGgrkruRZmgNV1H89lQeaq5Zs
h0BsstVXQx8Aullvu2kOD77X/NM8UoIwfbJBiWUBMCrBXVcMDe+f/LvamsZFU+8h
MPi1MqdKoV9XJOvwmiAMZFdQV5UYbFLI6AsSvKG7T+/nrcc2eqKr5k0ZNcMhj3OL
gTqvo9Lz1VM0fm+CVYiTJMNK8HdiJOWsrYCHkaAtQsuJBK8BSUN7s8P6HJStFHUK
JUH5iL/sFfRWLGD4FeF0xwiSoDDv7M7pP3g8u0IHdog/KRru3wIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFHRpIJrQLBigbAKC9Ut5f9TK0dBXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2
MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvMTcwODExMDQtMTQ3Mi0z
NDI0LWE3NWUtNjk5ZWM0N2Q0ZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1
NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx
OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl
ZGQ4MTkxZGQuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCxqA8AwQC
x3L4AwQE0HbgAwQE2F3wMA0EAgACMAcDBQAgAUgwMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABQ7U+1gSlOB
yYL+HERzuDCWPEQOMi9ZPK/Q6c1Zwy0Yrw7oiKPlB0Jz2bZqZNthDL1RrQ/KhGUd
rR0n1Wq0envGM54DqkgPJCLWwUnxxaiFqOlzWN6xSFaLdbh4yjX1QBRWjt8vw5PE
0XJVbfWG8AGvzA983hRM9Q/qLeg9FqY1arAFdEP5jc8yMu8QfXNCGgz7c8+a4yZ3
wteI2YPZG4vMz+U9yUaqedx5rZPDPsUAnWYelpFDlF616dYGTG5D7R+YmaI77NIq
PK5iNe9ADSHneIMciFmGZGVSaIl+LZzlhWt2HeXNRZPDG2Cf/BLJOjQoTl0m7Zfk
HfFw2QIXv5M=
-----END CERTIFICATE-----
Generated at Tue Oct 13 04:36:05 2026 by rpki-client