Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0b13292-9b88-3b38-bc24-f10ac6cc5e4e.roa
File:                     e0b13292-9b88-3b38-bc24-f10ac6cc5e4e.roa (raw, json)
Hash identifier:          3ts5/8NTz22nX7LGI5SFTpwU4OTJzdEJuOHfeT8tnsc=
Subject key identifier:   56:F0:CD:2E:EA:51:56:E4:18:35:CE:D3:81:B5:94:5D:62:89:31:A7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D3394B387947663233491D940
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0b13292-9b88-3b38-bc24-f10ac6cc5e4e.roa
Signing time:             Tue 17 Mar 2026 19:27:25 +0000
ROA not before:           Tue 17 Mar 2026 19:27:25 +0000
ROA not after:            Mon 15 Jun 2026 19:27:25 +0000
asID:                     19905
IP address blocks:        173.23.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:33:94:b3:87:94:76:63:23:34:91:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar 17 19:27:25 2026 GMT
            Not After : Jun 15 19:27:25 2026 GMT
        Subject: CN=e3921042-1941-4297-a2f6-83e46724b25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:a2:a8:23:f9:19:8e:d5:18:c3:ed:18:94:
                    cf:27:18:f5:21:72:77:4f:6f:03:54:1a:ce:dd:0d:
                    24:9e:13:de:70:48:5d:9c:a4:6f:f8:d7:c7:d0:ad:
                    40:27:f4:16:a3:e8:2c:1c:c0:7c:e9:f3:10:c4:7a:
                    e4:8e:a5:fa:08:89:85:07:d7:5a:61:c1:f4:a3:f9:
                    2a:4a:d8:28:e2:cb:c0:81:71:e9:99:b7:6d:c0:56:
                    b7:b8:3b:24:87:14:d8:4f:e8:e7:c5:90:b1:b8:96:
                    43:0d:75:b7:51:ce:ac:79:d3:90:24:34:38:34:f9:
                    a2:a2:c3:87:ef:18:c0:2e:c0:0d:e8:38:6b:42:79:
                    dd:ce:76:c1:69:82:fe:25:b3:33:5a:ff:22:37:02:
                    5f:f4:f9:33:f9:73:b4:df:87:5b:73:f7:4a:13:0d:
                    80:bf:6e:a6:68:a1:b5:65:b4:72:54:b8:1a:dc:25:
                    95:e4:00:fc:4d:77:76:b2:0a:79:ef:58:6b:36:c0:
                    f9:16:2d:6c:11:6a:eb:28:b7:25:a1:87:ba:c2:c8:
                    9b:19:f4:11:68:8a:2c:86:9c:50:70:62:40:40:09:
                    ae:21:8f:fa:c3:a8:6b:93:55:f7:23:11:74:bc:53:
                    15:45:1b:1f:d0:b0:f1:cb:31:79:84:9a:5a:9f:2c:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F0:CD:2E:EA:51:56:E4:18:35:CE:D3:81:B5:94:5D:62:89:31:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e0b13292-9b88-3b38-bc24-f10ac6cc5e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:39:fa:a5:ae:3a:af:ca:f7:9a:82:a8:6e:eb:25:95:18:0b:
         82:bd:7e:67:bd:92:ca:d6:d0:10:43:86:f2:b0:37:c4:39:ed:
         84:f4:32:5f:72:51:60:bd:0f:3b:68:c8:5e:6f:6a:c6:f5:7a:
         4e:97:c9:b8:fc:2b:db:c0:46:40:29:8b:a9:f5:32:9f:35:f9:
         bb:32:0b:a9:64:76:76:22:01:21:c0:71:9f:5a:db:e9:9b:09:
         f0:8c:1b:4e:23:1e:02:ba:53:2e:a5:71:e3:f1:ae:de:5e:c6:
         36:5a:31:f6:ae:97:06:26:4b:77:d5:74:59:70:ef:4d:1c:5b:
         38:30:bd:ea:a2:20:f1:dc:f3:58:be:2f:28:ac:c3:7f:84:8b:
         fa:5e:28:74:4b:f2:d1:f6:33:be:37:9e:23:71:d7:89:28:a5:
         7e:f4:5c:85:fe:87:8a:1c:03:64:4a:a6:b4:a6:0e:f5:43:ce:
         35:69:26:84:ba:4a:49:97:23:f5:b0:7f:b9:35:1a:96:e1:a2:
         58:62:f2:79:a0:c7:8c:c1:e0:b8:da:fc:1a:b7:96:ac:ab:8f:
         d9:4d:cc:1c:eb:92:9c:cb:91:7a:03:98:14:3d:4d:fa:24:f2:
         ac:c2:41:82:c7:2e:49:b6:f7:af:a6:f6:bc:5d:28:b8:f9:ca:
         df:91:ad:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0zlLOHlHZjIzSR2UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxNzE5MjcyNVoXDTI2MDYxNTE5MjcyNVowLzEtMCsGA1UEAxMk
ZTM5MjEwNDItMTk0MS00Mjk3LWEyZjYtODNlNDY3MjRiMjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1SiqCP5GY7VGMPtGJTPJxj1IXJ3T28DVBrO
3Q0knhPecEhdnKRv+NfH0K1AJ/QWo+gsHMB86fMQxHrkjqX6CImFB9daYcH0o/kq
Stgo4svAgXHpmbdtwFa3uDskhxTYT+jnxZCxuJZDDXW3Uc6sedOQJDQ4NPmiosOH
7xjALsAN6DhrQnndznbBaYL+JbMzWv8iNwJf9Pkz+XO034dbc/dKEw2Av26maKG1
ZbRyVLga3CWV5AD8TXd2sgp571hrNsD5Fi1sEWrrKLcloYe6wsibGfQRaIoshpxQ
cGJAQAmuIY/6w6hrk1X3IxF0vFMVRRsf0LDxyzF5hJpanyz06QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFbwzS7qUVbkGDXO04G1lF1iiTGnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTBiMTMyOTItOWI4OC0z
YjM4LWJjMjQtZjEwYWM2Y2M1ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADU5+qWuOq/K95qCqG7rJZUYC4K9fme9ksrW0BBDhvKwN8Q57YT0Ml9y
UWC9DztoyF5vasb1ek6Xybj8K9vARkApi6n1Mp81+bsyC6lkdnYiASHAcZ9a2+mb
CfCMG04jHgK6Uy6lcePxrt5exjZaMfaulwYmS3fVdFlw700cWzgwveqiIPHc81i+
Lyisw3+Ei/peKHRL8tH2M743niNx14kopX70XIX+h4ocA2RKprSmDvVDzjVpJoS6
SkmXI/Wwf7k1Gpbholhi8nmgx4zB4Lja/Bq3lqyrj9lNzBzrkpzLkXoDmBQ9Tfok
8qzCQYLHLkm296+m9rxdKLj5yt+RrbU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:34:29 2026 by rpki-client