Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/27a646cb-b320-389c-8d7a-ff405cccc4c4.roa
File:                     27a646cb-b320-389c-8d7a-ff405cccc4c4.roa (raw, json)
Hash identifier:          CiXOzyRGGl/JxWq1a+D2UiG5LzgoR1dlnbu1VANqj6k=
Subject key identifier:   39:05:98:9B:81:82:D5:4B:9F:FC:5B:B8:B9:BB:89:89:31:09:E8:E5
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F49898410E13B7E377686E900
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/27a646cb-b320-389c-8d7a-ff405cccc4c4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        173.230.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:84:10:e1:3b:7e:37:76:86:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5115d55c-4147-4c18-97de-5e04258f7acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4f:40:b0:1c:23:ae:8d:8f:47:10:6d:44:16:
                    74:2c:43:82:74:f6:7f:77:e4:93:f7:78:03:21:3a:
                    8d:fc:52:f3:5a:b0:6b:85:9b:15:92:0e:a6:98:97:
                    34:75:34:b2:e2:86:7d:59:7b:39:df:ab:c4:e9:4a:
                    22:f3:53:5c:36:c4:a8:52:2b:e9:4c:5d:20:ca:5f:
                    64:ae:c9:12:b8:18:54:4f:50:54:b5:31:5e:94:d8:
                    d8:75:63:8f:a4:82:e5:ad:c2:8b:b8:1e:9f:c7:99:
                    91:0a:ed:0b:23:3c:0f:d7:38:aa:3e:0f:98:d1:00:
                    d3:3d:3b:09:3d:c1:d2:2b:26:4c:bc:3a:c2:1b:bf:
                    15:68:b6:e7:3a:16:76:71:c4:39:40:0f:72:a9:cd:
                    5c:86:08:67:b1:51:9e:94:1b:c6:45:4f:89:22:d0:
                    cf:dc:9c:ac:5e:dc:f0:49:6c:31:43:5e:f4:44:2f:
                    1f:12:5c:9c:ea:e8:6b:55:b6:f3:b9:1d:b2:18:0e:
                    60:72:bb:e5:75:0d:1f:75:96:28:05:21:e5:e8:eb:
                    d5:49:c7:5d:a9:75:2a:f9:db:7e:92:78:ef:71:9b:
                    88:17:9e:e2:cd:94:f8:22:02:6a:5b:ea:6f:5c:05:
                    a5:2e:e9:00:00:86:2e:42:f1:b1:80:fb:a8:79:a0:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:05:98:9B:81:82:D5:4B:9F:FC:5B:B8:B9:BB:89:89:31:09:E8:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/27a646cb-b320-389c-8d7a-ff405cccc4c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1c:f4:d1:0c:14:32:fa:ab:c6:ac:a6:10:69:50:d5:df:9b:
         49:be:98:f0:aa:a6:fe:a0:e1:85:0e:2d:a3:07:eb:3c:45:57:
         ff:e5:64:1b:96:3a:80:e5:97:2d:65:48:5f:c8:fd:1c:76:1e:
         b1:bd:cb:ee:f7:6e:1f:6a:85:da:48:bb:4f:30:60:50:53:69:
         24:83:e3:e9:cc:d6:c4:86:68:33:be:21:74:67:79:0d:80:d5:
         22:1b:21:06:5c:0b:d6:d2:2b:fc:dc:8a:1b:89:b0:3e:fc:59:
         66:d2:cb:fa:ae:00:5e:30:59:34:eb:25:18:84:49:1d:8d:23:
         d1:5d:3d:40:0e:2e:ce:ff:ef:03:9f:c0:7f:ec:e3:f5:1f:ad:
         71:ec:58:98:6a:e8:38:ee:80:c8:1f:a5:5e:3f:c5:9d:31:bc:
         76:9e:c6:4f:3b:74:46:20:9a:09:c8:94:34:bd:db:57:dc:3a:
         a7:7e:a6:35:90:ba:ec:eb:10:57:ba:b4:00:db:cd:02:b8:49:
         1e:3d:d5:5a:34:ab:a7:1e:41:31:f2:6c:0f:9c:a3:f7:e0:f2:
         0a:5a:74:c6:d3:b6:f7:e7:dc:8e:56:21:a0:24:0e:f6:28:fd:
         e1:b6:ab:31:b3:91:2c:ff:bf:d0:b8:6f:6d:b0:e0:7d:4b:3c:
         1c:bd:fb:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiYQQ4Tt+N3aG6QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTExNWQ1NWMtNDE0Ny00YzE4LTk3ZGUtNWUwNDI1OGY3YWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5U9AsBwjro2PRxBtRBZ0LEOCdPZ/d+ST93gD
ITqN/FLzWrBrhZsVkg6mmJc0dTSy4oZ9WXs536vE6Uoi81NcNsSoUivpTF0gyl9k
rskSuBhUT1BUtTFelNjYdWOPpILlrcKLuB6fx5mRCu0LIzwP1ziqPg+Y0QDTPTsJ
PcHSKyZMvDrCG78VaLbnOhZ2ccQ5QA9yqc1chghnsVGelBvGRU+JItDP3JysXtzw
SWwxQ170RC8fElyc6uhrVbbzuR2yGA5gcrvldQ0fdZYoBSHl6OvVScddqXUq+dt+
knjvcZuIF57izZT4IgJqW+pvXAWlLukAAIYuQvGxgPuoeaAitQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDkFmJuBgtVLn/xbuLm7iYkxCejlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMjdhNjQ2Y2ItYjMyMC0z
ODljLThkN2EtZmY0MDVjY2NjNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreYDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0c9NEMFDL6q8asphBpUNXfm0m+mPCqpv6g4YUOLaMH6zxFV//lZBuW
OoDlly1lSF/I/Rx2HrG9y+73bh9qhdpIu08wYFBTaSSD4+nM1sSGaDO+IXRneQ2A
1SIbIQZcC9bSK/zcihuJsD78WWbSy/quAF4wWTTrJRiESR2NI9FdPUAOLs7/7wOf
wH/s4/UfrXHsWJhq6DjugMgfpV4/xZ0xvHaexk87dEYgmgnIlDS921fcOqd+pjWQ
uuzrEFe6tADbzQK4SR491Vo0q6ceQTHybA+co/fg8gpadMbTtvfn3I5WIaAkDvYo
/eG2qzGzkSz/v9C4b22w4H1LPBy9+wo=
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:46:13 2026 by rpki-client