Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/647a69c0-ead5-325c-849c-5bd5cdfb0081.roa
File:                     647a69c0-ead5-325c-849c-5bd5cdfb0081.roa (raw, json)
Hash identifier:          NIqy7Yd5MZZUgeHhbiBeCF9tW4lF5Gn90s6LfdxbQfU=
Subject key identifier:   EF:33:B6:4B:44:FF:19:4C:51:CF:A8:1B:5E:50:6D:BE:46:75:9C:CE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EC20C72BADF5744EACD01E2C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/647a69c0-ead5-325c-849c-5bd5cdfb0081.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     36183
IP address blocks:        172.225.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:72:ba:df:57:44:ea:cd:01:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=f64e3c67-e245-4ac1-bce9-6a540a6cbeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0c:fc:81:5b:e5:9a:18:95:74:e7:68:7a:57:
                    19:75:1f:33:7b:86:30:d8:4c:83:ae:51:c6:8b:4a:
                    eb:d2:8e:de:8c:81:19:17:3d:9d:3e:e5:c0:fe:16:
                    62:ec:65:3a:2d:58:89:3c:77:82:15:94:09:5c:0a:
                    2a:6c:a7:ba:7d:e1:d5:7b:89:c3:b1:5f:34:fa:77:
                    29:f1:a9:4b:d9:08:61:39:11:06:2c:3b:c5:4c:fd:
                    dc:3f:04:ab:cf:97:e6:80:dc:ff:10:75:04:27:6f:
                    f7:86:97:05:b5:de:8c:a2:0b:c6:f0:d2:6d:f6:f8:
                    be:8f:b5:c4:01:9c:ce:84:4a:cd:34:39:ca:60:a4:
                    fc:e6:1d:9a:26:a3:df:eb:f3:9a:5c:0e:cc:ac:a7:
                    b0:f4:ba:ff:4e:fc:58:e1:29:3c:5f:14:02:41:39:
                    3f:3a:57:e7:34:c5:4e:7c:f5:1b:2d:7d:0d:fe:2a:
                    f5:df:55:4b:a5:d3:5f:09:10:8e:d3:8e:c4:7d:cf:
                    ec:47:91:77:cf:00:90:20:f5:10:b9:ab:ab:8b:70:
                    38:c7:4b:a6:9d:b6:f2:10:c1:80:83:15:2a:db:ff:
                    c8:87:c3:3d:4d:b2:cd:18:15:f8:03:a1:b2:d5:f8:
                    01:74:6b:ae:09:f5:df:31:18:cb:a7:96:9e:2d:b5:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:33:B6:4B:44:FF:19:4C:51:CF:A8:1B:5E:50:6D:BE:46:75:9C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/647a69c0-ead5-325c-849c-5bd5cdfb0081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:bf:d2:83:a6:4c:a5:28:4f:46:76:1c:8d:70:87:47:ce:a8:
         41:70:b1:c8:62:e9:cc:ec:c4:b1:ce:64:5e:48:35:4c:24:1f:
         79:07:b3:85:01:53:c4:65:8f:91:a1:65:e4:e2:6c:25:d5:a4:
         cf:1a:6b:ed:75:8f:c6:9d:8d:b0:7b:7f:a8:94:35:c9:d7:1e:
         cc:3f:4a:7e:93:70:57:a9:c2:e0:73:11:65:70:db:09:c1:a6:
         d6:27:25:09:57:22:72:d9:2a:07:35:36:bf:c2:81:35:80:21:
         46:0b:fc:74:97:78:11:dc:d0:21:0d:2d:5f:60:81:89:1b:0a:
         f5:67:a1:23:82:da:e3:9f:9b:43:ca:fb:e9:13:e6:4a:79:80:
         24:53:da:8c:30:28:69:01:bb:92:e1:bf:4f:e9:9a:bf:4b:a4:
         e9:b8:4e:90:df:49:4c:d3:3b:a5:36:ef:f8:3b:c0:c7:27:59:
         9e:fe:f9:5c:05:fb:a7:2d:65:9c:79:53:e4:10:e0:e9:5b:42:
         f8:be:bc:5d:0b:35:08:bf:0d:1b:13:ca:d3:f5:74:cd:91:2f:
         71:8c:a9:f2:96:20:3f:54:57:03:30:34:69:38:87:33:ce:1a:
         44:43:de:c2:ef:25:63:21:1e:52:09:18:54:d0:36:8d:5f:60:
         41:97:7f:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDHK631dE6s0B4sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
ZjY0ZTNjNjctZTI0NS00YWMxLWJjZTktNmE1NDBhNmNiZWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQz8gVvlmhiVdOdoelcZdR8ze4Yw2EyDrlHG
i0rr0o7ejIEZFz2dPuXA/hZi7GU6LViJPHeCFZQJXAoqbKe6feHVe4nDsV80+ncp
8alL2QhhOREGLDvFTP3cPwSrz5fmgNz/EHUEJ2/3hpcFtd6MogvG8NJt9vi+j7XE
AZzOhErNNDnKYKT85h2aJqPf6/OaXA7MrKew9Lr/TvxY4Sk8XxQCQTk/OlfnNMVO
fPUbLX0N/ir131VLpdNfCRCO047Efc/sR5F3zwCQIPUQuauri3A4x0umnbbyEMGA
gxUq2//Ih8M9TbLNGBX4A6Gy1fgBdGuuCfXfMRjLp5aeLbXZsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8ztktE/xlMUc+oG15Qbb5GdZzOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjQ3YTY5YzAtZWFkNS0z
MjVjLTg0OWMtNWJkNWNkZmIwMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACG/0oOmTKUoT0Z2HI1wh0fOqEFwschi6czsxLHOZF5INUwkH3kHs4UB
U8Rlj5GhZeTibCXVpM8aa+11j8adjbB7f6iUNcnXHsw/Sn6TcFepwuBzEWVw2wnB
ptYnJQlXInLZKgc1Nr/CgTWAIUYL/HSXeBHc0CENLV9ggYkbCvVnoSOC2uOfm0PK
++kT5kp5gCRT2owwKGkBu5Lhv0/pmr9LpOm4TpDfSUzTO6U27/g7wMcnWZ7++VwF
+6ctZZx5U+QQ4OlbQvi+vF0LNQi/DRsTytP1dM2RL3GMqfKWID9UVwMwNGk4hzPO
GkRD3sLvJWMhHlIJGFTQNo1fYEGXf88=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:29:47 2026 by rpki-client