Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/472ccabd-2718-39a5-906d-857cdea14d3f.roa
File:                     472ccabd-2718-39a5-906d-857cdea14d3f.roa (raw, json)
Hash identifier:          WpleMlA0UPqXEP0Bn7DCk0QhFE9WwtePJUJYj6BI3jQ=
Subject key identifier:   58:4B:5B:81:4F:08:2D:60:7F:C7:0F:78:7A:67:02:F1:8A:B3:FD:64
Certificate issuer:       /CN=32262fda-73b9-4875-8f83-9733217ce893
Certificate serial:       010D0C9F4328584CBAE738C52C2A04E320871F00
Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/472ccabd-2718-39a5-906d-857cdea14d3f.roa
Signing time:             Mon 02 Feb 2026 14:00:40 +0000
ROA not before:           Mon 02 Feb 2026 14:00:40 +0000
ROA not after:            Sun 03 May 2026 13:00:40 +0000
asID:                     3214
IP address blocks:        172.93.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ba:e7:38:c5:2c:2a:04:e3:20:87:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893
        Validity
            Not Before: Feb  2 14:00:40 2026 GMT
            Not After : May  3 13:00:40 2026 GMT
        Subject: CN=440fa06f-0fa6-4bbb-84dd-4d3485e430e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:22:0d:ef:92:d9:47:60:43:51:ac:21:0a:91:
                    a7:7b:12:5c:a2:b4:91:cc:74:6d:61:74:06:6f:ca:
                    91:6f:de:1a:00:75:83:64:ca:ac:04:82:9b:05:57:
                    66:7b:ac:b5:fa:e0:52:91:af:58:41:95:c6:00:df:
                    26:29:19:90:f4:83:cb:da:04:7c:4b:26:ac:47:35:
                    35:69:6b:f3:41:c4:a4:2d:b3:6d:fe:eb:c9:e5:71:
                    16:28:dd:5e:2b:a7:fc:db:63:a4:ed:86:e1:4b:75:
                    aa:b8:20:ea:0d:64:0f:ae:56:1a:b4:ca:54:e4:1e:
                    81:4b:5c:7c:8f:de:d0:73:c9:be:53:42:b5:0b:c6:
                    b5:d1:63:d7:20:eb:ba:f0:16:67:d5:d5:58:a5:4c:
                    07:46:68:f9:1a:21:56:ae:b5:dd:38:c0:11:79:84:
                    81:c0:20:03:f7:a9:aa:f1:c0:eb:17:b9:07:86:79:
                    c7:97:4e:86:75:fd:9a:45:1b:af:90:7f:31:c4:98:
                    06:9f:c2:cd:cb:df:03:57:73:37:6c:2d:b9:85:15:
                    7a:9d:f5:b7:1f:d1:75:8e:7a:dd:21:0a:48:d3:93:
                    03:d6:b8:c0:c5:af:b8:80:e6:11:c7:2e:e2:64:c3:
                    28:1a:b7:88:4e:eb:19:b6:98:54:4d:f1:10:da:bb:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4B:5B:81:4F:08:2D:60:7F:C7:0F:78:7A:67:02:F1:8A:B3:FD:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/472ccabd-2718-39a5-906d-857cdea14d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl

            X509v3 Authority Key Identifier:
                keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:96:71:19:98:ec:c2:1c:4b:16:c7:9a:b8:d0:f0:3b:b2:e1:
         35:8e:0a:fc:31:b0:1f:fa:eb:d6:bb:18:52:31:61:98:52:54:
         ad:cc:a4:83:7c:4a:ce:27:01:48:58:4e:eb:e9:20:62:38:8d:
         8d:5a:2c:26:17:8e:ec:65:d0:6c:a6:60:a5:5b:84:a8:dc:73:
         22:fa:43:50:7a:74:06:1f:36:1e:0f:1b:3b:f3:8a:f2:2c:c8:
         08:3d:7c:eb:8d:9e:a6:b3:70:46:a6:cc:13:3d:d3:24:90:b8:
         db:b4:c8:f6:81:0c:e6:87:5e:dc:7c:c5:14:4d:9b:eb:aa:36:
         1e:41:83:89:56:c5:8a:5c:3d:d4:0a:05:ba:8d:cf:40:6e:00:
         7e:b1:31:8e:6c:71:41:56:9b:08:3d:67:24:d8:a4:0e:d2:38:
         5a:3a:bb:30:08:c3:4b:06:b6:b7:ef:3a:ac:6b:49:bb:55:26:
         49:c1:5f:d0:b9:8c:d2:eb:0a:b3:ee:34:91:8a:87:bb:07:88:
         2d:07:78:57:31:dc:10:24:7c:4d:1d:76:23:9c:be:a5:db:6c:
         a0:5f:75:9c:a6:54:72:34:1f:3b:e4:e2:5b:9d:35:2d:d1:b3:
         a5:dd:51:1f:8d:23:c5:36:28:86:b6:1f:41:db:96:b4:df:62:
         ef:cc:22:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy65zjFLCoE4yCHHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl
ODkzMB4XDTI2MDIwMjE0MDA0MFoXDTI2MDUwMzEzMDA0MFowLzEtMCsGA1UEAxMk
NDQwZmEwNmYtMGZhNi00YmJiLTg0ZGQtNGQzNDg1ZTQzMGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCIN75LZR2BDUawhCpGnexJcorSRzHRtYXQG
b8qRb94aAHWDZMqsBIKbBVdme6y1+uBSka9YQZXGAN8mKRmQ9IPL2gR8SyasRzU1
aWvzQcSkLbNt/uvJ5XEWKN1eK6f822Ok7YbhS3WquCDqDWQPrlYatMpU5B6BS1x8
j97Qc8m+U0K1C8a10WPXIOu68BZn1dVYpUwHRmj5GiFWrrXdOMAReYSBwCAD96mq
8cDrF7kHhnnHl06Gdf2aRRuvkH8xxJgGn8LNy98DV3M3bC25hRV6nfW3H9F1jnrd
IQpI05MD1rjAxa+4gOYRxy7iZMMoGreITusZtphUTfEQ2rtP3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhLW4FPCC1gf8cPeHpnAvGKs/1kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2
MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvNDcyY2NhYmQtMjcxOC0z
OWE1LTkwNmQtODU3Y2RlYTE0ZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm
ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj
ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz
MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF25MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADmWcRmY7MIcSxbHmrjQ8Duy4TWOCvwxsB/669a7GFIxYZhSVK3MpIN8
Ss4nAUhYTuvpIGI4jY1aLCYXjuxl0GymYKVbhKjccyL6Q1B6dAYfNh4PGzvzivIs
yAg9fOuNnqazcEamzBM90ySQuNu0yPaBDOaHXtx8xRRNm+uqNh5Bg4lWxYpcPdQK
BbqNz0BuAH6xMY5scUFWmwg9ZyTYpA7SOFo6uzAIw0sGtrfvOqxrSbtVJknBX9C5
jNLrCrPuNJGKh7sHiC0HeFcx3BAkfE0ddiOcvqXbbKBfdZymVHI0Hzvk4ludNS3R
s6XdUR+NI8U2KIa2H0HblrTfYu/MInk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:21 2026 by rpki-client