Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/437182ec-5663-311d-8f7e-10c1c2b75e73.roa
File:                     437182ec-5663-311d-8f7e-10c1c2b75e73.roa (raw, json)
Hash identifier:          9Qg+NjntRHQXj7I7Ktzei8i3600J0Q82SjMKUfxBM3M=
Subject key identifier:   96:EE:E4:AB:6A:C1:24:F0:64:DA:26:A2:94:04:87:12:FE:60:09:1E
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F50B185A64F78464EFEC08300
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/437182ec-5663-311d-8f7e-10c1c2b75e73.roa
Signing time:             Sun 27 Sep 2026 15:17:48 +0000
ROA not before:           Sun 27 Sep 2026 15:17:48 +0000
ROA not after:            Sat 26 Dec 2026 16:17:48 +0000
asID:                     62904
IP address blocks:        173.44.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:b1:85:a6:4f:78:46:4e:fe:c0:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 27 15:17:48 2026 GMT
            Not After : Dec 26 16:17:48 2026 GMT
        Subject: CN=753a7f55-7388-4c1b-a43c-c28a33c91240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:81:c4:84:49:1f:ab:66:d9:f8:4a:90:4f:
                    c6:ba:26:5a:0d:a2:c9:f8:c3:2b:32:1a:09:bf:b7:
                    b3:b2:a2:2b:4f:89:5f:a7:69:05:55:ea:15:2a:5f:
                    08:1b:6f:9f:03:fc:8c:57:db:1b:13:c9:60:85:b2:
                    61:66:1f:22:0d:0c:5e:44:c6:83:0f:1f:8c:2d:c4:
                    47:e9:c7:9e:e6:97:1b:58:e9:8c:4a:95:bc:24:b2:
                    c5:e3:de:d1:c5:5b:32:2e:d2:50:6d:50:eb:80:fc:
                    1b:4d:ec:f8:a6:ec:55:82:c3:0e:40:f1:88:dc:06:
                    5c:ea:d6:05:10:5f:fe:20:d4:09:11:6d:50:15:e3:
                    d1:d6:74:b0:27:14:8c:45:cf:4d:2f:59:fa:08:10:
                    67:f6:bc:15:28:c0:81:71:e0:c7:52:7e:38:63:cc:
                    fe:cb:6e:62:21:ec:29:5b:14:e0:b1:f7:a7:7e:f6:
                    b1:b6:fd:9e:19:c4:b0:2e:40:2a:ed:eb:73:a0:e5:
                    f9:a3:f5:54:9b:fa:fb:e1:97:45:02:f2:28:c6:16:
                    59:32:10:ff:69:f1:fe:ef:34:47:7b:dd:5a:cd:16:
                    53:62:c4:24:86:84:64:1b:72:ba:7f:c6:18:c6:fb:
                    6d:0b:19:89:6d:4a:d7:91:e3:eb:ad:f9:0e:35:9b:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EE:E4:AB:6A:C1:24:F0:64:DA:26:A2:94:04:87:12:FE:60:09:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/437182ec-5663-311d-8f7e-10c1c2b75e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d3:65:3d:b1:37:06:0a:88:ff:92:a9:87:44:65:89:b9:3e:
         95:d7:dd:ef:0d:07:2e:43:97:6f:d4:07:06:6d:c0:87:a1:d6:
         32:1a:4d:ae:84:41:54:a8:4f:4f:e5:0a:83:ea:8e:4b:57:6d:
         fc:5c:e4:46:2f:96:f1:6d:99:34:a3:fb:35:27:e7:04:76:19:
         8d:2e:29:7c:1e:dd:5d:89:af:0e:bb:af:b6:7b:6d:f8:26:55:
         27:24:ce:13:ca:ff:eb:ef:8c:64:e3:e9:41:54:ca:db:c3:e5:
         cb:88:18:0a:58:59:74:34:a4:66:3b:21:f0:68:78:7b:9c:29:
         b8:ac:87:24:55:4f:e2:cc:c0:9b:68:7e:09:49:14:8d:91:d6:
         c8:57:15:10:88:b3:07:86:52:1d:6a:49:60:9c:a7:4d:9f:5a:
         ff:1e:17:73:f0:66:36:83:78:58:46:8c:aa:2b:1d:43:30:17:
         c0:84:4e:89:8e:4f:2b:45:3c:98:de:05:f1:c5:9d:eb:64:56:
         61:a6:f1:e9:c1:79:e6:55:3c:2a:2a:38:95:2f:1a:49:40:b2:
         61:bb:df:21:15:4e:c2:16:0f:b8:66:ae:2b:eb:d0:42:2c:ba:
         7a:8f:9e:aa:e3:46:07:89:61:68:85:b6:39:2c:36:b1:67:72:
         07:53:54:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QsYWmT3hGTv7AgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkyNzE1MTc0OFoXDTI2MTIyNjE2MTc0OFowLzEtMCsGA1UEAxMk
NzUzYTdmNTUtNzM4OC00YzFiLWE0M2MtYzI4YTMzYzkxMjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxiBxIRJH6tm2fhKkE/GuiZaDaLJ+MMrMhoJ
v7ezsqIrT4lfp2kFVeoVKl8IG2+fA/yMV9sbE8lghbJhZh8iDQxeRMaDDx+MLcRH
6cee5pcbWOmMSpW8JLLF497RxVsyLtJQbVDrgPwbTez4puxVgsMOQPGI3AZc6tYF
EF/+INQJEW1QFePR1nSwJxSMRc9NL1n6CBBn9rwVKMCBceDHUn44Y8z+y25iIewp
WxTgsfenfvaxtv2eGcSwLkAq7etzoOX5o/VUm/r74ZdFAvIoxhZZMhD/afH+7zRH
e91azRZTYsQkhoRkG3K6f8YYxvttCxmJbUrXkePrrfkONZusfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbu5KtqwSTwZNomopQEhxL+YAkeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNDM3MTgyZWMtNTY2My0z
MTFkLThmN2UtMTBjMWMyYjc1ZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrSzwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEPTZT2xNwYKiP+SqYdEZYm5PpXX3e8NBy5Dl2/UBwZtwIeh1jIaTa6E
QVSoT0/lCoPqjktXbfxc5EYvlvFtmTSj+zUn5wR2GY0uKXwe3V2Jrw67r7Z7bfgm
VSckzhPK/+vvjGTj6UFUytvD5cuIGApYWXQ0pGY7IfBoeHucKbishyRVT+LMwJto
fglJFI2R1shXFRCIsweGUh1qSWCcp02fWv8eF3PwZjaDeFhGjKorHUMwF8CETomO
TytFPJjeBfHFnetkVmGm8enBeeZVPCoqOJUvGklAsmG73yEVTsIWD7hmrivr0EIs
unqPnqrjRgeJYWiFtjksNrFncgdTVM8=
-----END CERTIFICATE-----
Generated at Sat Oct 10 23:27:18 2026 by rpki-client