Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dff6933-d238-3c65-b75c-6e090cc092e5.roa
File:                     5dff6933-d238-3c65-b75c-6e090cc092e5.roa (raw, json)
Hash identifier:          c/nocQ+3eHGq03cJaCY7R9Spzfk3kwx/WnOS03RbbxE=
Subject key identifier:   04:74:9E:0D:58:78:BB:3D:FD:29:CD:6A:73:71:5C:53:5B:66:D5:03
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6292FC351E823C37FC4F1980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dff6933-d238-3c65-b75c-6e090cc092e5.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     20115
IP address blocks:        172.222.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:fc:35:1e:82:3c:37:fc:4f:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=89da3b67-45c3-4a86-aa99-3419cf3d0e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:d8:f4:35:b2:f9:6f:32:30:0f:65:80:90:
                    47:ea:7d:7d:b9:e3:4a:7a:86:dd:a0:c6:3f:e2:1e:
                    36:02:33:97:6e:98:38:63:3f:2b:73:71:b2:c6:21:
                    52:9c:5c:19:ee:9e:22:8f:5f:34:3d:8e:ac:bd:ff:
                    8b:f2:72:7d:44:f6:93:09:e2:99:7e:c5:1a:40:1d:
                    1f:35:6e:9b:f5:37:f4:a7:2c:2d:26:4b:46:32:e2:
                    c2:33:dd:32:39:58:d0:26:94:a2:a0:11:46:93:84:
                    02:af:3b:25:07:9a:84:a2:e4:79:8b:9f:a7:1d:d1:
                    90:0a:c7:4b:b4:b0:6f:6a:a3:73:c0:bf:2c:7a:31:
                    0c:41:18:30:81:5f:77:ec:fa:f4:2d:d9:84:f3:e6:
                    71:72:10:89:fd:d7:97:69:28:71:6b:6d:ed:96:24:
                    89:c0:7e:b6:31:63:fb:2f:b6:bf:82:6f:fd:56:b4:
                    85:59:32:99:e6:09:a6:99:c0:d5:35:c2:d5:5e:cf:
                    64:f4:5a:3c:1c:7b:d9:09:6a:be:71:5d:c9:bb:b5:
                    8f:b0:88:6d:8f:6d:4c:05:b8:58:16:73:e4:c4:55:
                    9e:dc:d6:fb:d9:15:a7:2a:72:42:fa:a7:11:d0:dc:
                    3f:18:70:d9:62:84:67:16:ff:28:4b:b1:aa:98:38:
                    e2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:74:9E:0D:58:78:BB:3D:FD:29:CD:6A:73:71:5C:53:5B:66:D5:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/5dff6933-d238-3c65-b75c-6e090cc092e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.222.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:73:56:37:4c:e4:74:85:bc:88:72:c1:30:e0:9c:f9:0c:1c:
         2f:7d:a4:22:46:1a:4b:c5:b9:ec:a8:3e:e6:84:c7:43:ca:ee:
         a2:c4:e2:3d:a9:4a:4f:5a:b4:42:bc:ec:dd:a5:69:23:d1:4c:
         2f:4e:22:81:55:c1:90:a7:9a:a4:ed:28:f9:74:4c:1c:4e:0d:
         88:5a:a3:e1:31:6a:42:56:ae:a1:1c:d5:ea:78:f1:cc:66:1e:
         16:9b:be:68:b1:c5:20:97:fd:cc:bd:db:2d:9a:b1:24:60:1c:
         53:a2:98:90:c0:d4:43:85:7b:2f:07:9e:32:10:27:9a:50:09:
         20:48:0b:e7:2a:db:33:58:52:8e:8c:f6:c1:0b:16:03:3a:1c:
         80:56:a2:83:a1:b3:7e:1a:26:cf:36:79:96:dd:e9:c3:c3:08:
         c9:91:18:ff:e6:96:14:c1:2b:0e:05:00:f0:ad:85:3e:fb:c8:
         91:13:9e:66:eb:a1:7c:87:ff:bd:e4:bd:ea:3b:d5:94:e1:ae:
         ae:e6:4d:8b:2e:a3:a6:8f:5e:ef:5c:7e:2c:92:6c:9a:06:96:
         71:a8:37:1a:fa:0a:d1:36:65:88:df:25:e7:4e:a9:dd:7d:77:
         99:44:7a:19:7a:7b:20:14:42:19:91:93:1a:cb:59:ce:53:fb:
         1f:7b:e5:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikvw1HoI8N/xPGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
ODlkYTNiNjctNDVjMy00YTg2LWFhOTktMzQxOWNmM2QwZTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZHY9DWy+W8yMA9lgJBH6n19ueNKeobdoMY/
4h42AjOXbpg4Yz8rc3GyxiFSnFwZ7p4ij180PY6svf+L8nJ9RPaTCeKZfsUaQB0f
NW6b9Tf0pywtJktGMuLCM90yOVjQJpSioBFGk4QCrzslB5qEouR5i5+nHdGQCsdL
tLBvaqNzwL8sejEMQRgwgV937Pr0LdmE8+ZxchCJ/deXaShxa23tliSJwH62MWP7
L7a/gm/9VrSFWTKZ5gmmmcDVNcLVXs9k9Fo8HHvZCWq+cV3Ju7WPsIhtj21MBbhY
FnPkxFWe3Nb72RWnKnJC+qcR0Nw/GHDZYoRnFv8oS7GqmDjigwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAR0ng1YeLs9/SnNanNxXFNbZtUDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNWRmZjY5MzMtZDIzOC0z
YzY1LWI3NWMtNmUwOTBjYzA5MmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrN5AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxzVjdM5HSFvIhywTDgnPkMHC99pCJGGkvFueyoPuaEx0PK7qLE4j2p
Sk9atEK87N2laSPRTC9OIoFVwZCnmqTtKPl0TBxODYhao+ExakJWrqEc1ep48cxm
HhabvmixxSCX/cy92y2asSRgHFOimJDA1EOFey8HnjIQJ5pQCSBIC+cq2zNYUo6M
9sELFgM6HIBWooOhs34aJs82eZbd6cPDCMmRGP/mlhTBKw4FAPCthT77yJETnmbr
oXyH/73kveo71ZThrq7mTYsuo6aPXu9cfiySbJoGlnGoNxr6CtE2ZYjfJedOqd19
d5lEehl6eyAUQhmRkxrLWc5T+x975ZY=
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:36:21 2026 by rpki-client