Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f5885ba-2023-329b-8f3a-25904f05aa70.roa
File:                     8f5885ba-2023-329b-8f3a-25904f05aa70.roa (raw, json)
Hash identifier:          ycah/Isw0H4YiYLW3FiMFENWeHZhhkDc7DyFXbT8hko=
Subject key identifier:   4E:7C:01:0F:0D:B2:9E:48:53:71:DD:22:E3:A8:51:17:18:40:2E:FA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F497D17D3675033042E742800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f5885ba-2023-329b-8f3a-25904f05aa70.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        172.217.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:17:d3:67:50:33:04:2e:74:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=54cdae3c-1658-4547-b6f2-c87c9c2ba9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:06:5b:9a:12:5d:cc:2b:b5:36:51:45:53:
                    fb:ec:08:dc:52:5f:24:75:3f:c8:d2:76:7e:89:fd:
                    af:f0:04:a8:36:f1:98:c0:80:00:f6:55:f9:a6:b6:
                    3f:a0:20:4a:38:08:7a:f8:4c:89:27:69:10:3d:34:
                    4c:64:6f:be:a4:e4:ca:ad:41:63:a6:cf:ef:e9:69:
                    e5:71:3d:5c:cb:08:55:9f:4b:9c:d0:ed:1f:71:20:
                    47:f2:fe:67:be:30:da:57:3f:9a:b4:c4:ff:83:5f:
                    5d:be:5a:96:73:61:eb:4c:50:0d:fc:6e:2d:2d:e6:
                    94:35:41:b3:f4:5b:22:be:b5:d1:c9:1f:4f:72:f2:
                    a6:42:5f:91:17:36:34:6d:f3:8d:e0:67:d4:42:a7:
                    e8:23:09:c6:4a:c0:aa:4e:99:bb:83:0a:5b:72:d2:
                    99:43:49:fa:8b:b3:8b:94:22:41:fe:0e:95:d4:7b:
                    de:35:6d:95:ac:91:1d:1a:56:03:7f:49:c8:c5:5b:
                    6f:65:08:5f:8e:65:88:14:6b:5b:0b:b7:bb:b6:28:
                    0b:88:74:b9:5d:cf:6f:94:ed:41:89:87:42:54:27:
                    aa:e1:4a:26:48:b3:7f:31:a9:1b:18:11:a3:49:c3:
                    4f:00:5d:08:cf:18:8a:f2:58:40:cc:9e:a9:e7:5c:
                    da:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7C:01:0F:0D:B2:9E:48:53:71:DD:22:E3:A8:51:17:18:40:2E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f5885ba-2023-329b-8f3a-25904f05aa70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:44:d2:41:e3:9f:56:9b:10:af:9c:f1:9c:1d:2c:36:d1:d9:
         30:6b:d0:a1:c9:82:25:41:a3:6a:26:08:8b:a2:00:89:03:ed:
         ce:26:80:a5:f6:6f:52:12:b7:6a:a5:6c:32:50:3e:b7:2a:c3:
         9b:b8:00:83:ff:d6:ed:54:ec:99:bd:71:df:63:90:01:41:c2:
         fe:0e:82:c8:45:64:1d:9b:0f:65:39:bc:11:3d:cd:b3:d5:93:
         70:61:cc:9e:b2:7c:f0:e0:12:a8:94:92:bb:3d:3d:e0:22:ee:
         4d:b3:0d:75:6c:bb:5a:9c:5c:20:90:95:98:70:ff:6c:8d:c2:
         53:f3:60:8e:12:26:19:d2:f5:7f:bd:74:9c:01:08:5d:4f:34:
         28:e3:28:0b:d3:76:69:cd:43:06:ad:d6:67:ed:c0:89:e1:db:
         31:2e:fd:06:ad:a5:32:7c:0e:b3:d1:e1:16:d5:c9:00:ae:8d:
         23:80:b9:9d:e8:56:9d:20:d4:7f:fb:ca:81:15:23:57:02:cc:
         b7:43:5d:fb:fc:20:fe:fa:36:da:1a:4d:e9:b0:bc:62:e3:0d:
         1f:07:07:e6:2d:43:ae:90:0f:a3:52:3f:f9:9f:a6:d7:d6:c6:
         a6:c3:86:61:5b:7f:a8:05:40:24:ea:56:ca:2f:97:a8:f3:27:
         f0:f7:ce:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfRfTZ1AzBC50KAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTRjZGFlM2MtMTY1OC00NTQ3LWI2ZjItYzg3YzljMmJhOWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqEGW5oSXcwrtTZRRVP77AjcUl8kdT/I0nZ+
if2v8ASoNvGYwIAA9lX5prY/oCBKOAh6+EyJJ2kQPTRMZG++pOTKrUFjps/v6Wnl
cT1cywhVn0uc0O0fcSBH8v5nvjDaVz+atMT/g19dvlqWc2HrTFAN/G4tLeaUNUGz
9FsivrXRyR9PcvKmQl+RFzY0bfON4GfUQqfoIwnGSsCqTpm7gwpbctKZQ0n6i7OL
lCJB/g6V1HveNW2VrJEdGlYDf0nIxVtvZQhfjmWIFGtbC7e7tigLiHS5Xc9vlO1B
iYdCVCeq4UomSLN/MakbGBGjScNPAF0IzxiK8lhAzJ6p51zaiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE58AQ8Nsp5IU3HdIuOoURcYQC76MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY1ODg1YmEtMjAyMy0z
MjliLThmM2EtMjU5MDRmMDVhYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNk/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHdE0kHjn1abEK+c8ZwdLDbR2TBr0KHJgiVBo2omCIuiAIkD7c4mgKX2
b1ISt2qlbDJQPrcqw5u4AIP/1u1U7Jm9cd9jkAFBwv4OgshFZB2bD2U5vBE9zbPV
k3BhzJ6yfPDgEqiUkrs9PeAi7k2zDXVsu1qcXCCQlZhw/2yNwlPzYI4SJhnS9X+9
dJwBCF1PNCjjKAvTdmnNQwat1mftwInh2zEu/QatpTJ8DrPR4RbVyQCujSOAuZ3o
Vp0g1H/7yoEVI1cCzLdDXfv8IP76NtoaTemwvGLjDR8HB+YtQ66QD6NSP/mfptfW
xqbDhmFbf6gFQCTqVsovl6jzJ/D3zjM=
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:54:29 2026 by rpki-client