Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9900537f-d5e2-3806-9033-2c220187a308.roa
File:                     9900537f-d5e2-3806-9033-2c220187a308.roa (raw, json)
Hash identifier:          +gysS+Jl35PfPETxOwNu4dWBsjVLKkqHyipDEI+PruI=
Subject key identifier:   E3:A8:33:BD:D4:5E:20:92:5B:47:46:41:28:28:13:CA:64:96:BC:30
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584E6C6F6B588137FA8F0FF50E80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9900537f-d5e2-3806-9033-2c220187a308.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     9009
IP address blocks:        172.111.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:6b:58:81:37:fa:8f:0f:f5:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=f0042b59-5430-4e25-a552-c8a95c31300c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:54:15:b8:b7:90:b1:0a:20:7d:88:e0:92:
                    46:23:60:96:75:7f:7f:86:68:fb:4b:98:b7:28:e2:
                    05:68:3a:b0:1a:46:18:74:14:46:1e:d5:9f:4f:d2:
                    1f:45:a6:61:41:57:bc:34:f7:78:4c:0d:fb:ad:09:
                    a4:c4:e4:de:6d:78:45:c0:be:5b:7a:a9:34:cc:ce:
                    6b:6a:c2:44:0a:3f:95:57:23:26:dd:5c:89:4c:24:
                    7f:d7:ec:88:d1:11:23:3e:bd:45:74:2c:e0:27:68:
                    e9:b7:b5:10:42:1b:b2:f0:b1:17:e4:a1:8a:32:57:
                    65:37:c7:b9:24:e8:8b:8f:36:2f:f8:88:00:97:c8:
                    0d:05:55:9f:f3:d5:70:7e:0b:4c:68:b4:ba:4a:5b:
                    7a:a4:6f:7b:e1:25:e8:76:f8:24:8e:70:fd:9d:27:
                    dd:d8:00:cd:8e:5d:25:50:f9:ed:03:fb:0f:39:19:
                    fe:54:10:ab:76:2d:04:c1:55:ae:74:43:09:53:97:
                    3a:7f:62:a9:8c:71:ec:9d:47:49:1a:65:ca:04:aa:
                    22:c9:b3:44:43:ea:7b:b2:12:be:08:ca:3d:a6:29:
                    a6:14:fb:26:e8:c7:da:e7:b6:a1:19:96:ae:e9:a0:
                    a5:87:2a:92:c2:9b:27:ee:7c:35:cd:e9:57:3a:54:
                    3e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A8:33:BD:D4:5E:20:92:5B:47:46:41:28:28:13:CA:64:96:BC:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9900537f-d5e2-3806-9033-2c220187a308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:55:b7:14:34:75:03:d7:71:43:a0:a9:f8:54:2f:a2:3e:fa:
         cb:48:9f:73:fc:2d:b1:8a:79:9c:e4:d8:93:f2:be:6d:43:4a:
         5e:13:e0:cb:3c:cf:b2:8f:3b:6f:5a:27:a0:b6:64:cf:e9:6a:
         97:18:6b:60:ea:b5:65:01:3c:e6:83:79:11:cc:b1:5b:03:c0:
         f7:e5:76:8f:15:d4:7f:71:e7:70:96:a3:9e:4a:e6:ae:2f:b3:
         2a:04:91:16:3a:f5:10:42:ba:7a:5e:e2:5f:92:89:54:18:34:
         ed:ad:d5:c8:f9:a2:34:e0:87:f3:06:d1:8c:1e:16:e9:48:a7:
         eb:5b:93:24:13:22:84:3b:fe:b8:67:09:0b:e7:e6:3b:a4:62:
         9f:6e:30:78:4f:c6:f4:ed:dd:7a:6e:14:0e:2a:c1:90:28:8e:
         15:2c:a3:cb:0b:e8:0b:f7:a3:2e:26:18:cf:22:2d:0f:9e:4e:
         bb:12:db:59:11:95:1d:e7:97:26:c6:f6:ce:5b:9e:79:35:dc:
         2b:2e:4f:d5:2f:4e:f0:43:c7:5c:f9:9b:62:b0:40:08:7d:28:
         94:0e:2f:e9:af:27:61:a3:1b:09:7e:84:c7:0a:0d:90:76:80:
         1b:1d:37:33:71:a3:c3:df:a1:62:f8:6c:3e:bf:4b:ff:b0:37:
         f9:99:ad:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2tYgTf6jw/1DoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk
ZjAwNDJiNTktNTQzMC00ZTI1LWE1NTItYzhhOTVjMzEzMDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouJUFbi3kLEKIH2I4JJGI2CWdX9/hmj7S5i3
KOIFaDqwGkYYdBRGHtWfT9IfRaZhQVe8NPd4TA37rQmkxOTebXhFwL5beqk0zM5r
asJECj+VVyMm3VyJTCR/1+yI0REjPr1FdCzgJ2jpt7UQQhuy8LEX5KGKMldlN8e5
JOiLjzYv+IgAl8gNBVWf89VwfgtMaLS6Slt6pG974SXodvgkjnD9nSfd2ADNjl0l
UPntA/sPORn+VBCrdi0EwVWudEMJU5c6f2KpjHHsnUdJGmXKBKoiybNEQ+p7shK+
CMo9pimmFPsm6Mfa57ahGZau6aClhyqSwpsn7nw1zelXOlQ+mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOOoM73UXiCSW0dGQSgoE8pklrwwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTkwMDUzN2YtZDVlMi0z
ODA2LTkwMzMtMmMyMjAxODdhMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG5VtxQ0dQPXcUOgqfhUL6I++stIn3P8LbGKeZzk2JPyvm1DSl4T4Ms8
z7KPO29aJ6C2ZM/papcYa2DqtWUBPOaDeRHMsVsDwPfldo8V1H9x53CWo55K5q4v
syoEkRY69RBCunpe4l+SiVQYNO2t1cj5ojTgh/MG0YweFulIp+tbkyQTIoQ7/rhn
CQvn5jukYp9uMHhPxvTt3XpuFA4qwZAojhUso8sL6Av3oy4mGM8iLQ+eTrsS21kR
lR3nlybG9s5bnnk13CsuT9UvTvBDx1z5m2KwQAh9KJQOL+mvJ2GjGwl+hMcKDZB2
gBsdNzNxo8PfoWL4bD6/S/+wN/mZrdA=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:57:08 2026 by rpki-client