Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8054f1a0-66ea-3d5c-96cf-dcf8e667d9f5.roa
File:                     8054f1a0-66ea-3d5c-96cf-dcf8e667d9f5.roa (raw, json)
Hash identifier:          8kW0d6yH1n4i9GTdZaChV7nJHh1m53Bl/KUcl5QCdQg=
Subject key identifier:   B7:9B:E4:21:B6:AD:83:8F:6A:32:EA:3B:71:38:A6:5B:2B:9D:7E:9D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E78FF76F7C056A97B11096E18
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8054f1a0-66ea-3d5c-96cf-dcf8e667d9f5.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     36183
IP address blocks:        172.224.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:76:f7:c0:56:a9:7b:11:09:6e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=313275e4-9ac6-4b52-a53c-0da0aa184e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:ee:cb:f7:0f:0e:f5:20:d2:b1:e9:30:e6:
                    84:89:f1:77:77:76:33:e0:ff:86:ad:b1:85:3c:cb:
                    7e:5b:ba:82:7d:3b:68:bb:50:50:b6:fc:16:69:79:
                    5d:2a:15:b5:46:77:7a:21:d5:35:8a:44:3b:6b:f6:
                    2e:18:ac:32:69:d1:5b:94:3a:dc:ac:a8:2c:56:e3:
                    bd:82:37:55:e6:3e:4d:09:45:f9:02:14:16:9e:83:
                    36:4e:18:88:88:61:2a:9d:75:df:bf:6b:b2:56:55:
                    8f:ab:e3:c9:cd:52:ca:f4:3f:ee:7d:21:7b:19:c4:
                    00:76:e6:68:47:f7:ba:85:51:bb:26:19:52:1c:0f:
                    d3:49:3d:40:d4:cf:1a:06:ba:49:e2:1c:28:39:0f:
                    dd:80:4b:22:bc:0d:96:a7:9d:31:48:5d:57:34:aa:
                    91:81:c3:0c:16:08:88:6f:2c:68:29:bc:d7:13:4b:
                    8e:b3:68:c8:b0:e3:74:fb:dc:e1:46:05:c5:6f:42:
                    10:93:97:d4:ad:3f:01:07:17:49:08:59:cf:be:66:
                    b5:cd:ee:44:bf:c7:54:2f:02:e9:24:36:7c:b4:34:
                    2a:4e:90:c3:57:c7:47:cd:3f:f3:a4:d0:8f:07:eb:
                    c7:db:e5:66:5c:ef:79:6f:84:62:da:41:c9:cc:59:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9B:E4:21:B6:AD:83:8F:6A:32:EA:3B:71:38:A6:5B:2B:9D:7E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8054f1a0-66ea-3d5c-96cf-dcf8e667d9f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:45:76:38:43:8e:e7:27:08:9b:3f:67:d2:7d:96:4d:2b:85:
         9c:24:6c:b0:1b:89:6a:db:fc:d4:5a:41:34:78:3e:07:0c:9c:
         e1:40:18:7e:dc:7f:cd:f1:e8:09:e0:63:28:94:9c:db:7c:a5:
         5e:65:ab:d5:a3:ae:d6:7d:5a:5e:89:03:c2:4a:f0:12:7d:6e:
         fd:9c:44:72:1b:3e:7a:d2:de:3e:ff:e0:ba:54:a2:b8:16:fb:
         eb:00:e0:93:8c:d7:b2:84:5a:a7:40:51:03:0a:b6:99:ee:e5:
         42:7f:6a:bd:24:64:4f:9b:47:fa:5b:37:50:00:49:ad:60:9e:
         41:a6:7d:ad:07:df:3f:d4:a0:5d:7f:d3:26:a9:e4:ce:bf:ea:
         ab:e7:5c:60:1b:ec:54:b8:49:92:9b:20:24:a5:c4:ab:65:5d:
         5b:19:af:01:47:40:8b:64:85:52:8e:43:36:fd:21:45:5d:c1:
         69:ac:24:6c:e6:75:a9:8f:dd:d2:b0:fe:22:6f:e0:5e:74:9f:
         ff:69:e6:22:28:13:d3:09:9f:e4:b9:ef:8e:af:3a:74:e8:7a:
         08:62:97:b8:17:09:86:57:19:16:eb:d0:90:f5:cf:21:7b:33:
         ac:72:9f:27:fb:30:d9:08:1b:ee:a6:af:23:fc:bc:b8:50:6d:
         78:c7:11:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3b3wFapexEJbhgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk
MzEzMjc1ZTQtOWFjNi00YjUyLWE1M2MtMGRhMGFhMTg0ZTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AXuy/cPDvUg0rHpMOaEifF3d3Yz4P+GrbGF
PMt+W7qCfTtou1BQtvwWaXldKhW1Rnd6IdU1ikQ7a/YuGKwyadFblDrcrKgsVuO9
gjdV5j5NCUX5AhQWnoM2ThiIiGEqnXXfv2uyVlWPq+PJzVLK9D/ufSF7GcQAduZo
R/e6hVG7JhlSHA/TST1A1M8aBrpJ4hwoOQ/dgEsivA2Wp50xSF1XNKqRgcMMFgiI
byxoKbzXE0uOs2jIsON0+9zhRgXFb0IQk5fUrT8BBxdJCFnPvma1ze5Ev8dULwLp
JDZ8tDQqTpDDV8dHzT/zpNCPB+vH2+VmXO95b4Ri2kHJzFkjYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLeb5CG2rYOPajLqO3E4plsrnX6dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODA1NGYxYTAtNjZlYS0z
ZDVjLTk2Y2YtZGNmOGU2NjdkOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxFdjhDjucnCJs/Z9J9lk0rhZwkbLAbiWrb/NRaQTR4PgcMnOFAGH7c
f83x6AngYyiUnNt8pV5lq9WjrtZ9Wl6JA8JK8BJ9bv2cRHIbPnrS3j7/4LpUorgW
++sA4JOM17KEWqdAUQMKtpnu5UJ/ar0kZE+bR/pbN1AASa1gnkGmfa0H3z/UoF1/
0yap5M6/6qvnXGAb7FS4SZKbICSlxKtlXVsZrwFHQItkhVKOQzb9IUVdwWmsJGzm
damP3dKw/iJv4F50n/9p5iIoE9MJn+S5746vOnToeghil7gXCYZXGRbr0JD1zyF7
M6xynyf7MNkIG+6mryP8vLhQbXjHEec=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:36 2026 by rpki-client