Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/232218fb-52ee-3478-9615-5d042b01e4d7.roa
File:                     232218fb-52ee-3478-9615-5d042b01e4d7.roa (raw, json)
Hash identifier:          jOXL6WeaTzY9ADcAn0bmPzt5yvUa781NyuYEWXRJ28A=
Subject key identifier:   8A:6B:CB:CF:DC:6B:26:C0:4F:98:C8:CE:54:37:2B:12:90:72:0E:46
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EF01CC4FE2D26823E0D922B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/232218fb-52ee-3478-9615-5d042b01e4d7.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     63949
IP address blocks:        172.235.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:c4:fe:2d:26:82:3e:0d:92:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=fe900420-af9c-4a7f-8d05-bcb1cdfd5faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c8:e3:4f:b0:20:16:ee:1c:0a:2f:6d:8d:e5:
                    3c:f8:52:08:fd:be:c0:ec:84:86:62:c1:9b:07:30:
                    5a:57:43:f6:a0:52:18:91:2a:3d:00:4e:ca:e1:1c:
                    a8:a4:98:30:fc:f9:c0:cd:cf:ae:cb:e9:7a:85:bf:
                    ef:21:ef:ea:e3:ad:0d:5c:c7:77:15:18:22:a8:66:
                    1e:47:22:89:14:47:04:63:21:fe:0e:cd:b5:97:0f:
                    8d:78:80:ef:5c:5a:f1:55:e6:82:20:ef:fd:73:41:
                    b2:2f:20:70:b8:b9:16:9e:59:bd:15:8b:b2:7b:8d:
                    be:b4:46:d9:53:04:bd:07:7f:b5:e2:04:ce:5a:03:
                    ea:5a:91:77:ab:a7:d1:5f:5d:02:8b:6f:52:5b:90:
                    3f:84:f3:71:26:39:f1:00:fd:0a:23:dd:55:75:00:
                    93:30:28:52:92:ad:80:35:00:ff:ad:6f:0e:44:f6:
                    01:a3:ca:9e:62:bd:51:78:25:c0:d6:01:90:6c:f3:
                    72:a1:74:1b:85:76:3c:40:aa:c8:ad:44:e7:be:f1:
                    b6:b0:6c:1b:2f:0a:a2:7a:dd:b1:13:45:03:08:bc:
                    18:2f:1e:0a:51:74:02:e6:cf:44:0c:ce:bd:62:a9:
                    37:f7:7d:fb:e4:05:1c:97:c8:24:99:86:b6:66:55:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6B:CB:CF:DC:6B:26:C0:4F:98:C8:CE:54:37:2B:12:90:72:0E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/232218fb-52ee-3478-9615-5d042b01e4d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.235.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b2:9d:2f:21:73:cc:7b:50:76:f3:7a:e5:76:05:e4:ce:53:
         d1:36:dd:3f:b5:dd:76:8e:88:21:3b:cb:3e:5d:23:0f:fb:42:
         ba:00:9f:ba:a9:dc:e0:3c:69:32:b6:4f:71:b3:61:69:cc:6c:
         f3:05:2f:e4:62:44:b9:8d:ee:b5:fa:b7:10:60:83:02:33:96:
         8c:22:30:f3:25:69:36:1f:0f:ae:b8:88:12:36:e6:94:0a:24:
         7c:3a:5a:39:97:43:d4:18:a2:96:a5:17:d1:00:ec:ee:44:14:
         3c:3c:81:0c:ff:b1:d1:e5:0e:1a:68:13:f9:26:06:38:2a:6c:
         2e:85:ad:b1:a0:c6:cc:f9:3c:1d:d6:e6:8c:c4:5d:1e:83:3a:
         31:1b:9d:24:3c:2b:f2:bf:31:f4:c1:e7:5b:18:58:d6:38:9d:
         ac:c4:aa:87:af:d8:9f:c6:78:fc:63:d2:1e:16:f0:02:09:7e:
         00:6d:fd:95:57:c9:04:2a:86:d6:a6:a2:75:97:fc:ea:a8:04:
         45:12:89:48:2d:04:b5:3a:13:60:3f:3d:bb:43:d5:f0:de:47:
         6d:7a:93:af:91:00:ec:5f:f2:70:a9:04:95:12:84:44:b8:98:
         4c:d6:98:e6:11:4f:79:0e:aa:4c:0e:cb:ef:51:dd:a6:5c:0a:
         2a:7f:08:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHMT+LSaCPg2SKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
ZmU5MDA0MjAtYWY5Yy00YTdmLThkMDUtYmNiMWNkZmQ1ZmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8jjT7AgFu4cCi9tjeU8+FII/b7A7ISGYsGb
BzBaV0P2oFIYkSo9AE7K4RyopJgw/PnAzc+uy+l6hb/vIe/q460NXMd3FRgiqGYe
RyKJFEcEYyH+Ds21lw+NeIDvXFrxVeaCIO/9c0GyLyBwuLkWnlm9FYuye42+tEbZ
UwS9B3+14gTOWgPqWpF3q6fRX10Ci29SW5A/hPNxJjnxAP0KI91VdQCTMChSkq2A
NQD/rW8ORPYBo8qeYr1ReCXA1gGQbPNyoXQbhXY8QKrIrUTnvvG2sGwbLwqiet2x
E0UDCLwYLx4KUXQC5s9EDM69Yqk393375AUcl8gkmYa2ZlUbPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIpry8/caybAT5jIzlQ3KxKQcg5GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjMyMjE4ZmItNTJlZS0z
NDc4LTk2MTUtNWQwNDJiMDFlNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOt+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGaynS8hc8x7UHbzeuV2BeTOU9E23T+13XaOiCE7yz5dIw/7QroAn7qp
3OA8aTK2T3GzYWnMbPMFL+RiRLmN7rX6txBggwIzlowiMPMlaTYfD664iBI25pQK
JHw6WjmXQ9QYopalF9EA7O5EFDw8gQz/sdHlDhpoE/kmBjgqbC6FrbGgxsz5PB3W
5ozEXR6DOjEbnSQ8K/K/MfTB51sYWNY4nazEqoev2J/GePxj0h4W8AIJfgBt/ZVX
yQQqhtamonWX/OqoBEUSiUgtBLU6E2A/PbtD1fDeR216k6+RAOxf8nCpBJUShES4
mEzWmOYRT3kOqkwOy+9R3aZcCip/CHw=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:28:41 2026 by rpki-client