Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ef85418-07b4-39b8-b356-8afa01cfcb5a.roa
File:                     1ef85418-07b4-39b8-b356-8afa01cfcb5a.roa (raw, json)
Hash identifier:          AZ38yyakooBzveOmJGte3aYwf6GkcSUDOxT0Vbm4kFM=
Subject key identifier:   0F:67:ED:C2:E5:64:1B:E4:EE:C9:C0:E4:E5:D4:83:0B:22:4B:F4:94
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D55BA4C0795561A21544A0A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ef85418-07b4-39b8-b356-8afa01cfcb5a.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     36183
IP address blocks:        172.224.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:4c:07:95:56:1a:21:54:4a:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=dc7f3827-e26b-45eb-a9c9-8d577328bae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c8:c3:3e:6c:ec:ea:4a:b5:5c:69:e2:65:e8:
                    f9:ce:a7:a3:23:8b:56:a7:81:bb:29:8f:5a:13:49:
                    52:95:9d:bb:0d:f0:44:3d:d0:2e:a1:8b:46:fe:c8:
                    e6:9b:8e:38:8a:94:6c:d7:34:53:99:6c:4b:7d:f0:
                    41:4d:ed:62:c8:2a:30:fb:c0:8f:a7:fb:3c:52:84:
                    c2:02:85:ca:4c:7a:44:c7:24:4e:1e:62:eb:54:c3:
                    5f:4a:93:bd:25:df:3d:34:e1:26:f7:86:4b:73:ba:
                    07:84:92:bb:55:47:04:94:0f:bf:45:1b:92:75:47:
                    23:27:fd:80:35:be:50:64:61:3b:43:d5:69:f2:77:
                    50:d1:13:79:a4:83:c9:26:32:68:85:df:1d:4e:14:
                    6e:93:2b:93:75:17:f5:c0:80:70:6e:95:40:2f:06:
                    e9:67:78:3e:13:75:41:01:aa:38:41:bc:cf:09:16:
                    6b:3a:99:c1:d8:7c:83:61:39:7a:61:d0:03:1e:66:
                    0d:c3:42:d9:37:18:8d:17:0a:36:52:70:00:87:a0:
                    52:f9:ad:4c:f5:3a:60:ca:69:77:3e:3b:c2:af:44:
                    7d:86:ed:69:a1:a7:10:8e:b8:7b:73:78:69:62:e7:
                    1f:87:c6:5a:72:b8:53:54:9e:b0:6b:22:ec:4e:5b:
                    e5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:67:ED:C2:E5:64:1B:E4:EE:C9:C0:E4:E5:D4:83:0B:22:4B:F4:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ef85418-07b4-39b8-b356-8afa01cfcb5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:bd:9d:3d:ca:2b:1d:ee:a5:e7:2a:5c:f3:8d:a1:72:2f:df:
         f3:80:5a:49:24:1d:3f:12:84:25:57:cd:8f:ca:68:24:98:48:
         2c:a7:d8:1b:bb:17:f1:9f:7e:3e:b5:2e:b3:72:c6:9f:2d:7e:
         bb:6e:8e:4b:80:4b:08:b2:27:77:ce:a8:f6:fd:1b:ae:b7:fb:
         71:20:75:62:df:ec:02:da:89:f6:06:39:8a:04:dc:40:43:4d:
         63:16:0f:2b:e7:36:7d:82:21:51:b3:2a:06:ce:ba:58:c2:68:
         0c:ea:26:80:dd:ea:c5:8e:0e:e2:c4:5c:d1:d8:0d:7b:e3:a8:
         b2:1c:dc:38:71:28:60:c3:a3:ba:52:95:1b:6c:ef:33:0c:8b:
         d0:4d:27:ff:5c:69:88:01:77:3a:56:15:3c:3f:39:8a:05:53:
         d3:f3:66:4a:e8:a9:74:4f:99:4d:17:23:58:db:9a:4c:58:86:
         ec:a3:00:a2:5c:dd:17:c8:9f:df:30:a7:f9:26:17:11:f0:4f:
         92:ad:ef:41:32:f0:84:46:b8:d9:5e:d7:73:56:48:8c:80:9e:
         47:bb:4a:03:6e:87:2f:65:b5:3e:bb:b5:12:c2:50:2b:01:ab:
         e9:d0:bd:43:57:74:bd:59:f3:c4:7e:f4:6f:9c:1f:bf:54:98:
         4e:72:e9:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukwHlVYaIVRKCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
ZGM3ZjM4MjctZTI2Yi00NWViLWE5YzktOGQ1NzczMjhiYWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8jDPmzs6kq1XGniZej5zqejI4tWp4G7KY9a
E0lSlZ27DfBEPdAuoYtG/sjmm444ipRs1zRTmWxLffBBTe1iyCow+8CPp/s8UoTC
AoXKTHpExyROHmLrVMNfSpO9Jd89NOEm94ZLc7oHhJK7VUcElA+/RRuSdUcjJ/2A
Nb5QZGE7Q9Vp8ndQ0RN5pIPJJjJohd8dThRukyuTdRf1wIBwbpVALwbpZ3g+E3VB
Aao4QbzPCRZrOpnB2HyDYTl6YdADHmYNw0LZNxiNFwo2UnAAh6BS+a1M9Tpgyml3
PjvCr0R9hu1poacQjrh7c3hpYucfh8ZacrhTVJ6wayLsTlvlrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA9n7cLlZBvk7snA5OXUgwsiS/SUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWVmODU0MTgtMDdiNC0z
OWI4LWIzNTYtOGFmYTAxY2ZjYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF69nT3KKx3upecqXPONoXIv3/OAWkkkHT8ShCVXzY/KaCSYSCyn2Bu7
F/Gffj61LrNyxp8tfrtujkuASwiyJ3fOqPb9G663+3EgdWLf7ALaifYGOYoE3EBD
TWMWDyvnNn2CIVGzKgbOuljCaAzqJoDd6sWODuLEXNHYDXvjqLIc3DhxKGDDo7pS
lRts7zMMi9BNJ/9caYgBdzpWFTw/OYoFU9PzZkroqXRPmU0XI1jbmkxYhuyjAKJc
3RfIn98wp/kmFxHwT5Kt70Ey8IRGuNle13NWSIyAnke7SgNuhy9ltT67tRLCUCsB
q+nQvUNXdL1Z88R+9G+cH79UmE5y6Rs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:27:11 2026 by rpki-client