Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa
File:                     325875a8-7f1a-358a-a215-06cc79b97d9a.roa (raw, json)
Hash identifier:          YQYBL318Yu9LRyZkQH0RniNz4PqRww41aYSHD0iXOus=
Subject key identifier:   48:33:AB:FE:5B:32:47:9C:15:6D:0B:20:26:74:0C:DE:2C:96:1C:7C
Certificate issuer:       /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Certificate serial:       010D0C9F4328584DE9B08740BFF0B625F39285E0
Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     395567
IP address blocks:        172.83.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:87:40:bf:f0:b6:25:f3:92:85:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=63d33f00-a26e-4824-9983-fbd304995a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:98:97:b2:80:0c:9e:b5:79:b2:b4:7f:fe:
                    af:10:a9:12:5c:86:15:87:fe:52:52:0b:33:ce:69:
                    2a:83:cc:d3:22:81:c3:87:7d:cd:13:b9:59:e3:3c:
                    18:05:0a:e5:d5:fc:a1:bc:81:8b:6e:28:92:7c:9c:
                    d6:85:06:db:1f:6e:01:37:9e:8b:0c:33:4f:e3:d6:
                    c4:2b:4a:8b:64:7e:d8:6e:5c:b0:d1:6c:7b:e6:d2:
                    89:21:1b:c8:a5:6d:36:b6:53:7d:e2:bf:28:20:38:
                    da:78:ea:52:1f:71:c1:cb:f3:1c:1c:4e:79:dc:16:
                    26:6a:8f:ff:38:6f:10:a2:95:72:49:95:23:31:d0:
                    17:06:6f:e9:78:41:0b:ae:a9:40:5a:2a:96:50:8c:
                    f9:b7:de:38:e4:fd:ae:21:23:66:61:ee:fd:9e:16:
                    6f:d3:fe:13:78:c1:7d:87:c3:1a:42:a6:73:dd:f4:
                    dd:67:25:70:b1:df:32:b1:4b:7c:72:fd:c3:32:b5:
                    86:66:3d:8f:81:e4:ae:01:5d:92:2a:e5:a6:b6:f7:
                    0d:00:b4:95:48:d3:5a:6c:a2:99:f1:93:1f:82:e0:
                    b2:c8:b9:22:4a:22:b7:53:ad:3d:c9:1c:a9:e3:79:
                    93:ee:e2:d4:ee:c4:d5:1e:1d:99:bc:cf:4d:8b:c3:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:33:AB:FE:5B:32:47:9C:15:6D:0B:20:26:74:0C:DE:2C:96:1C:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a6:60:68:52:cd:02:72:16:5a:53:d4:ad:84:11:1d:25:7a:
         73:b7:5b:d4:66:be:17:00:04:1d:59:50:5b:b6:3b:4b:d9:4a:
         c6:5b:96:5c:4a:d6:4d:c7:d7:22:89:aa:39:6e:ba:d7:01:fb:
         b8:f2:df:62:fb:bc:d1:b0:bd:9a:d8:f9:f3:2b:44:07:3f:b8:
         f8:33:bf:ee:ea:45:fd:fd:98:69:2f:8e:b0:06:d6:1d:11:16:
         a5:f7:52:48:4c:ae:1a:38:f8:3a:83:bc:97:eb:27:61:fe:b5:
         5b:f9:4b:a7:98:b3:75:5d:ed:7f:55:a6:83:86:83:dc:c9:3e:
         78:17:6d:f8:72:51:f4:e2:86:a5:78:95:8a:da:e2:cb:70:1c:
         ec:e3:47:4d:dd:27:5c:5c:22:19:b6:f1:d3:0c:7d:d5:49:e4:
         cc:a2:2e:f8:43:03:9d:ea:d0:d6:3d:91:4b:a2:9e:81:de:ec:
         62:0e:a8:57:2f:0a:a0:63:51:59:4c:31:73:82:ec:4f:aa:7f:
         19:85:f3:e2:d5:47:81:39:4d:58:0d:19:cd:00:c3:04:ec:54:
         ad:12:05:bc:24:ff:2b:85:46:86:37:10:4a:09:71:46:05:8d:
         68:74:61:ad:52:3c:81:a7:8e:15:ac:38:42:41:93:61:44:ca:
         f7:4f:49:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psIdAv/C2JfOSheAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3
Y2IzMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk
NjNkMzNmMDAtYTI2ZS00ODI0LTk5ODMtZmJkMzA0OTk1YThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4eYl7KADJ61ebK0f/6vEKkSXIYVh/5SUgsz
zmkqg8zTIoHDh33NE7lZ4zwYBQrl1fyhvIGLbiiSfJzWhQbbH24BN56LDDNP49bE
K0qLZH7Yblyw0Wx75tKJIRvIpW02tlN94r8oIDjaeOpSH3HBy/McHE553BYmao//
OG8QopVySZUjMdAXBm/peEELrqlAWiqWUIz5t9445P2uISNmYe79nhZv0/4TeMF9
h8MaQqZz3fTdZyVwsd8ysUt8cv3DMrWGZj2PgeSuAV2SKuWmtvcNALSVSNNabKKZ
8ZMfguCyyLkiSiK3U609yRyp43mT7uLU7sTVHh2ZvM9Ni8MpSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEgzq/5bMkecFW0LICZ0DN4slhx8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3
YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMzI1ODc1YTgtN2YxYS0z
NThhLWEyMTUtMDZjYzc5Yjk3ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2
MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm
N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm
ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFPIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKCmYGhSzQJyFlpT1K2EER0lenO3W9RmvhcABB1ZUFu2O0vZSsZbllxK
1k3H1yKJqjluutcB+7jy32L7vNGwvZrY+fMrRAc/uPgzv+7qRf39mGkvjrAG1h0R
FqX3UkhMrho4+DqDvJfrJ2H+tVv5S6eYs3Vd7X9VpoOGg9zJPngXbfhyUfTihqV4
lYra4stwHOzjR03dJ1xcIhm28dMMfdVJ5MyiLvhDA53q0NY9kUuinoHe7GIOqFcv
CqBjUVlMMXOC7E+qfxmF8+LVR4E5TVgNGc0AwwTsVK0SBbwk/yuFRoY3EEoJcUYF
jWh0Ya1SPIGnjhWsOEJBk2FEyvdPSWo=
-----END CERTIFICATE-----
Generated at Sat May 23 17:29:46 2026 by rpki-client