Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/943ab204-abf5-3740-90f4-c18d7ee50f05.roa
File:                     943ab204-abf5-3740-90f4-c18d7ee50f05.roa (raw, json)
Hash identifier:          zxM3vaZNPy4TG9ivE9Wse7BkLNqKHDOyLSURj3RFoVM=
Subject key identifier:   13:16:E3:21:C8:CC:4A:2D:8B:4E:01:7B:FE:48:BF:76:67:F7:21:E1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ED00203D4875E8156E7D518F8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/943ab204-abf5-3740-90f4-c18d7ee50f05.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     36183
IP address blocks:        172.226.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:03:d4:87:5e:81:56:e7:d5:18:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=e480b90e-4098-44f1-8de2-986ec438ecdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ea:dc:fe:11:a0:5a:5e:6f:9d:a3:d5:12:21:
                    25:47:30:ed:fe:5d:0f:bb:f7:05:91:3f:58:63:f3:
                    ac:2d:c4:91:67:b8:0b:97:8d:42:14:49:2c:5b:54:
                    81:f0:dd:55:e5:69:fd:64:6d:3b:b5:8a:71:11:bd:
                    c7:a6:d2:8c:08:3a:0c:04:13:62:a1:5a:88:04:24:
                    cd:75:54:a1:32:96:de:d1:19:99:7e:23:0c:1c:17:
                    6f:7c:76:cb:4f:e2:52:6b:ce:ce:4c:8d:16:11:32:
                    fb:2d:66:92:83:5d:ba:00:67:83:c1:5c:6e:0a:da:
                    11:ee:ad:24:5d:4b:63:20:15:d6:0f:f7:8a:f9:09:
                    fa:5e:83:a8:ce:e6:cb:03:97:82:e5:ec:bd:f3:35:
                    66:87:98:93:97:cb:1f:7c:f6:63:3a:c5:cf:d3:94:
                    57:47:ad:30:ce:f1:42:cc:61:2d:88:91:fc:2a:16:
                    74:06:77:d5:e6:3a:21:ad:7c:79:39:f5:25:ab:55:
                    42:a0:fc:c5:62:2b:7a:3e:0b:4b:d7:e4:9d:07:45:
                    68:0f:a4:9b:50:01:28:5e:19:e4:1e:7e:b5:b8:e5:
                    72:73:a9:84:ee:b6:5b:cc:93:aa:a7:4c:1a:9b:db:
                    d7:26:66:d9:1c:46:0f:d3:32:65:bd:9e:b3:75:02:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:16:E3:21:C8:CC:4A:2D:8B:4E:01:7B:FE:48:BF:76:67:F7:21:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/943ab204-abf5-3740-90f4-c18d7ee50f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:99:3a:40:7d:ee:9e:bc:37:7a:79:75:a6:08:68:fe:bb:c7:
         41:b0:b9:bf:7b:f5:eb:8f:07:5f:4e:be:3f:82:fe:5e:a5:f8:
         23:ee:9a:c9:e1:36:55:a3:d8:6f:b8:08:4d:31:a2:ed:3b:ca:
         30:cc:d3:33:4a:66:4d:e1:5b:b5:24:0a:c7:65:43:d9:18:5b:
         d7:ad:cb:14:a9:df:3e:93:f5:48:5f:2d:5c:bc:ab:40:9f:65:
         43:fb:d6:53:a4:3b:a6:b1:d4:5f:a6:5a:cd:c4:47:08:9c:08:
         40:b1:8a:d9:09:fc:7c:57:01:42:6d:50:8c:7e:95:d9:d8:7f:
         92:64:b0:f9:5d:75:13:4b:68:16:b9:17:08:03:41:6f:aa:39:
         3e:28:20:0f:66:18:13:86:76:4d:31:2e:79:16:33:5d:45:90:
         7c:83:9b:cf:26:28:40:47:44:b8:02:73:09:48:10:db:e4:3e:
         4a:59:7a:d4:ce:fd:78:e8:91:23:cd:2a:6c:15:e9:25:e1:51:
         6e:c4:36:72:e9:62:1b:4f:91:2f:12:71:e5:e4:53:f0:18:dd:
         ed:8c:e5:fd:d1:e9:18:2b:f1:ca:1f:5e:00:e3:dd:d0:79:bb:
         00:b7:a9:64:98:01:43:2f:a5:74:1e:89:a6:d0:c4:52:1d:85:
         f1:23:41:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAgPUh16BVufVGPgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
ZTQ4MGI5MGUtNDA5OC00NGYxLThkZTItOTg2ZWM0MzhlY2RjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5erc/hGgWl5vnaPVEiElRzDt/l0Pu/cFkT9Y
Y/OsLcSRZ7gLl41CFEksW1SB8N1V5Wn9ZG07tYpxEb3HptKMCDoMBBNioVqIBCTN
dVShMpbe0RmZfiMMHBdvfHbLT+JSa87OTI0WETL7LWaSg126AGeDwVxuCtoR7q0k
XUtjIBXWD/eK+Qn6XoOozubLA5eC5ey98zVmh5iTl8sffPZjOsXP05RXR60wzvFC
zGEtiJH8KhZ0BnfV5johrXx5OfUlq1VCoPzFYit6PgtL1+SdB0VoD6SbUAEoXhnk
Hn61uOVyc6mE7rZbzJOqp0wam9vXJmbZHEYP0zJlvZ6zdQK4vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMW4yHIzEoti04Be/5Iv3Zn9yHhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTQzYWIyMDQtYWJmNS0z
NzQwLTkwZjQtYzE4ZDdlZTUwZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGyZOkB97p68N3p5daYIaP67x0Gwub979euPB19Ovj+C/l6l+CPumsnh
NlWj2G+4CE0xou07yjDM0zNKZk3hW7UkCsdlQ9kYW9etyxSp3z6T9UhfLVy8q0Cf
ZUP71lOkO6ax1F+mWs3ERwicCECxitkJ/HxXAUJtUIx+ldnYf5JksPlddRNLaBa5
FwgDQW+qOT4oIA9mGBOGdk0xLnkWM11FkHyDm88mKEBHRLgCcwlIENvkPkpZetTO
/XjokSPNKmwV6SXhUW7ENnLpYhtPkS8SceXkU/AY3e2M5f3R6Rgr8cofXgDj3dB5
uwC3qWSYAUMvpXQeiabQxFIdhfEjQTc=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:29:27 2026 by rpki-client