Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/353d57dd-8746-3f46-856b-63fd1488aeae.roa
File:                     353d57dd-8746-3f46-856b-63fd1488aeae.roa (raw, json)
Hash identifier:          0Teg9zVn6RhgTjNoBkoGSW7gy8tTxJYKeS/XGpfPRWI=
Subject key identifier:   40:42:20:30:23:FB:6C:24:D6:70:D8:39:3F:09:31:1E:DD:83:AE:42
Certificate issuer:       /CN=378928e8-c134-40aa-9858-3838053cbbe9
Certificate serial:       010D0C9F4328584E885A449A9AB7C2B85099EB80
Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/353d57dd-8746-3f46-856b-63fd1488aeae.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     12261
IP address blocks:        173.242.240.0/22 maxlen: 22
                          173.242.244.0/22 maxlen: 22
                          173.242.248.0/22 maxlen: 22
                          173.242.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:44:9a:9a:b7:c2:b8:50:99:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=2366536e-11e8-4024-93f6-90d3b2184daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:95:0d:cd:e1:25:f6:74:0e:37:8e:a9:77:
                    d3:0c:c7:17:cf:f3:5a:88:3a:d9:2b:fb:21:97:40:
                    8b:8e:18:7f:c3:86:40:29:6f:47:bc:98:f6:d1:fb:
                    55:b7:ab:22:d8:8c:d8:c2:b0:69:cd:7d:46:8a:e8:
                    4b:69:0d:44:8b:60:49:b0:b4:aa:35:5f:51:ab:91:
                    e1:96:9c:27:9b:ac:41:69:e3:9c:13:81:92:61:94:
                    5a:3c:d8:06:3a:ac:7d:20:ca:35:52:f9:a8:72:06:
                    d7:ed:68:4d:54:95:e2:8a:f0:6e:96:ad:23:d6:93:
                    0b:d4:29:be:b1:d5:1b:99:d1:85:68:3c:c8:34:3e:
                    9a:95:15:0c:5d:33:3a:f8:e9:8d:d3:0b:fe:17:70:
                    11:ec:40:54:1d:67:65:46:18:ce:76:4a:d9:bf:b5:
                    9e:b1:ec:e0:db:8b:03:b1:d0:83:80:09:98:ee:b4:
                    07:85:41:be:0b:63:1d:b8:f4:bc:88:0b:c9:1b:a2:
                    00:46:23:84:6b:d1:ab:0e:19:ec:74:a8:88:de:4d:
                    0f:d1:05:ec:b7:76:34:7d:3a:b8:de:6e:fe:29:de:
                    b1:27:65:e0:18:27:7f:71:74:48:18:f6:b7:df:4a:
                    0c:03:8b:29:91:ce:98:c6:ff:49:d8:f3:22:31:98:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:42:20:30:23:FB:6C:24:D6:70:D8:39:3F:09:31:1E:DD:83:AE:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/353d57dd-8746-3f46-856b-63fd1488aeae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl

            X509v3 Authority Key Identifier:
                keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:8b:3d:01:0a:07:64:d8:64:18:a1:9a:4c:41:35:d6:e5:96:
         f3:ab:9d:c6:5b:05:42:01:13:2e:e0:1b:6d:93:b3:6b:f5:8a:
         84:a3:a3:8a:0e:48:ce:1d:b3:61:d5:e5:87:81:68:b7:9e:6e:
         7c:de:83:34:17:bf:84:ba:5e:8a:3e:ae:fc:93:14:c1:8f:50:
         0f:66:f4:d3:77:8e:ea:b4:41:96:fb:fe:32:f1:13:be:15:e5:
         2c:06:86:3b:b1:29:c7:ab:f6:1b:2a:47:ba:e0:80:f9:52:ec:
         fc:49:25:97:f7:fe:12:d2:f9:90:f5:84:84:f5:9f:2d:6d:a8:
         27:c2:11:2f:e4:ee:d8:c7:c5:69:37:7e:2a:78:a1:10:52:e7:
         18:04:3b:70:bf:cf:5c:25:47:fd:ac:b1:a4:4b:6a:89:03:94:
         50:83:e4:59:3f:06:10:52:c8:4b:5b:64:96:35:18:15:9f:c8:
         38:b3:38:58:69:fc:94:ae:1c:99:5e:1f:80:a9:cb:37:9e:fc:
         d6:f3:c9:a4:15:e7:1d:c2:df:b6:0b:92:bd:01:1b:55:b0:1c:
         d7:74:0e:a6:8e:52:55:d3:4d:5d:54:ce:0c:5a:85:30:78:2a:
         21:f2:f6:7d:17:f5:51:ca:d1:cc:08:8c:9e:6f:f2:ed:c4:6e:
         3e:09:fc:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWkSamrfCuFCZ64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzc4OTI4ZTgtYzEzNC00MGFhLTk4NTgtMzgzODA1M2Ni
YmU5MB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
MjM2NjUzNmUtMTFlOC00MDI0LTkzZjYtOTBkM2IyMTg0ZGFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusuVDc3hJfZ0DjeOqXfTDMcXz/NaiDrZK/sh
l0CLjhh/w4ZAKW9HvJj20ftVt6si2IzYwrBpzX1GiuhLaQ1Ei2BJsLSqNV9Rq5Hh
lpwnm6xBaeOcE4GSYZRaPNgGOqx9IMo1UvmocgbX7WhNVJXiivBulq0j1pML1Cm+
sdUbmdGFaDzIND6alRUMXTM6+OmN0wv+F3AR7EBUHWdlRhjOdkrZv7Wesezg24sD
sdCDgAmY7rQHhUG+C2MduPS8iAvJG6IARiOEa9GrDhnsdKiI3k0P0QXst3Y0fTq4
3m7+Kd6xJ2XgGCd/cXRIGPa330oMA4spkc6Yxv9J2PMiMZgncQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEBCIDAj+2wk1nDYOT8JMR7dg65CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5
MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4MDUzY2JiZTkvMzUzZDU3ZGQtODc0Ni0z
ZjQ2LTg1NmItNjNmZDE0ODhhZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzc4OTI4ZTgtYzEzNC00MGFhLTk4
NTgtMzgzODA1M2NiYmU5LzM3ODkyOGU4LWMxMzQtNDBhYS05ODU4LTM4MzgwNTNj
YmJlOS5jcmwwHwYDVR0jBBgwFoAUBYTnTjebSl6FC+Qck2G4ZCYVGJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4
MDUzY2JiZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfLwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKLPQEKB2TYZBihmkxBNdbllvOrncZbBUIBEy7gG22Ts2v1ioSjo4oO
SM4ds2HV5YeBaLeebnzegzQXv4S6Xoo+rvyTFMGPUA9m9NN3juq0QZb7/jLxE74V
5SwGhjuxKcer9hsqR7rggPlS7PxJJZf3/hLS+ZD1hIT1ny1tqCfCES/k7tjHxWk3
fip4oRBS5xgEO3C/z1wlR/2ssaRLaokDlFCD5Fk/BhBSyEtbZJY1GBWfyDizOFhp
/JSuHJleH4Cpyzee/NbzyaQV5x3C37YLkr0BG1WwHNd0DqaOUlXTTV1UzgxahTB4
KiHy9n0X9VHK0cwIjJ5v8u3Ebj4J/LA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:29:49 2026 by rpki-client