Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524df8c9-153b-3562-b90e-97cf8df41341.roa
File:                     524df8c9-153b-3562-b90e-97cf8df41341.roa (raw, json)
Hash identifier:          g6crsTfXwBFC9MpSANmBl57tDes338ohF5tbIB67veg=
Subject key identifier:   39:43:78:84:32:40:A3:BB:C5:87:6D:C1:05:A4:1E:C8:13:B0:07:D5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EC0A7360289680C5FD6B4B600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524df8c9-153b-3562-b90e-97cf8df41341.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     36183
IP address blocks:        172.225.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:36:02:89:68:0c:5f:d6:b4:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=583682b0-8718-4187-9c04-9451ab266e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:46:18:bd:f4:d4:3b:81:ca:31:93:f8:dc:98:
                    55:c6:ce:5d:d5:f2:2a:0d:d7:4f:59:37:fc:fe:84:
                    45:eb:c4:05:74:5f:99:9d:e0:13:eb:e7:45:6d:22:
                    a8:d0:ba:f8:57:3a:c5:9f:9f:e9:f7:6d:a0:11:3c:
                    3d:62:d3:25:15:5f:3a:f7:45:75:54:62:81:3d:ec:
                    46:4b:37:d9:4b:dd:6c:64:8a:97:33:b1:47:f3:cf:
                    70:20:f8:62:cf:82:0f:c8:4c:2d:b3:d4:72:cf:a6:
                    c5:2d:c8:e0:d6:ef:ac:de:5e:f4:e6:84:06:f9:1c:
                    27:79:d9:ce:f1:8f:75:48:13:0e:15:60:84:34:1b:
                    38:2e:a9:22:26:7f:e0:e7:f6:9e:80:3d:17:a7:51:
                    e9:76:b4:fd:37:9d:15:03:7a:78:58:1c:f7:29:61:
                    cb:d6:fb:3c:0f:91:9f:5c:10:10:2a:9f:5d:fe:5c:
                    57:bb:72:71:1f:85:d1:6d:3a:54:2c:63:74:49:e9:
                    cb:18:ed:59:35:49:c6:68:21:44:76:bb:9e:c5:b0:
                    92:dc:a8:fe:af:1c:49:65:3e:c2:bd:bf:d9:da:86:
                    94:69:99:e4:2e:d9:e4:b3:c0:98:49:10:f1:01:9a:
                    cb:00:92:37:23:47:32:2c:2a:84:d4:ca:0b:33:f7:
                    2a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:43:78:84:32:40:A3:BB:C5:87:6D:C1:05:A4:1E:C8:13:B0:07:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524df8c9-153b-3562-b90e-97cf8df41341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:04:53:0c:8b:68:72:b3:b4:e9:f2:57:c2:8b:f5:4d:59:
         29:61:f0:85:09:00:7e:2d:21:1c:da:5d:08:bd:92:87:bd:75:
         ea:4b:ff:15:6a:ba:b2:b6:e6:cb:87:69:ee:9d:22:10:32:22:
         43:07:c5:1e:56:f7:66:52:64:90:02:59:1b:31:42:8a:92:ee:
         60:04:72:15:44:c6:1d:b1:bb:47:89:cc:2d:c8:f4:8d:da:79:
         5e:2d:29:57:f1:a0:98:31:30:e1:95:a9:2e:83:fe:a8:eb:20:
         08:28:1c:f0:0d:4a:8b:0d:51:33:7e:d9:c4:53:e4:13:d7:07:
         f9:c9:91:b9:b1:d5:7c:89:99:b5:2e:e5:a4:e6:bb:02:79:93:
         37:f3:b4:69:bf:db:da:dd:37:4b:ca:37:9e:5e:c0:00:91:70:
         87:07:72:28:0a:24:6f:79:ba:c1:d9:15:73:7a:20:93:18:44:
         42:f7:e7:0e:9d:3c:f1:09:64:af:af:da:01:5c:e5:e2:04:3b:
         48:90:f8:0c:87:e1:1e:cb:eb:25:70:a1:20:25:03:7d:6b:13:
         d1:a3:79:98:63:65:30:8d:ee:94:37:00:b8:d1:94:61:34:2a:
         df:43:9b:13:7e:d1:6b:53:d6:91:a4:15:7b:81:75:65:d6:8c:
         09:3b:28:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ApzYCiWgMX9a0tgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
NTgzNjgyYjAtODcxOC00MTg3LTljMDQtOTQ1MWFiMjY2ZTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0YYvfTUO4HKMZP43JhVxs5d1fIqDddPWTf8
/oRF68QFdF+ZneAT6+dFbSKo0Lr4VzrFn5/p922gETw9YtMlFV8690V1VGKBPexG
SzfZS91sZIqXM7FH889wIPhiz4IPyEwts9Ryz6bFLcjg1u+s3l705oQG+RwnednO
8Y91SBMOFWCENBs4LqkiJn/g5/aegD0Xp1HpdrT9N50VA3p4WBz3KWHL1vs8D5Gf
XBAQKp9d/lxXu3JxH4XRbTpULGN0SenLGO1ZNUnGaCFEdruexbCS3Kj+rxxJZT7C
vb/Z2oaUaZnkLtnks8CYSRDxAZrLAJI3I0cyLCqE1MoLM/cqcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDlDeIQyQKO7xYdtwQWkHsgTsAfVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTI0ZGY4YzktMTUzYi0z
NTYyLWI5MGUtOTdjZjhkZjQxMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOG6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC3PBFMMi2hys7Tp8lfCi/VNWSlh8IUJAH4tIRzaXQi9koe9depL/xVq
urK25suHae6dIhAyIkMHxR5W92ZSZJACWRsxQoqS7mAEchVExh2xu0eJzC3I9I3a
eV4tKVfxoJgxMOGVqS6D/qjrIAgoHPANSosNUTN+2cRT5BPXB/nJkbmx1XyJmbUu
5aTmuwJ5kzfztGm/29rdN0vKN55ewACRcIcHcigKJG95usHZFXN6IJMYREL35w6d
PPEJZK+v2gFc5eIEO0iQ+AyH4R7L6yVwoSAlA31rE9GjeZhjZTCN7pQ3ALjRlGE0
Kt9DmxN+0WtT1pGkFXuBdWXWjAk7KII=
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:12:46 2026 by rpki-client