Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22ce450c-7b32-31ef-947a-59fa2f8dd6ab.roa
File:                     22ce450c-7b32-31ef-947a-59fa2f8dd6ab.roa (raw, json)
Hash identifier:          SUYMUEJ36jk/8wQZ7qy/BezyxLQtdVFpgwHn+fscK5o=
Subject key identifier:   81:41:CD:C0:27:FD:9B:77:10:80:3A:3E:6E:D1:E9:65:1D:50:DD:7B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E1FA9AC288BDCFD5025F9E080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22ce450c-7b32-31ef-947a-59fa2f8dd6ab.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     36183
IP address blocks:        172.225.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:ac:28:8b:dc:fd:50:25:f9:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=2b6f85ee-8fa1-48fe-a578-e50cf1d41b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:57:b5:07:ad:05:a1:38:dc:43:37:9a:37:
                    b2:2d:a1:07:32:d9:f4:5d:1c:77:31:88:c0:09:e1:
                    32:ab:db:d5:28:a0:88:27:56:6d:c0:7c:ce:05:d2:
                    e2:8d:5d:e1:fe:96:7c:d3:f0:59:c1:ae:57:5f:d6:
                    71:21:26:70:95:70:1b:2c:ed:39:71:3e:91:74:e5:
                    2e:0b:95:d5:6a:af:a8:bb:18:c5:d0:64:57:c9:8d:
                    ea:aa:f3:19:ba:9e:54:f0:41:94:75:cc:eb:d2:c2:
                    a4:8c:a2:ed:fc:bc:ca:da:5d:63:e9:bc:0e:ab:1d:
                    ae:e0:92:a9:4b:f8:e5:01:82:a0:83:e7:2f:4e:32:
                    37:71:e4:ec:8e:6f:ae:9f:3b:c4:19:1d:cc:1b:a7:
                    38:92:23:af:11:cc:60:f9:fd:46:13:b3:ff:17:7d:
                    ea:82:03:2a:7d:e1:1f:1a:07:fc:8a:36:8a:ca:64:
                    2b:44:08:c8:40:dc:55:74:57:39:01:90:38:78:72:
                    61:5a:29:b1:1f:c5:98:d4:49:52:d8:eb:e0:17:d8:
                    8b:5c:e7:76:35:cb:08:b6:8c:fa:16:11:05:bc:ea:
                    6c:cb:d2:6a:92:eb:ae:19:e1:1e:b6:ac:d2:68:8c:
                    e5:8b:72:a1:90:88:bf:3d:22:30:f0:19:05:9f:40:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:41:CD:C0:27:FD:9B:77:10:80:3A:3E:6E:D1:E9:65:1D:50:DD:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22ce450c-7b32-31ef-947a-59fa2f8dd6ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f2:80:4a:af:5d:3b:1b:03:67:0e:dd:25:d6:16:a1:2c:4a:
         70:9a:72:b4:f8:47:0a:04:64:c2:fc:de:b4:0d:a3:0a:f2:dd:
         ba:96:f1:8a:84:1e:90:02:c7:cf:82:c7:11:ec:a4:22:59:ca:
         15:6a:54:6d:38:c6:3c:35:8e:17:b4:3e:7b:66:0c:69:ad:11:
         6e:27:e6:80:4b:ee:68:c8:27:62:1b:88:fa:cc:32:c0:f8:52:
         2c:7b:e1:5b:ca:5a:26:0c:bb:aa:21:71:d1:55:84:08:b5:7c:
         a6:66:87:dd:d6:a4:bf:92:a9:e8:6d:a2:c3:87:06:db:1b:e8:
         9d:f4:da:ab:e2:b9:71:1c:51:98:bf:15:a3:64:1d:de:cb:ab:
         88:30:03:9b:90:2a:df:ae:72:51:05:a8:84:c8:b3:3c:70:f2:
         5d:76:58:61:9f:61:f5:91:4b:6a:45:fd:e2:18:11:5a:29:b0:
         0a:c2:b5:12:a8:fe:94:56:56:dc:b4:4d:f6:27:b6:78:cd:e4:
         d4:0e:fd:89:b8:15:03:e5:67:ca:3d:45:ab:eb:f4:b6:b0:04:
         0d:07:6d:32:b7:3f:76:05:c9:22:0a:ae:be:7b:f0:82:57:ca:
         a4:53:9b:a4:25:c9:94:ba:fa:5f:c4:33:e6:f8:12:a0:a3:a6:
         c8:dd:9b:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqawoi9z9UCX54IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk
MmI2Zjg1ZWUtOGZhMS00OGZlLWE1NzgtZTUwY2YxZDQxYjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPNXtQetBaE43EM3mjeyLaEHMtn0XRx3MYjA
CeEyq9vVKKCIJ1ZtwHzOBdLijV3h/pZ80/BZwa5XX9ZxISZwlXAbLO05cT6RdOUu
C5XVaq+ouxjF0GRXyY3qqvMZup5U8EGUdczr0sKkjKLt/LzK2l1j6bwOqx2u4JKp
S/jlAYKgg+cvTjI3ceTsjm+unzvEGR3MG6c4kiOvEcxg+f1GE7P/F33qggMqfeEf
Ggf8ijaKymQrRAjIQNxVdFc5AZA4eHJhWimxH8WY1ElS2OvgF9iLXOd2NcsItoz6
FhEFvOpsy9JqkuuuGeEetqzSaIzli3KhkIi/PSIw8BkFn0C67QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIFBzcAn/Zt3EIA6Pm7R6WUdUN17MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjJjZTQ1MGMtN2IzMi0z
MWVmLTk0N2EtNTlmYTJmOGRkNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACHygEqvXTsbA2cO3SXWFqEsSnCacrT4RwoEZML83rQNowry3bqW8YqE
HpACx8+CxxHspCJZyhVqVG04xjw1jhe0PntmDGmtEW4n5oBL7mjIJ2IbiPrMMsD4
Uix74VvKWiYMu6ohcdFVhAi1fKZmh93WpL+SqehtosOHBtsb6J302qviuXEcUZi/
FaNkHd7Lq4gwA5uQKt+uclEFqITIszxw8l12WGGfYfWRS2pF/eIYEVopsArCtRKo
/pRWVty0TfYntnjN5NQO/Ym4FQPlZ8o9Ravr9LawBA0HbTK3P3YFySIKrr578IJX
yqRTm6QlyZS6+l/EM+b4EqCjpsjdm/E=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:14:57 2026 by rpki-client