Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c13ad50-1904-3855-a4ea-b341cfa0d97b.roa
File:                     1c13ad50-1904-3855-a4ea-b341cfa0d97b.roa (raw, json)
Hash identifier:          AqHmVbBPa5t26gA6177F3qGVdzmJMMqgUqm+s7mryPY=
Subject key identifier:   78:C7:E8:4F:63:6D:77:D9:C1:3C:58:2A:D7:17:09:92:1A:50:BF:E0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E78FF86D641B5FE158DCD4E6C
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c13ad50-1904-3855-a4ea-b341cfa0d97b.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     36183
IP address blocks:        172.224.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:86:d6:41:b5:fe:15:8d:cd:4e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=8cebbbfe-d00a-489b-9ec5-e144ab88e0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:34:f7:97:15:5b:7d:bb:ff:37:02:9a:4f:65:
                    13:95:7c:df:08:66:f0:d9:86:f0:5c:cd:20:8a:99:
                    ff:fa:1d:62:fd:d9:17:28:6b:ff:a4:78:b7:e0:45:
                    06:a2:4a:a3:6a:1f:50:03:93:e6:95:0c:7d:67:49:
                    08:77:f9:0b:5b:4a:2f:ce:4c:5b:87:21:0e:e3:e9:
                    6e:3d:c9:66:bd:30:3f:09:8d:b7:89:29:36:0c:cd:
                    33:4c:f9:74:86:94:47:95:30:3b:f0:fe:44:98:4c:
                    c5:c5:0f:cf:a6:8d:84:4c:a1:9a:c8:98:4f:ec:c4:
                    81:0c:bd:e8:fa:60:a0:73:58:a5:cb:f9:4a:1f:f8:
                    58:03:1e:20:f4:cb:b7:44:0b:0e:3d:eb:bb:5d:49:
                    c5:d3:5c:1d:dd:da:61:25:1c:cc:1e:74:66:96:fd:
                    48:7e:4d:3d:7e:bd:25:07:bc:26:df:dd:00:7b:84:
                    82:43:76:c8:40:68:db:58:5f:45:0a:ae:ae:32:8f:
                    06:42:aa:14:14:83:5f:43:42:54:c6:be:e7:64:d2:
                    01:95:ba:e2:1a:2f:6b:a3:91:b4:99:e3:32:95:74:
                    53:ba:1d:3c:5a:64:25:3f:6b:d1:77:e5:d6:1d:be:
                    2c:0f:71:f2:93:c5:2b:60:41:e4:27:fa:5e:4b:17:
                    6e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C7:E8:4F:63:6D:77:D9:C1:3C:58:2A:D7:17:09:92:1A:50:BF:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1c13ad50-1904-3855-a4ea-b341cfa0d97b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:96:19:f5:97:11:94:9f:87:99:b6:a6:80:97:02:be:eb:0c:
         2e:a4:d9:e7:0c:6c:72:16:bc:4b:3e:04:72:19:e7:67:81:5d:
         e7:f0:ac:fa:30:12:68:3d:db:1c:fe:aa:a3:25:41:30:1b:ab:
         b7:d9:d2:b1:20:a6:cc:b1:ed:fe:d6:c0:51:68:85:d6:45:1f:
         f0:eb:5a:64:42:38:6f:e3:82:8b:dc:fa:72:94:2b:a9:31:45:
         7b:22:ac:55:52:0a:8f:7f:09:0a:1d:f2:cf:1a:57:6c:30:03:
         ce:dd:83:1b:d6:5d:8e:dd:ec:3c:55:9d:e3:b3:a9:18:91:10:
         ec:90:2e:fe:eb:b7:87:4f:ed:9b:a6:54:73:60:23:16:93:cf:
         bc:f7:a6:14:02:73:44:fd:7f:77:1d:32:80:24:39:96:74:ec:
         d7:bb:23:22:bd:5b:ed:15:e0:e7:8b:91:47:94:90:a9:32:3c:
         70:c7:fd:02:d3:e1:bb:9d:e3:d4:68:3a:1c:ef:93:f3:ac:04:
         c5:ae:21:65:38:12:19:b9:d7:17:29:7d:1f:ab:f1:2e:00:89:
         4f:16:14:90:28:16:db:58:9b:79:1b:e7:80:c3:a7:c6:80:3d:
         54:80:98:48:f2:d2:34:f7:1a:b3:d0:20:01:c0:cf:01:11:de:
         5d:63:77:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/4bWQbX+FY3NTmwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk
OGNlYmJiZmUtZDAwYS00ODliLTllYzUtZTE0NGFiODhlMGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTT3lxVbfbv/NwKaT2UTlXzfCGbw2YbwXM0g
ipn/+h1i/dkXKGv/pHi34EUGokqjah9QA5PmlQx9Z0kId/kLW0ovzkxbhyEO4+lu
PclmvTA/CY23iSk2DM0zTPl0hpRHlTA78P5EmEzFxQ/Ppo2ETKGayJhP7MSBDL3o
+mCgc1ily/lKH/hYAx4g9Mu3RAsOPeu7XUnF01wd3dphJRzMHnRmlv1Ifk09fr0l
B7wm390Ae4SCQ3bIQGjbWF9FCq6uMo8GQqoUFINfQ0JUxr7nZNIBlbriGi9ro5G0
meMylXRTuh08WmQlP2vRd+XWHb4sD3Hyk8UrYEHkJ/peSxduswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHjH6E9jbXfZwTxYKtcXCZIaUL/gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWMxM2FkNTAtMTkwNC0z
ODU1LWE0ZWEtYjM0MWNmYTBkOTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFOWGfWXEZSfh5m2poCXAr7rDC6k2ecMbHIWvEs+BHIZ52eBXefwrPow
Emg92xz+qqMlQTAbq7fZ0rEgpsyx7f7WwFFohdZFH/DrWmRCOG/jgovc+nKUK6kx
RXsirFVSCo9/CQod8s8aV2wwA87dgxvWXY7d7DxVneOzqRiREOyQLv7rt4dP7Zum
VHNgIxaTz7z3phQCc0T9f3cdMoAkOZZ07Ne7IyK9W+0V4OeLkUeUkKkyPHDH/QLT
4bud49RoOhzvk/OsBMWuIWU4Ehm51xcpfR+r8S4AiU8WFJAoFttYm3kb54DDp8aA
PVSAmEjy0jT3GrPQIAHAzwER3l1jd0E=
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:24:48 2026 by rpki-client