Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228e6ca5-5dd6-3155-a3ad-622bc524b69b.roa
File:                     228e6ca5-5dd6-3155-a3ad-622bc524b69b.roa (raw, json)
Hash identifier:          A3GhlhfindIj8ad9hePyEBnZggg/a7vVGZrIJ08m/Tg=
Subject key identifier:   AC:60:67:D4:83:67:04:D3:AF:1E:C1:68:FE:EB:CC:49:AD:F5:67:C2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F374D1A2B4184D897A7584A30
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228e6ca5-5dd6-3155-a3ad-622bc524b69b.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     6167
IP address blocks:        174.217.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:1a:2b:41:84:d8:97:a7:58:4a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=9e664c16-7574-41d4-8bc3-e778d73ce6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:4a:89:57:c0:1e:fb:d4:8c:91:cb:1a:4c:
                    3c:74:93:2c:9f:76:3b:7a:83:c2:d5:99:2d:42:12:
                    bf:99:13:69:ca:83:0b:32:71:e7:70:c4:48:e0:9d:
                    26:54:a1:aa:31:dd:10:f0:0d:c9:5d:ac:e0:5f:d5:
                    c1:f1:70:c3:b7:dc:04:ab:f1:ab:85:ae:09:99:e6:
                    d3:1e:ce:27:0f:80:ca:f3:3a:19:3d:83:a7:ff:d2:
                    1c:20:18:1a:13:69:58:38:38:43:dc:eb:28:fc:0b:
                    32:7c:8f:57:13:ff:e0:6b:f1:75:d1:5a:22:4d:b7:
                    70:6c:2b:2f:a6:75:31:82:27:65:6c:a2:8a:6b:ea:
                    ce:50:b8:1f:3d:a5:de:af:8c:da:23:ce:61:18:e4:
                    91:b3:e7:ee:a5:03:69:0a:7b:38:36:f7:4d:0f:ce:
                    08:33:7b:aa:e1:ad:12:7a:dc:0e:f9:d2:3d:3d:78:
                    c2:c0:e3:f8:c9:26:11:68:ac:40:6f:8f:94:fb:f6:
                    85:c0:ca:05:7e:d4:5e:21:71:07:72:8d:f4:54:90:
                    86:84:2d:d1:14:45:74:fe:8d:5a:1c:82:1f:cd:f1:
                    f8:3b:6f:12:01:1e:4b:91:f5:b2:1f:8a:2a:75:2c:
                    f9:96:1b:6d:f0:23:22:9d:e2:a9:5d:52:46:2e:db:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:60:67:D4:83:67:04:D3:AF:1E:C1:68:FE:EB:CC:49:AD:F5:67:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228e6ca5-5dd6-3155-a3ad-622bc524b69b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.217.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:34:1c:7f:38:f3:9c:13:a9:06:69:f4:a7:2e:ec:5e:4f:cd:
         22:fa:f9:7e:5f:fe:82:6a:35:4c:c4:c4:58:64:ea:5e:35:ba:
         ac:53:8c:75:98:b8:71:09:23:a2:5a:a0:0d:47:cc:fb:04:04:
         a4:12:32:cf:69:1b:fa:41:9a:17:4a:b8:b1:a4:52:57:03:21:
         b4:73:a5:71:e4:08:51:0e:9d:21:4a:e5:01:86:47:ee:fb:45:
         e9:45:4e:9e:fa:81:e0:75:42:63:e8:a2:1d:1a:20:c7:53:8b:
         45:84:20:ca:d0:43:6f:00:08:60:8a:bb:ab:5d:ac:b8:3e:a5:
         7a:cb:15:c6:63:09:d5:06:c7:52:db:82:3c:69:2d:da:78:75:
         5a:c1:b3:81:0d:f5:88:92:78:19:07:c6:8c:42:9d:06:d4:ac:
         84:0a:4a:fb:f7:f7:43:b7:5d:2e:78:a2:c4:a3:27:8a:c3:2a:
         32:75:be:72:a0:79:4c:4d:38:62:ca:eb:0a:d1:60:9f:e6:e6:
         59:03:c0:9c:fc:ae:1a:13:af:11:33:85:56:d9:25:86:46:8a:
         c9:3d:d6:b0:2c:b6:22:dd:3e:ac:86:e7:d9:3f:60:ed:68:6a:
         9a:d1:b1:e8:7c:32:4e:f2:78:28:7b:10:a4:43:9a:3b:aa:1a:
         9c:5f:f9:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TRorQYTYl6dYSjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
OWU2NjRjMTYtNzU3NC00MWQ0LThiYzMtZTc3OGQ3M2NlNmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlixKiVfAHvvUjJHLGkw8dJMsn3Y7eoPC1Zkt
QhK/mRNpyoMLMnHncMRI4J0mVKGqMd0Q8A3JXazgX9XB8XDDt9wEq/Grha4JmebT
Hs4nD4DK8zoZPYOn/9IcIBgaE2lYODhD3Oso/AsyfI9XE//ga/F10VoiTbdwbCsv
pnUxgidlbKKKa+rOULgfPaXer4zaI85hGOSRs+fupQNpCns4NvdND84IM3uq4a0S
etwO+dI9PXjCwOP4ySYRaKxAb4+U+/aFwMoFftReIXEHco30VJCGhC3RFEV0/o1a
HIIfzfH4O28SAR5LkfWyH4oqdSz5lhtt8CMineKpXVJGLtu1cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKxgZ9SDZwTTrx7BaP7rzEmt9WfCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjI4ZTZjYTUtNWRkNi0z
MTU1LWEzYWQtNjIyYmM1MjRiNjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKE0HH8485wTqQZp9Kcu7F5PzSL6+X5f/oJqNUzExFhk6l41uqxTjHWY
uHEJI6JaoA1HzPsEBKQSMs9pG/pBmhdKuLGkUlcDIbRzpXHkCFEOnSFK5QGGR+77
RelFTp76geB1QmPooh0aIMdTi0WEIMrQQ28ACGCKu6tdrLg+pXrLFcZjCdUGx1Lb
gjxpLdp4dVrBs4EN9YiSeBkHxoxCnQbUrIQKSvv390O3XS54osSjJ4rDKjJ1vnKg
eUxNOGLK6wrRYJ/m5lkDwJz8rhoTrxEzhVbZJYZGisk91rAstiLdPqyG59k/YO1o
aprRseh8Mk7yeCh7EKRDmjuqGpxf+VE=
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:10:15 2026 by rpki-client