Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2add6851-78a6-30bd-89b7-5568acdc9cc3.roa
File:                     2add6851-78a6-30bd-89b7-5568acdc9cc3.roa (raw, json)
Hash identifier:          OISSf82vtzcHu5mVWLYSEKMcL98ynb7cfXEEPd/U9kM=
Subject key identifier:   C5:F8:67:E6:0F:4E:23:7B:BC:B7:03:D7:EB:E5:53:69:BA:A9:1C:AE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ED9C760145D010C702740EEC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2add6851-78a6-30bd-89b7-5568acdc9cc3.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     36183
IP address blocks:        172.224.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:60:14:5d:01:0c:70:27:40:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=acda805e-206e-4f47-82e2-c52e309d87ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:80:a7:5d:b5:7c:c5:81:3a:9a:b8:10:c9:0e:
                    bd:61:70:10:1e:cd:a7:79:47:a7:38:46:ba:d2:a0:
                    51:e4:49:d0:bf:8c:36:6a:84:51:79:98:c4:45:f5:
                    8e:75:6d:32:7c:de:4f:fe:ea:3b:f4:f7:73:07:16:
                    b7:ec:09:a4:92:18:77:27:67:7c:0b:07:90:4e:2a:
                    17:e4:d0:c6:27:e3:51:36:a7:b9:b6:0c:23:d7:af:
                    1d:79:62:68:42:28:d5:95:f6:ef:e5:f8:4f:c2:7c:
                    7a:b4:a5:20:c3:01:cb:a3:e9:10:1e:d6:0f:90:c9:
                    dc:f9:75:9a:89:e6:d0:de:a8:67:32:50:02:19:af:
                    15:54:62:62:22:f7:95:3a:ba:9d:a4:90:21:32:68:
                    2c:28:74:60:de:d0:b2:5d:40:c7:fa:21:4a:53:76:
                    f5:aa:ca:61:ab:f5:52:96:bf:3e:f2:8d:8d:8b:55:
                    70:7e:d0:53:d7:b9:5a:a1:d1:4c:e8:0a:5d:a6:b4:
                    51:de:1f:39:ef:42:78:e5:18:79:4b:13:13:ec:71:
                    3a:e8:4d:9e:74:b6:f5:56:e4:16:47:db:66:d5:55:
                    03:1b:4e:c3:f6:8b:47:bf:34:04:53:1e:30:4a:ae:
                    17:ed:9f:ea:be:32:5c:7d:8b:d8:ff:61:55:a6:9a:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F8:67:E6:0F:4E:23:7B:BC:B7:03:D7:EB:E5:53:69:BA:A9:1C:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2add6851-78a6-30bd-89b7-5568acdc9cc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:90:b8:a8:e7:07:a3:2c:9a:62:69:85:14:a4:da:56:22:18:
         50:0b:23:dd:a1:cc:f0:b0:ac:8a:6c:15:6b:4a:53:b6:ed:30:
         1a:53:85:ea:53:89:49:c7:ee:a1:6b:66:3f:64:6c:96:a5:de:
         5d:fa:4e:2a:d9:52:6b:69:8e:a8:28:bc:70:2f:bb:6d:22:48:
         57:d7:10:c9:42:99:b6:83:5b:fb:d0:7f:40:dc:98:07:29:f8:
         10:90:27:9e:07:d2:c8:c6:23:65:ff:29:d5:a4:ee:63:12:46:
         82:d4:b1:65:99:36:cc:df:90:93:3e:cb:27:0b:a7:2d:01:ee:
         1f:70:fb:46:54:f3:66:58:2a:7b:dc:e6:99:f3:00:db:b3:df:
         da:70:68:65:6a:fe:80:e7:03:8b:6c:57:a8:f5:af:62:a1:06:
         dc:f2:67:6b:55:06:89:e5:2d:78:12:cb:d0:0f:8d:68:21:81:
         b0:3f:52:73:ef:a3:04:ca:a4:ef:5f:1a:f4:5a:95:a4:6d:e1:
         ae:69:3d:1e:52:8c:79:2f:59:bf:3c:7a:75:da:e7:3b:fe:c7:
         67:33:a9:57:c2:68:07:de:b5:db:de:7c:01:57:19:3c:55:6b:
         47:c3:8b:a8:11:25:54:59:2c:62:2e:be:af:d1:bd:d7:e0:f1:
         f3:39:1a:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2AUXQEMcCdA7sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
YWNkYTgwNWUtMjA2ZS00ZjQ3LTgyZTItYzUyZTMwOWQ4N2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4CnXbV8xYE6mrgQyQ69YXAQHs2neUenOEa6
0qBR5EnQv4w2aoRReZjERfWOdW0yfN5P/uo79PdzBxa37Amkkhh3J2d8CweQTioX
5NDGJ+NRNqe5tgwj168deWJoQijVlfbv5fhPwnx6tKUgwwHLo+kQHtYPkMnc+XWa
iebQ3qhnMlACGa8VVGJiIveVOrqdpJAhMmgsKHRg3tCyXUDH+iFKU3b1qsphq/VS
lr8+8o2Ni1VwftBT17laodFM6ApdprRR3h8570J45Rh5SxMT7HE66E2edLb1VuQW
R9tm1VUDG07D9otHvzQEUx4wSq4X7Z/qvjJcfYvY/2FVppoINwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMX4Z+YPTiN7vLcD1+vlU2m6qRyuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmFkZDY4NTEtNzhhNi0z
MGJkLTg5YjctNTU2OGFjZGM5Y2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+QuKjnB6MsmmJphRSk2lYiGFALI92hzPCwrIpsFWtKU7btMBpThepT
iUnH7qFrZj9kbJal3l36TirZUmtpjqgovHAvu20iSFfXEMlCmbaDW/vQf0DcmAcp
+BCQJ54H0sjGI2X/KdWk7mMSRoLUsWWZNszfkJM+yycLpy0B7h9w+0ZU82ZYKnvc
5pnzANuz39pwaGVq/oDnA4tsV6j1r2KhBtzyZ2tVBonlLXgSy9APjWghgbA/UnPv
owTKpO9fGvRalaRt4a5pPR5SjHkvWb88enXa5zv+x2czqVfCaAfetdvefAFXGTxV
a0fDi6gRJVRZLGIuvq/Rvdfg8fM5Gps=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:56:14 2026 by rpki-client