Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2dff37d-2812-398b-b9a6-11f2d4c6d77a.roa
File:                     e2dff37d-2812-398b-b9a6-11f2d4c6d77a.roa (raw, json)
Hash identifier:          ifq0Mi/5SxajG9e6kEC5tIZNkSSUKEZ5uW2hmSFSH9I=
Subject key identifier:   50:1D:3E:24:C7:23:CC:8C:19:4F:02:55:51:03:A8:39:AF:C6:7A:64
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ED001F9AED262EBE616F8FB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2dff37d-2812-398b-b9a6-11f2d4c6d77a.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     36183
IP address blocks:        172.226.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f9:ae:d2:62:eb:e6:16:f8:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=25eedd99-d9f3-439f-90e7-c57780ba48ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1a:64:8a:96:81:70:43:b4:2c:d5:92:c6:b3:
                    92:3c:44:42:cd:c1:80:40:5f:26:87:05:5e:6c:2c:
                    6d:40:66:3b:29:08:9c:07:58:51:b6:e1:2f:79:f9:
                    b2:f9:66:94:55:6f:bb:02:50:a0:1f:23:29:14:a9:
                    aa:3c:9a:e8:7b:e9:38:4b:d8:0e:27:6f:5c:17:a6:
                    28:d9:74:9b:41:8a:c7:ae:36:23:85:27:16:cb:e2:
                    7b:c7:9b:c9:6e:e5:5b:a2:f4:41:9a:cc:35:30:da:
                    22:a8:7f:1e:4b:fd:b9:9a:b8:25:91:98:ec:b3:2d:
                    3a:2e:9a:1c:bf:15:28:7d:a6:51:a5:9f:f3:6d:7c:
                    6b:76:d5:c9:af:f7:5e:88:89:ff:95:77:93:01:fc:
                    b6:89:df:7f:c0:89:02:59:ab:22:eb:2e:62:dd:ea:
                    ab:04:31:54:6e:11:7a:76:3a:0a:f4:4e:7d:c5:da:
                    b0:de:c3:a7:48:8f:3c:47:37:fe:4b:21:59:cb:c4:
                    81:57:69:84:72:63:de:01:9e:8d:ad:59:12:13:3c:
                    6f:ca:18:39:ed:34:13:49:59:2e:1b:16:a5:06:a2:
                    52:76:c3:18:6a:1c:26:e3:cf:fa:8e:f5:e7:02:b7:
                    53:76:0e:16:4c:48:88:d8:b5:b0:be:42:b6:8c:97:
                    d2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1D:3E:24:C7:23:CC:8C:19:4F:02:55:51:03:A8:39:AF:C6:7A:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2dff37d-2812-398b-b9a6-11f2d4c6d77a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:75:cb:1c:05:fe:bb:e0:c5:b5:76:fa:05:aa:92:07:2c:e9:
         6b:74:1a:a3:68:a1:fc:28:78:d7:2d:94:17:b2:2c:94:bb:a3:
         2b:c5:17:5b:45:dc:9a:d3:e3:f4:75:cb:a4:60:56:c0:54:cc:
         e8:91:b7:5c:28:96:fd:46:29:f9:96:9a:11:9e:dc:4c:7d:73:
         94:e7:36:c2:dc:76:6d:60:1d:a0:e8:46:1c:65:30:cd:53:5e:
         ec:00:64:9c:ad:9f:dd:93:79:36:ec:13:7b:4b:fa:d3:4a:2a:
         af:50:5a:1d:7c:36:e1:52:a5:98:28:7a:9e:43:ce:a5:39:f5:
         9a:f8:0f:82:c9:6a:97:bb:5f:ce:bd:24:68:07:fa:83:05:e9:
         ce:dc:c6:bd:36:7d:33:73:c1:a5:37:02:7b:63:b4:9b:1b:15:
         ca:24:d1:7a:c4:ce:d5:4c:e7:05:64:ad:5c:2b:e0:25:8a:0f:
         1e:87:50:87:4d:15:68:fb:c0:b9:d0:44:a7:75:06:3e:01:51:
         da:50:be:7a:18:ec:82:2d:19:8e:fc:d6:49:20:1d:0e:86:c1:
         59:82:06:57:9b:35:6f:94:8c:66:8c:90:ac:ce:5f:ca:10:4f:
         40:58:4f:b5:b2:39:a5:33:58:b2:7d:6d:ca:7d:4d:42:cf:ab:
         31:8f:7e:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfmu0mLr5hb4+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
MjVlZWRkOTktZDlmMy00MzlmLTkwZTctYzU3NzgwYmE0OGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhpkipaBcEO0LNWSxrOSPERCzcGAQF8mhwVe
bCxtQGY7KQicB1hRtuEvefmy+WaUVW+7AlCgHyMpFKmqPJroe+k4S9gOJ29cF6Yo
2XSbQYrHrjYjhScWy+J7x5vJbuVbovRBmsw1MNoiqH8eS/25mrglkZjssy06Lpoc
vxUofaZRpZ/zbXxrdtXJr/deiIn/lXeTAfy2id9/wIkCWasi6y5i3eqrBDFUbhF6
djoK9E59xdqw3sOnSI88Rzf+SyFZy8SBV2mEcmPeAZ6NrVkSEzxvyhg57TQTSVku
GxalBqJSdsMYahwm48/6jvXnArdTdg4WTEiI2LWwvkK2jJfSRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFAdPiTHI8yMGU8CVVEDqDmvxnpkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTJkZmYzN2QtMjgxMi0z
OThiLWI5YTYtMTFmMmQ0YzZkNzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOJ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFh1yxwF/rvgxbV2+gWqkgcs6Wt0GqNoofwoeNctlBeyLJS7oyvFF1tF
3JrT4/R1y6RgVsBUzOiRt1wolv1GKfmWmhGe3Ex9c5TnNsLcdm1gHaDoRhxlMM1T
XuwAZJytn92TeTbsE3tL+tNKKq9QWh18NuFSpZgoep5DzqU59Zr4D4LJape7X869
JGgH+oMF6c7cxr02fTNzwaU3AntjtJsbFcok0XrEztVM5wVkrVwr4CWKDx6HUIdN
FWj7wLnQRKd1Bj4BUdpQvnoY7IItGY781kkgHQ6GwVmCBlebNW+UjGaMkKzOX8oQ
T0BYT7WyOaUzWLJ9bcp9TULPqzGPfno=
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:09:23 2026 by rpki-client