Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3a1ad304-cefa-344b-8e96-10634b0caf7f.roa
File:                     3a1ad304-cefa-344b-8e96-10634b0caf7f.roa (raw, json)
Hash identifier:          JC0pHFZ+73W65e2A4jz4P/7yxm2jS0y1IfwzUdKEGt4=
Subject key identifier:   D3:A9:82:5F:2C:C8:63:D2:C2:0D:05:81:05:FF:24:A5:43:58:8F:12
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D44FA40C095F111D0A5244680
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3a1ad304-cefa-344b-8e96-10634b0caf7f.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     834
IP address blocks:        173.211.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:40:c0:95:f1:11:d0:a5:24:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=15b0442f-bec6-4175-99c0-7c9c3d9321b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:30:71:75:4b:c0:f4:c8:ae:31:55:8f:4b:
                    69:1c:1f:68:20:02:31:ff:3a:08:27:92:39:7e:c5:
                    52:07:2c:9e:0e:3b:dd:54:f2:aa:7c:12:9e:6c:d4:
                    aa:d9:04:e6:43:71:f5:59:a9:7e:6b:9d:5e:bd:ce:
                    b3:43:80:4b:5d:2d:00:31:0e:a8:71:55:22:13:47:
                    33:a3:b1:cc:0a:a9:b8:48:34:4f:09:fe:81:38:6b:
                    10:12:b5:19:3c:da:bc:42:98:1b:cd:77:f6:b8:77:
                    33:b5:74:85:46:c7:b9:47:5d:56:6d:5b:e5:a6:eb:
                    7d:de:48:49:96:bd:bb:c5:01:78:66:e3:5c:78:0e:
                    9c:f7:da:3f:c6:ef:db:40:d7:cc:49:96:ef:f3:88:
                    fa:75:52:7a:5e:20:8e:7f:62:05:da:ed:5b:cf:96:
                    9f:ef:7f:66:90:4a:ef:ac:6f:f1:47:a7:3f:eb:d3:
                    fd:4d:af:fe:d3:53:cf:30:1a:89:97:c7:43:93:b5:
                    0a:c6:ae:77:81:bc:64:c5:0f:5f:c5:08:87:bc:d0:
                    d2:5e:14:ce:78:6d:07:87:fc:58:94:50:b7:0b:49:
                    87:43:66:0c:3b:34:f1:ec:1f:87:7f:32:6a:97:f4:
                    a3:d5:f4:bf:d2:0a:30:89:61:54:e4:7f:41:e2:b5:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A9:82:5F:2C:C8:63:D2:C2:0D:05:81:05:FF:24:A5:43:58:8F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3a1ad304-cefa-344b-8e96-10634b0caf7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e7:c1:7c:26:b5:2b:7b:71:ef:97:aa:53:2e:d1:18:16:66:
         99:38:3d:e5:af:93:ad:5a:27:82:de:f1:bc:2a:eb:93:39:59:
         c7:81:59:b7:5a:87:03:8d:31:4e:76:5e:4b:a4:1d:db:48:2b:
         57:96:38:63:7a:b6:e3:fc:98:66:61:cc:02:7a:54:8a:3f:56:
         8a:a2:a1:91:98:ef:fb:44:32:a2:d0:6d:64:eb:45:e3:9f:6b:
         c3:da:19:d8:a6:a2:d4:7a:37:76:e3:ab:75:ed:94:36:28:c0:
         f5:ac:08:38:d4:05:b9:94:88:9f:ad:3e:70:e5:e3:6a:88:15:
         e8:fd:42:53:37:ed:c2:12:87:13:40:de:8a:bc:62:94:75:6a:
         4c:ad:0f:1b:2b:b7:68:a8:f7:d2:bb:d4:7c:e7:ec:2f:3a:c9:
         83:31:b7:68:ae:8e:cd:34:04:71:ce:c6:8d:81:2b:46:ed:46:
         d0:3b:10:ea:5c:28:c9:10:19:ee:58:74:c3:d1:ba:07:84:b2:
         92:42:fa:56:c3:72:0e:a7:fe:6a:e0:18:79:d6:42:41:ed:01:
         82:89:c4:af:28:8f:39:13:e8:71:8e:9d:34:ea:36:8d:ce:be:
         cb:e5:25:dd:e7:dd:e8:ce:51:f7:37:10:84:dc:5c:7a:2a:27:
         3c:4f:36:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kDAlfER0KUkRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
MTViMDQ0MmYtYmVjNi00MTc1LTk5YzAtN2M5YzNkOTMyMWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD8wcXVLwPTIrjFVj0tpHB9oIAIx/zoIJ5I5
fsVSByyeDjvdVPKqfBKebNSq2QTmQ3H1Wal+a51evc6zQ4BLXS0AMQ6ocVUiE0cz
o7HMCqm4SDRPCf6BOGsQErUZPNq8QpgbzXf2uHcztXSFRse5R11WbVvlput93khJ
lr27xQF4ZuNceA6c99o/xu/bQNfMSZbv84j6dVJ6XiCOf2IF2u1bz5af739mkErv
rG/xR6c/69P9Ta/+01PPMBqJl8dDk7UKxq53gbxkxQ9fxQiHvNDSXhTOeG0Hh/xY
lFC3C0mHQ2YMOzTx7B+HfzJql/Sj1fS/0gowiWFU5H9B4rXO+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNOpgl8syGPSwg0FgQX/JKVDWI8SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvM2ExYWQzMDQtY2VmYS0z
NDRiLThlOTYtMTA2MzRiMGNhZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdMvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvnwXwmtSt7ce+XqlMu0RgWZpk4PeWvk61aJ4Le8bwq65M5WceBWbda
hwONMU52XkukHdtIK1eWOGN6tuP8mGZhzAJ6VIo/VoqioZGY7/tEMqLQbWTrReOf
a8PaGdimotR6N3bjq3XtlDYowPWsCDjUBbmUiJ+tPnDl42qIFej9QlM37cIShxNA
3oq8YpR1akytDxsrt2io99K71Hzn7C86yYMxt2iujs00BHHOxo2BK0btRtA7EOpc
KMkQGe5YdMPRugeEspJC+lbDcg6n/mrgGHnWQkHtAYKJxK8ojzkT6HGOnTTqNo3O
vsvlJd3n3ejOUfc3EITcXHoqJzxPNo8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:07:25 2026 by rpki-client