Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/ad90e371-2890-3196-bae3-86434f8f86a0.roa
File:                     ad90e371-2890-3196-bae3-86434f8f86a0.roa (raw, json)
Hash identifier:          21TXqcCUQZuaxQgHtpdKE/LnTjQVy87XQ4plJuqrV/M=
Subject key identifier:   8B:E1:09:E4:6C:4E:84:56:00:26:4F:0C:15:C8:34:2D:0E:A1:25:AE
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584D44FA6D6EE9E20D9E1DAF1280
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/ad90e371-2890-3196-bae3-86434f8f86a0.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     398465
IP address blocks:        104.171.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:6d:6e:e9:e2:0d:9e:1d:af:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=177867fe-02f2-4970-84d7-d63bb6cf1546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:d5:bf:90:35:80:f5:7e:74:36:80:94:fe:
                    04:29:4c:25:35:16:f3:12:f3:6b:48:d0:f3:0f:8d:
                    d5:4a:26:96:e1:98:a5:50:3f:0b:81:92:fe:d1:f1:
                    3c:d5:29:06:15:35:16:5f:59:be:63:50:5b:c3:fd:
                    85:20:dd:e0:a1:a9:2a:93:04:28:4f:88:36:71:f5:
                    b1:7c:a0:5a:7e:9d:27:7a:ed:96:3c:4a:86:ae:10:
                    23:ae:5b:6e:18:26:f8:8f:04:3e:ab:ba:62:95:0d:
                    79:24:d9:3c:f2:63:8e:00:cf:1f:61:c3:30:24:48:
                    08:da:de:ba:8b:b0:f0:b5:67:2f:a1:07:6c:b8:9f:
                    3e:59:a3:3e:0d:68:10:5a:4a:38:d6:49:18:6b:fa:
                    f0:8e:ed:a3:a8:03:95:bf:fe:8b:68:8a:16:b9:77:
                    b8:ec:09:18:ce:8a:60:4f:56:84:90:71:30:17:36:
                    f0:98:e8:96:b6:a8:6e:8e:d1:74:b5:c1:41:ad:9c:
                    b1:c1:4f:ff:f8:62:0b:66:5b:fa:d1:00:04:68:ac:
                    94:79:95:5a:d4:9e:72:c9:02:b7:b6:d4:b9:89:8c:
                    48:6b:fe:48:8b:2d:89:03:b3:d0:46:c9:e6:8f:b8:
                    06:1c:19:4c:e5:50:26:af:a5:38:27:f8:c2:fa:22:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E1:09:E4:6C:4E:84:56:00:26:4F:0C:15:C8:34:2D:0E:A1:25:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/ad90e371-2890-3196-bae3-86434f8f86a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a7:cb:d7:6f:dd:d1:17:ae:42:fc:ab:01:7f:c7:0a:2c:97:
         55:87:af:70:39:7c:22:81:81:8c:64:43:c9:5a:9e:69:4d:f3:
         4b:78:47:cb:83:54:86:3b:08:bf:c5:6f:11:6f:75:c3:d4:54:
         be:73:29:d9:21:4e:7b:56:54:2f:eb:31:6b:a0:77:c3:1a:33:
         30:88:92:d0:31:12:30:bd:b1:4c:c8:83:27:54:66:34:4a:83:
         df:e0:61:08:4b:10:1e:6b:fa:6f:1b:87:70:ba:f6:00:90:e8:
         40:39:6c:98:4b:a3:7d:5b:6a:cf:0c:d2:83:e6:56:1f:9b:42:
         a0:84:b1:62:32:b9:cb:43:a7:a8:98:5a:ad:93:99:03:9a:9f:
         61:b3:d1:0b:6f:14:f7:a5:b0:a6:f4:05:e3:26:9d:7e:23:9b:
         fc:bf:f4:ed:54:b9:cb:16:3d:d3:5f:a6:f8:e8:35:4a:49:17:
         94:36:e9:03:34:8f:ee:c3:fa:62:de:9d:80:84:33:b2:a6:b6:
         a3:d4:d4:c9:2e:0c:07:2e:f9:bc:1e:9e:8c:61:78:c9:aa:6b:
         2c:2b:ef:3c:a9:b8:de:ef:19:12:57:f6:53:a1:1a:6a:50:c3:
         32:bf:c1:80:6e:38:9b:6b:79:58:10:cd:82:b6:2a:f8:23:e3:
         9d:57:dd:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+m1u6eINnh2vEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2
NjNlMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
MTc3ODY3ZmUtMDJmMi00OTcwLTg0ZDctZDYzYmI2Y2YxNTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNTVv5A1gPV+dDaAlP4EKUwlNRbzEvNrSNDz
D43VSiaW4ZilUD8LgZL+0fE81SkGFTUWX1m+Y1Bbw/2FIN3goakqkwQoT4g2cfWx
fKBafp0neu2WPEqGrhAjrltuGCb4jwQ+q7pilQ15JNk88mOOAM8fYcMwJEgI2t66
i7DwtWcvoQdsuJ8+WaM+DWgQWko41kkYa/rwju2jqAOVv/6LaIoWuXe47AkYzopg
T1aEkHEwFzbwmOiWtqhujtF0tcFBrZyxwU//+GILZlv60QAEaKyUeZVa1J5yyQK3
ttS5iYxIa/5Iiy2JA7PQRsnmj7gGHBlM5VAmr6U4J/jC+iIllQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIvhCeRsToRWACZPDBXINC0OoSWuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy
ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvYWQ5MGUzNzEtMjg5MC0z
MTk2LWJhZTMtODY0MzRmOGY4NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2
YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3
NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm
NDg4NzY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKupMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmny9dv3dEXrkL8qwF/xwosl1WHr3A5fCKBgYxkQ8lanmlN80t4R8uD
VIY7CL/FbxFvdcPUVL5zKdkhTntWVC/rMWugd8MaMzCIktAxEjC9sUzIgydUZjRK
g9/gYQhLEB5r+m8bh3C69gCQ6EA5bJhLo31bas8M0oPmVh+bQqCEsWIyuctDp6iY
Wq2TmQOan2Gz0QtvFPelsKb0BeMmnX4jm/y/9O1UucsWPdNfpvjoNUpJF5Q26QM0
j+7D+mLenYCEM7KmtqPU1MkuDAcu+bwenoxheMmqaywr7zypuN7vGRJX9lOhGmpQ
wzK/wYBuOJtreVgQzYK2Kvgj451X3eE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:44:06 2026 by rpki-client