Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8b9901d5-177d-3d91-adeb-b0173ab30bd9.roa
File:                     8b9901d5-177d-3d91-adeb-b0173ab30bd9.roa (raw, json)
Hash identifier:          PoLLJgNnatJP+c2x61hrMpDV6N9fAdHuBHAJg0IQtmw=
Subject key identifier:   36:0B:87:23:A4:55:6A:E7:25:8C:EB:4E:CA:7A:3F:AC:FE:93:EA:51
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D499FE1FFFF5C280FC25E8200
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8b9901d5-177d-3d91-adeb-b0173ab30bd9.roa
Signing time:             Wed 25 Mar 2026 16:57:44 +0000
ROA not before:           Wed 25 Mar 2026 16:57:44 +0000
ROA not after:            Tue 23 Jun 2026 16:57:44 +0000
asID:                     9304
IP address blocks:        173.232.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:9f:e1:ff:ff:5c:28:0f:c2:5e:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Mar 25 16:57:44 2026 GMT
            Not After : Jun 23 16:57:44 2026 GMT
        Subject: CN=65d482e7-031c-4142-8242-f5e8cf92439a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:1f:a0:87:d1:01:bb:ef:67:58:d8:d3:52:
                    93:32:c9:9f:2e:2e:66:a9:bf:de:a4:f9:ed:85:1f:
                    b1:f7:53:e8:ba:0a:4c:73:00:80:7f:33:3c:89:07:
                    a0:cd:29:2b:c2:98:7c:2b:16:4b:15:0e:35:b4:f7:
                    12:4e:77:ff:ac:38:04:38:2c:38:ed:00:84:2b:bc:
                    a5:27:b2:bf:51:c1:9b:c2:2f:17:ee:e5:2b:b0:fb:
                    82:1f:31:3c:47:14:68:ff:e7:42:ce:08:da:d7:bb:
                    2b:e2:77:a3:c3:a8:20:8b:9a:ae:9f:3d:ba:16:f3:
                    f4:ea:71:3a:b0:8f:64:c6:b3:f2:96:6e:32:a3:77:
                    10:96:ba:7d:62:56:3d:cb:f6:99:b4:1d:ee:69:f3:
                    f1:08:0a:79:3e:36:de:b7:fd:1d:4f:47:3b:bd:e0:
                    50:b3:0c:d3:36:da:e4:a2:c6:29:01:b3:96:50:86:
                    be:86:1e:99:f0:18:c5:8d:40:94:d0:91:ec:a7:1b:
                    dc:54:95:f8:95:56:bd:29:a2:e3:63:69:8a:58:ee:
                    52:e0:2f:cd:91:be:60:0e:63:a2:52:ca:fe:95:98:
                    45:94:7d:de:8f:a2:ca:3f:ff:99:40:6c:c9:61:47:
                    a2:8d:79:f2:45:d7:50:e8:ac:9e:22:69:13:8b:c9:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0B:87:23:A4:55:6A:E7:25:8C:EB:4E:CA:7A:3F:AC:FE:93:EA:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/8b9901d5-177d-3d91-adeb-b0173ab30bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:2c:5b:4f:aa:1f:35:48:9d:99:42:96:10:55:6c:39:6f:90:
         ff:94:ea:35:a4:b1:02:ad:cb:03:fd:2a:4e:14:27:3c:cd:a2:
         8a:7c:56:a1:03:c4:49:00:26:b6:84:37:20:72:fc:9f:2d:b5:
         c9:b8:a0:56:f4:71:12:a1:e0:dc:b4:24:f6:3a:8a:1a:ca:17:
         41:33:5e:ff:82:0e:ee:0f:27:e5:0b:cf:0c:c3:84:7d:5a:2e:
         12:5a:80:70:a1:ba:38:de:47:41:a8:a8:0a:b6:7c:3f:6e:19:
         02:64:e5:67:c1:4c:24:a7:11:2c:60:8a:18:ef:af:c9:cf:77:
         13:aa:fe:6e:75:51:ac:29:62:02:ea:d4:c5:51:b8:4a:92:64:
         d8:64:0d:e8:65:c8:70:e2:84:5d:30:86:ed:20:18:fc:cc:bc:
         85:60:d3:e4:2c:52:a1:53:58:ae:41:70:a6:25:0f:12:c8:4a:
         7b:a3:cd:21:a9:81:d5:24:87:dd:53:9a:01:40:85:1c:34:f2:
         4c:e0:c0:5f:d5:3a:81:66:2c:93:8a:54:bf:96:a5:aa:5a:42:
         b6:9a:78:de:2c:52:b4:cd:42:3b:e4:b9:a7:1c:89:30:18:4c:
         11:eb:89:ed:89:1c:67:cc:54:ee:04:bd:ff:2c:55:12:59:4d:
         f0:d2:b3:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Jn+H//1woD8JeggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDMyNTE2NTc0NFoXDTI2MDYyMzE2NTc0NFowLzEtMCsGA1UEAxMk
NjVkNDgyZTctMDMxYy00MTQyLTgyNDItZjVlOGNmOTI0MzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPgfoIfRAbvvZ1jY01KTMsmfLi5mqb/epPnt
hR+x91PougpMcwCAfzM8iQegzSkrwph8KxZLFQ41tPcSTnf/rDgEOCw47QCEK7yl
J7K/UcGbwi8X7uUrsPuCHzE8RxRo/+dCzgja17sr4nejw6ggi5qunz26FvP06nE6
sI9kxrPylm4yo3cQlrp9YlY9y/aZtB3uafPxCAp5Pjbet/0dT0c7veBQswzTNtrk
osYpAbOWUIa+hh6Z8BjFjUCU0JHspxvcVJX4lVa9KaLjY2mKWO5S4C/Nkb5gDmOi
Usr+lZhFlH3ej6LKP/+ZQGzJYUeijXnyRddQ6KyeImkTi8nGMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDYLhyOkVWrnJYzrTsp6P6z+k+pRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOGI5OTAxZDUtMTc3ZC0z
ZDkxLWFkZWItYjAxNzNhYjMwYmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBreguMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAsW0+qHzVInZlClhBVbDlvkP+U6jWksQKtywP9Kk4UJzzNoop8VqED
xEkAJraENyBy/J8ttcm4oFb0cRKh4Ny0JPY6ihrKF0EzXv+CDu4PJ+ULzwzDhH1a
LhJagHChujjeR0GoqAq2fD9uGQJk5WfBTCSnESxgihjvr8nPdxOq/m51UawpYgLq
1MVRuEqSZNhkDehlyHDihF0whu0gGPzMvIVg0+QsUqFTWK5BcKYlDxLISnujzSGp
gdUkh91TmgFAhRw08kzgwF/VOoFmLJOKVL+WpapaQraaeN4sUrTNQjvkuacciTAY
TBHrie2JHGfMVO4Evf8sVRJZTfDSs6Y=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:25:10 2026 by rpki-client