Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/624b32f1-eeb4-39a4-9b91-e8bf3e27bbfa.roa
File:                     624b32f1-eeb4-39a4-9b91-e8bf3e27bbfa.roa (raw, json)
Hash identifier:          ej07rFtcK5DGl+IeUQ+q9JaA4EAlZsKJJULgOanOPQ8=
Subject key identifier:   F1:FF:44:AB:27:86:6C:3A:5E:40:86:0C:1C:BD:23:45:7B:A2:4C:36
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D20AF4CD29104C441E5BC7000
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/624b32f1-eeb4-39a4-9b91-e8bf3e27bbfa.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     395793
IP address blocks:        173.213.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:4c:d2:91:04:c4:41:e5:bc:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=658c9b0a-5c64-42f6-8d5f-3ea9a4e668ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:9d:b6:05:3f:f4:ea:81:5b:e5:56:3e:53:
                    47:52:1a:06:20:cb:7c:00:ac:7e:ee:0e:9a:f9:b4:
                    3b:52:04:a9:fb:4e:7a:d4:43:a7:a0:3a:b5:6d:f0:
                    da:e9:77:18:cd:0f:a1:98:f2:cc:5e:f5:49:e5:16:
                    95:0d:55:02:e7:6d:9b:b5:d3:9f:7a:ae:13:b9:a3:
                    8d:ce:9e:44:1e:fc:ff:b3:69:6e:6f:8a:aa:34:c4:
                    22:54:07:f2:6e:a5:aa:f0:38:e1:d3:8c:ea:23:be:
                    e1:26:7e:d6:12:47:0c:7f:8c:f7:22:f2:08:d5:69:
                    9d:02:2c:33:91:be:5d:87:22:f7:3e:09:8d:aa:87:
                    82:5d:37:21:78:03:79:ed:4d:da:0f:8f:4a:f9:0b:
                    2c:ab:dc:c1:17:08:a4:b1:5e:35:0c:83:29:a9:22:
                    87:4f:a8:7d:b2:0f:23:b9:1d:c9:88:c8:b6:75:0f:
                    59:b9:bb:90:23:ee:ba:2b:f3:ea:b3:f2:45:36:98:
                    29:e9:6d:23:84:d6:c5:ed:1e:d6:92:f2:2c:d1:bc:
                    08:74:90:06:f3:18:f6:35:f0:5c:05:2f:5c:06:5a:
                    f0:a6:2d:84:05:6d:8c:1f:1a:2f:5b:51:2b:7e:87:
                    93:28:43:23:79:2a:c5:27:1e:ef:13:72:7b:39:ff:
                    f9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FF:44:AB:27:86:6C:3A:5E:40:86:0C:1C:BD:23:45:7B:A2:4C:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/624b32f1-eeb4-39a4-9b91-e8bf3e27bbfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5f:40:bf:05:35:21:b6:5a:9b:37:e4:25:04:48:02:15:d7:
         88:f3:68:ce:82:ca:26:09:39:05:4e:7a:c2:34:4d:28:42:9d:
         aa:4f:04:36:88:34:98:e3:d9:4b:df:15:a8:59:4f:66:1b:9e:
         e6:cc:2c:51:6b:7d:ed:54:e4:23:da:35:bb:77:99:9e:19:cf:
         dc:89:42:37:22:2d:02:c9:a4:b0:45:97:4d:9c:a5:56:45:63:
         98:a7:f1:9e:ce:f1:af:a0:df:4d:b6:60:f9:c8:84:fd:f0:73:
         27:80:d5:bb:0f:32:63:ef:fc:42:a0:4b:16:e3:93:e5:00:0d:
         ce:31:38:8f:d4:66:82:b4:47:c4:50:20:a8:7a:d1:d8:c0:d0:
         03:cc:3a:5d:ed:66:b7:8e:8d:44:8d:1a:53:65:b0:cc:be:23:
         51:5b:33:3b:15:d7:4d:27:12:55:a9:6f:4a:17:ff:ab:89:1f:
         d6:1c:94:50:d2:d9:47:db:ad:59:b0:08:d3:18:e0:ac:1f:07:
         60:81:56:01:42:81:5b:7b:69:53:7c:27:03:fc:96:6b:e5:23:
         7b:36:21:d2:c2:1d:9d:d0:18:e7:5b:11:08:52:98:d8:b7:cf:
         f8:ec:52:b5:60:ce:1a:31:d6:85:3f:94:13:75:43:62:21:98:
         84:7e:06:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr0zSkQTEQeW8cAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk
NjU4YzliMGEtNWM2NC00MmY2LThkNWYtM2VhOWE0ZTY2OGVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsadtgU/9OqBW+VWPlNHUhoGIMt8AKx+7g6a
+bQ7UgSp+0561EOnoDq1bfDa6XcYzQ+hmPLMXvVJ5RaVDVUC522btdOfeq4TuaON
zp5EHvz/s2lub4qqNMQiVAfybqWq8Djh04zqI77hJn7WEkcMf4z3IvII1WmdAiwz
kb5dhyL3PgmNqoeCXTcheAN57U3aD49K+Qssq9zBFwiksV41DIMpqSKHT6h9sg8j
uR3JiMi2dQ9ZubuQI+66K/Pqs/JFNpgp6W0jhNbF7R7WkvIs0bwIdJAG8xj2NfBc
BS9cBlrwpi2EBW2MHxovW1ErfoeTKEMjeSrFJx7vE3J7Of/5CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPH/RKsnhmw6XkCGDBy9I0V7okw2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNjI0YjMyZjEtZWViNC0z
OWE0LTliOTEtZThiZjNlMjdiYmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdVqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1fQL8FNSG2Wps35CUESAIV14jzaM6CyiYJOQVOesI0TShCnapPBDaI
NJjj2UvfFahZT2YbnubMLFFrfe1U5CPaNbt3mZ4Zz9yJQjciLQLJpLBFl02cpVZF
Y5in8Z7O8a+g3022YPnIhP3wcyeA1bsPMmPv/EKgSxbjk+UADc4xOI/UZoK0R8RQ
IKh60djA0APMOl3tZreOjUSNGlNlsMy+I1FbMzsV100nElWpb0oX/6uJH9YclFDS
2UfbrVmwCNMY4KwfB2CBVgFCgVt7aVN8JwP8lmvlI3s2IdLCHZ3QGOdbEQhSmNi3
z/jsUrVgzhox1oU/lBN1Q2IhmIR+BmU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:17:42 2026 by rpki-client