Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46948483-f023-326f-bd10-cc0efb79ac14.roa
File:                     46948483-f023-326f-bd10-cc0efb79ac14.roa (raw, json)
Hash identifier:          RxM/RcnUoYObxRgN5Xs1bcSKhyHYTH+kD+GG/gWMgx0=
Subject key identifier:   8F:6E:0C:1C:0B:79:C4:C8:52:1F:31:E8:96:7D:EF:8B:7E:F4:50:DC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F655DF98C32B626D49120E780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46948483-f023-326f-bd10-cc0efb79ac14.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     36183
IP address blocks:        172.225.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:f9:8c:32:b6:26:d4:91:20:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=99acdaa8-161c-4192-adcb-652945fa4ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:39:f1:b8:48:14:39:ba:eb:75:e7:0a:88:6b:
                    93:19:e2:07:c1:ce:30:ec:45:cf:dd:6b:6d:82:5c:
                    b3:23:c3:d2:42:2f:f8:17:81:50:7a:a3:0b:57:06:
                    9b:0d:01:ff:6c:6a:a3:dd:d3:0c:d9:da:9c:aa:65:
                    f6:75:2b:4c:77:b7:71:19:f0:d7:eb:6f:34:ce:91:
                    d6:49:61:b1:f9:f3:00:b8:b9:e9:0b:d4:96:37:e6:
                    e2:5b:d6:eb:92:31:9b:cf:a2:de:72:eb:a6:a4:57:
                    28:77:7f:66:fd:f2:41:cc:f3:96:55:8e:be:bd:05:
                    02:bf:94:fc:d0:69:68:ce:2a:27:fa:4c:79:23:d4:
                    0a:47:d7:72:6f:05:1c:bb:9e:d5:bf:3a:6d:25:1a:
                    2c:93:e3:cc:7f:7d:87:d1:ea:8a:1e:7c:b6:7f:9b:
                    3b:97:d2:fe:0c:bd:f0:71:4d:73:b0:79:ca:c6:96:
                    bb:5b:69:ee:b9:9c:2b:aa:fd:ec:b7:84:9a:77:f2:
                    0c:6b:a5:ce:9f:c8:6a:5b:aa:cc:9e:92:ba:79:38:
                    02:dd:b4:77:31:be:88:6d:77:21:9f:73:18:fa:a2:
                    43:fb:a0:04:b9:f2:c7:86:68:90:e9:28:2a:1d:fc:
                    6c:84:8c:0a:54:2a:74:74:ad:42:fb:54:9a:f0:c9:
                    a2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6E:0C:1C:0B:79:C4:C8:52:1F:31:E8:96:7D:EF:8B:7E:F4:50:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46948483-f023-326f-bd10-cc0efb79ac14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:34:67:21:37:d1:7c:1f:27:17:97:87:65:83:7a:d7:f2:6f:
         e5:9c:dc:f4:7b:5d:cc:f6:69:16:4a:0d:6b:e9:58:5f:9e:df:
         4c:6c:58:b9:86:ec:c5:07:ce:eb:be:b6:55:ea:f8:19:63:f2:
         a4:2d:55:6c:a2:47:5d:f0:d0:9d:af:33:96:9b:7f:31:26:85:
         34:9a:36:13:58:eb:ae:e1:ac:8c:41:e4:74:87:99:ca:de:d7:
         b9:48:fe:9e:3d:6b:05:e5:38:d2:64:2b:53:cd:b4:61:95:e8:
         66:f4:26:7d:5b:03:31:97:ee:23:fc:56:6f:9f:b8:8a:0b:9e:
         04:df:ba:25:ba:0a:ae:25:0c:3c:7b:48:9c:f3:40:0e:5a:ab:
         8e:b1:5b:26:8d:4b:fd:50:f1:7e:81:94:9d:ad:9a:2d:22:73:
         14:13:56:78:71:0d:6d:08:8e:9d:ff:b2:bf:e4:db:dd:f8:a6:
         67:33:47:20:6f:d9:0e:6b:98:a9:ac:82:23:db:6f:f9:a0:ff:
         62:44:49:19:ec:ae:24:0d:4f:da:53:1f:a9:86:e9:59:f5:ef:
         91:7a:13:c3:4f:32:6c:19:1c:10:b7:46:fb:70:0a:b5:36:fd:
         53:b7:e9:74:32:64:ca:77:13:d9:39:15:da:ba:36:12:ec:4c:
         1e:9d:5a:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXfmMMrYm1JEg54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
OTlhY2RhYTgtMTYxYy00MTkyLWFkY2ItNjUyOTQ1ZmE0ZWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDnxuEgUObrrdecKiGuTGeIHwc4w7EXP3Wtt
glyzI8PSQi/4F4FQeqMLVwabDQH/bGqj3dMM2dqcqmX2dStMd7dxGfDX6280zpHW
SWGx+fMAuLnpC9SWN+biW9brkjGbz6LecuumpFcod39m/fJBzPOWVY6+vQUCv5T8
0Glozion+kx5I9QKR9dybwUcu57VvzptJRosk+PMf32H0eqKHny2f5s7l9L+DL3w
cU1zsHnKxpa7W2nuuZwrqv3st4Sad/IMa6XOn8hqW6rMnpK6eTgC3bR3Mb6IbXch
n3MY+qJD+6AEufLHhmiQ6SgqHfxshIwKVCp0dK1C+1Sa8MmiPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI9uDBwLecTIUh8x6JZ974t+9FDcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDY5NDg0ODMtZjAyMy0z
MjZmLWJkMTAtY2MwZWZiNzlhYzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOElMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQ0ZyE30XwfJxeXh2WDetfyb+Wc3PR7Xcz2aRZKDWvpWF+e30xsWLmG
7MUHzuu+tlXq+Blj8qQtVWyiR13w0J2vM5abfzEmhTSaNhNY667hrIxB5HSHmcre
17lI/p49awXlONJkK1PNtGGV6Gb0Jn1bAzGX7iP8Vm+fuIoLngTfuiW6Cq4lDDx7
SJzzQA5aq46xWyaNS/1Q8X6BlJ2tmi0icxQTVnhxDW0Ijp3/sr/k2934pmczRyBv
2Q5rmKmsgiPbb/mg/2JESRnsriQNT9pTH6mG6Vn175F6E8NPMmwZHBC3RvtwCrU2
/VO36XQyZMp3E9k5Fdq6NhLsTB6dWus=
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:12:56 2026 by rpki-client