Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4acc7b66-87db-3173-900e-fa1018745dc5.roa
File:                     4acc7b66-87db-3173-900e-fa1018745dc5.roa (raw, json)
Hash identifier:          PgbmQFs24bdAcRNTeFjoFgm2HomBZNsjrUqeaJg+/JQ=
Subject key identifier:   12:48:29:88:F9:D3:E1:2D:E0:7A:DA:42:11:8F:92:A2:3B:1D:24:11
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E86F510AA5C292C191C002FC0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4acc7b66-87db-3173-900e-fa1018745dc5.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     834
IP address blocks:        173.232.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:10:aa:5c:29:2c:19:1c:00:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=abc5d405-8cea-4f6c-8199-2bf626fa7895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d2:44:ae:59:1f:91:1e:a5:5a:45:12:c8:31:
                    48:cf:15:82:8f:e5:ea:61:05:7d:9e:6e:61:f5:0e:
                    d8:e2:dc:fb:21:b0:ff:94:60:02:69:1e:ad:a0:05:
                    a5:c7:7e:72:68:e0:7e:86:10:df:2e:df:2b:9e:a7:
                    ee:ea:41:06:df:be:e9:de:b7:76:a7:33:3f:a2:1a:
                    be:b5:96:d6:cc:7a:36:f8:29:21:19:00:51:9d:a0:
                    52:a9:f9:9b:f0:a9:68:47:a6:25:4f:34:98:df:43:
                    bc:b2:47:7f:87:3d:db:af:9e:dd:64:0d:45:a1:1a:
                    ed:40:51:86:cc:c3:14:a8:05:0c:f7:65:76:55:17:
                    fa:f5:85:70:65:ab:51:f6:2f:27:69:1c:06:a7:42:
                    c4:59:af:6c:f0:a5:0f:84:e9:e9:bc:f9:aa:d8:cf:
                    0f:87:68:4d:99:b1:65:82:5b:da:56:7c:22:a4:30:
                    68:de:9e:ac:14:ff:bb:6d:9d:f2:03:a5:c5:61:76:
                    35:1a:cd:94:74:fa:77:5c:9c:28:5a:34:5d:83:a5:
                    62:fe:ab:15:81:50:4a:9c:a3:8a:0b:9f:d8:7e:e3:
                    30:6f:5d:d8:ad:4b:ba:a3:0e:12:b6:0e:27:14:05:
                    aa:c0:ca:eb:2c:52:6f:02:0d:3f:43:fe:50:91:6a:
                    9a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:48:29:88:F9:D3:E1:2D:E0:7A:DA:42:11:8F:92:A2:3B:1D:24:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4acc7b66-87db-3173-900e-fa1018745dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e7:eb:b3:04:d8:98:49:b4:32:fa:80:f1:9c:f4:94:5d:64:
         74:ee:d5:01:52:46:25:83:1f:f4:66:8b:8b:96:27:f9:06:52:
         b3:6c:4d:17:9b:f5:a7:ad:f7:3d:79:1b:fe:9a:8e:cd:58:b0:
         3f:6a:db:bb:a2:42:47:b5:d7:ba:7a:0b:50:14:13:51:48:14:
         2b:e4:0f:25:55:7c:95:ca:d2:13:90:9e:7d:06:a8:a0:0b:93:
         1d:65:6d:c2:55:ba:b8:3e:f8:e9:38:82:5c:1d:7f:7f:34:70:
         65:d4:26:31:37:5f:78:fa:0b:e1:1c:e5:0d:11:c0:af:93:7c:
         9a:f1:01:f6:cc:29:bf:50:01:9c:7c:84:5d:a9:e5:7c:26:2a:
         7e:ac:0c:52:50:4c:8a:7c:c6:04:7c:6c:29:fe:d6:30:46:10:
         aa:c6:a9:67:44:99:61:e3:34:78:06:42:06:02:16:a4:23:e5:
         8e:81:9f:3a:a0:0d:d1:df:e0:d7:79:3a:e3:2f:1d:b1:c4:d4:
         4c:e2:99:b0:8a:1f:34:99:8f:0f:c8:a9:32:40:64:8f:96:f7:
         93:1b:41:6b:07:49:26:7c:11:73:b1:85:19:75:ec:1e:b9:3a:
         60:8c:b9:ae:a1:9e:71:22:49:b3:6b:3c:45:d5:13:86:b8:39:
         8c:28:64:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9RCqXCksGRwAL8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk
YWJjNWQ0MDUtOGNlYS00ZjZjLTgxOTktMmJmNjI2ZmE3ODk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9JErlkfkR6lWkUSyDFIzxWCj+XqYQV9nm5h
9Q7Y4tz7IbD/lGACaR6toAWlx35yaOB+hhDfLt8rnqfu6kEG377p3rd2pzM/ohq+
tZbWzHo2+CkhGQBRnaBSqfmb8KloR6YlTzSY30O8skd/hz3br57dZA1FoRrtQFGG
zMMUqAUM92V2VRf69YVwZatR9i8naRwGp0LEWa9s8KUPhOnpvPmq2M8Ph2hNmbFl
glvaVnwipDBo3p6sFP+7bZ3yA6XFYXY1Gs2UdPp3XJwoWjRdg6Vi/qsVgVBKnKOK
C5/YfuMwb13YrUu6ow4Stg4nFAWqwMrrLFJvAg0/Q/5QkWqakwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBJIKYj50+Et4HraQhGPkqI7HSQRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNGFjYzdiNjYtODdkYi0z
MTczLTkwMGUtZmExMDE4NzQ1ZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreizMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfn67ME2JhJtDL6gPGc9JRdZHTu1QFSRiWDH/Rmi4uWJ/kGUrNsTReb
9aet9z15G/6ajs1YsD9q27uiQke117p6C1AUE1FIFCvkDyVVfJXK0hOQnn0GqKAL
kx1lbcJVurg++Ok4glwdf380cGXUJjE3X3j6C+Ec5Q0RwK+TfJrxAfbMKb9QAZx8
hF2p5XwmKn6sDFJQTIp8xgR8bCn+1jBGEKrGqWdEmWHjNHgGQgYCFqQj5Y6Bnzqg
DdHf4Nd5OuMvHbHE1EzimbCKHzSZjw/IqTJAZI+W95MbQWsHSSZ8EXOxhRl17B65
OmCMua6hnnEiSbNrPEXVE4a4OYwoZKI=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:33:16 2026 by rpki-client