Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f0c29046-ba2f-3244-9ebb-e3f10c515bd4.roa
File:                     f0c29046-ba2f-3244-9ebb-e3f10c515bd4.roa (raw, json)
Hash identifier:          +5E2UPWMhOwqsU9BYGgosUxpXNYfPBmaBiirtos6mNw=
Subject key identifier:   86:59:FB:EF:DB:50:9C:4C:62:DA:71:1F:22:BC:0D:C4:C8:CE:CC:DE
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F4986CB09D487F83A8AC7A380
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f0c29046-ba2f-3244-9ebb-e3f10c515bd4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        173.232.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:cb:09:d4:87:f8:3a:8a:c7:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f7a2bce4-0de2-49da-897f-5a453cbacbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:d2:69:c0:1f:90:ec:44:bb:fb:77:95:5f:
                    88:48:42:d4:78:13:33:5b:ea:67:91:da:ea:43:e6:
                    93:69:23:54:47:cc:8b:b9:4d:bb:eb:d0:f7:8d:b2:
                    41:88:96:6d:2a:9c:25:51:2e:54:90:42:13:83:a4:
                    69:34:b3:3f:71:59:86:92:0d:6b:b4:69:cb:1c:8e:
                    2e:5e:8a:38:e2:a2:ef:d1:bc:e2:f7:d9:71:bf:41:
                    f6:b6:90:48:39:57:fb:7c:d4:b5:c5:4c:d0:a2:47:
                    a4:16:1e:48:f1:5d:32:8f:60:e9:35:4d:be:52:a9:
                    37:ad:59:ca:87:0d:b9:37:13:c6:a7:f6:f1:62:e1:
                    f2:34:58:0f:cc:28:4a:2a:46:fa:43:d2:0f:12:66:
                    0c:f3:36:2e:e2:9c:a5:ca:84:3a:15:95:0c:50:22:
                    6b:2a:5d:40:81:dc:41:d9:6b:bd:fb:1e:d6:27:0a:
                    74:7a:be:c8:ef:8b:0a:03:1a:e1:7e:21:fe:e5:e9:
                    1c:fe:6a:06:fb:42:ae:d5:9d:24:cc:f3:2a:d8:75:
                    ec:d6:b2:82:f2:9c:91:c5:41:f1:dc:90:9c:bc:ca:
                    7a:dc:7f:9e:b5:2a:ab:30:fa:8f:3a:6d:d6:d1:b6:
                    ab:bd:46:f6:2b:d3:e8:46:7f:90:05:83:0e:a8:91:
                    a0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:59:FB:EF:DB:50:9C:4C:62:DA:71:1F:22:BC:0D:C4:C8:CE:CC:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/f0c29046-ba2f-3244-9ebb-e3f10c515bd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:53:47:af:93:98:dd:00:e0:38:d2:6c:3a:68:57:b3:8b:2a:
         67:96:bf:e3:d3:c4:fc:d4:e9:29:08:dc:93:b6:1b:0f:64:a0:
         cd:d8:5a:f6:db:72:bb:5c:36:51:f9:87:fc:10:98:40:ec:9b:
         d8:7d:b5:16:5a:9f:0f:39:d2:0f:15:d2:a5:3a:99:c9:29:65:
         a7:01:19:0f:d5:49:04:13:bb:ad:f6:94:66:6c:3c:33:57:67:
         74:a4:17:f0:b4:ab:6e:b7:00:04:3a:84:78:3d:5d:8f:25:ab:
         a0:e2:5a:87:ce:b0:c7:8a:e2:71:fd:26:d1:df:5e:61:f8:26:
         3b:f0:13:ff:f0:75:a6:74:5a:b7:64:45:53:4d:4c:13:ad:66:
         25:26:eb:7d:db:ea:d9:26:fd:65:0c:a8:c2:c8:f8:c1:33:e2:
         d2:4c:df:03:12:e7:a5:cd:cc:58:5e:3e:37:53:b2:ab:dd:61:
         39:9e:55:4e:75:87:5e:ef:e0:af:a1:07:90:9d:7e:13:e9:78:
         b9:88:8b:49:bf:56:b4:43:7f:4b:f2:55:0f:ed:a3:a2:12:db:
         c7:65:88:7d:e3:ed:b9:96:18:ff:50:28:86:a7:89:36:4f:05:
         41:8d:bd:be:5c:b1:dc:d4:41:77:e1:21:51:71:df:39:a3:17:
         0c:9c:42:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhssJ1If4OorHo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjdhMmJjZTQtMGRlMi00OWRhLTg5N2YtNWE0NTNjYmFjYmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYvSacAfkOxEu/t3lV+ISELUeBMzW+pnkdrq
Q+aTaSNUR8yLuU2769D3jbJBiJZtKpwlUS5UkEITg6RpNLM/cVmGkg1rtGnLHI4u
Xoo44qLv0bzi99lxv0H2tpBIOVf7fNS1xUzQokekFh5I8V0yj2DpNU2+Uqk3rVnK
hw25NxPGp/bxYuHyNFgPzChKKkb6Q9IPEmYM8zYu4pylyoQ6FZUMUCJrKl1AgdxB
2Wu9+x7WJwp0er7I74sKAxrhfiH+5ekc/moG+0Ku1Z0kzPMq2HXs1rKC8pyRxUHx
3JCcvMp63H+etSqrMPqPOm3W0barvUb2K9PoRn+QBYMOqJGg1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZZ++/bUJxMYtpxHyK8DcTIzszeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZjBjMjkwNDYtYmEyZi0z
MjQ0LTllYmItZTNmMTBjNTE1YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArejwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxTR6+TmN0A4DjSbDpoV7OLKmeWv+PTxPzU6SkI3JO2Gw9koM3YWvbb
crtcNlH5h/wQmEDsm9h9tRZanw850g8V0qU6mckpZacBGQ/VSQQTu632lGZsPDNX
Z3SkF/C0q263AAQ6hHg9XY8lq6DiWofOsMeK4nH9JtHfXmH4JjvwE//wdaZ0Wrdk
RVNNTBOtZiUm633b6tkm/WUMqMLI+MEz4tJM3wMS56XNzFhePjdTsqvdYTmeVU51
h17v4K+hB5CdfhPpeLmIi0m/VrRDf0vyVQ/to6IS28dliH3j7bmWGP9QKIaniTZP
BUGNvb5csdzUQXfhIVFx3zmjFwycQuc=
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:03:55 2026 by rpki-client