Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48b9a585-33cc-318c-8102-dedde3d4fa19.roa
File:                     48b9a585-33cc-318c-8102-dedde3d4fa19.roa (raw, json)
Hash identifier:          9tQnraktF+18djMNV/wHSk8vwRFTqU+EdEFQPui+Poo=
Subject key identifier:   A2:19:A3:74:27:47:EF:43:6F:6E:B6:29:DB:27:AD:78:8C:26:A7:8C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D71A50FC78891886821239984
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48b9a585-33cc-318c-8102-dedde3d4fa19.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     20940
IP address blocks:        173.222.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:0f:c7:88:91:88:68:21:23:99:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=e23cdd2c-d3bf-47ba-ade8-f0acdd58f99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:be:88:8b:c9:7a:17:7d:76:e2:99:1f:f3:
                    b9:4a:c1:a8:c1:9b:5a:a6:3d:ae:43:0d:b0:fd:82:
                    a8:a0:d8:e2:62:1b:1e:d0:12:26:1a:8d:2a:53:af:
                    6e:62:b9:3b:93:8b:ba:bd:a2:ea:0f:4f:3d:78:73:
                    79:8d:41:26:0b:84:ba:96:c0:d3:bd:44:59:12:0b:
                    ec:a6:db:6f:0e:c8:07:86:45:5f:8b:cd:02:4d:58:
                    d0:c0:fd:04:c3:30:75:10:e8:8f:e3:2f:a9:28:7e:
                    98:7e:49:19:b2:1a:5d:2d:2d:10:17:d6:8a:e0:13:
                    3f:9a:8d:8e:f3:92:2b:90:86:be:2c:f6:ba:8d:20:
                    6e:f8:66:76:89:14:d0:36:45:2f:d6:f5:af:4e:0f:
                    74:fe:f4:37:f8:0d:61:15:67:79:b9:40:87:c7:57:
                    58:80:7b:de:fc:a6:c6:c7:8c:77:33:06:67:77:2a:
                    5b:ac:0d:11:63:0d:25:74:dc:79:5a:a1:4c:41:f9:
                    c6:e1:62:ee:13:17:3c:c4:04:47:7f:f9:a7:29:2a:
                    60:0b:3b:f8:a4:0d:72:f9:20:b9:bb:ef:eb:b3:36:
                    5b:4f:2d:23:fe:9b:f9:b9:48:b0:0c:dd:f5:8a:ef:
                    8a:2c:61:e9:53:f9:ac:09:67:0f:5a:cb:dc:e8:67:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:19:A3:74:27:47:EF:43:6F:6E:B6:29:DB:27:AD:78:8C:26:A7:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48b9a585-33cc-318c-8102-dedde3d4fa19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.222.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6e:58:71:9f:41:5b:f1:7f:50:ce:fc:04:a8:74:c1:6d:98:
         ec:23:2e:30:fc:f2:e5:f9:c3:01:72:c2:d8:69:7e:ad:f1:23:
         89:7c:20:f8:3f:84:b0:ac:94:a8:67:ab:85:0b:8d:d2:3c:03:
         4a:f5:ff:f1:08:2b:c7:6c:4a:8f:b3:fb:bc:36:50:83:ea:53:
         15:d3:c8:59:a5:f3:6a:c2:4e:76:cc:0a:b5:b3:93:24:91:2f:
         51:f8:d9:25:f0:33:11:eb:c9:57:f5:45:4c:7a:d2:71:d6:05:
         38:ab:b3:60:f7:81:8d:b7:a9:38:c4:a5:16:0a:08:c2:7b:01:
         02:08:99:be:08:43:b7:7c:e3:cc:cd:85:55:60:f9:40:af:42:
         a1:1f:97:50:22:54:9e:9a:8e:80:9a:51:93:f4:52:6d:a0:12:
         65:d9:fa:3d:16:c7:8a:7e:95:49:57:35:7a:41:16:65:c0:c0:
         31:86:5e:67:3e:f0:31:dd:97:ee:ce:62:c0:28:6b:e4:50:ae:
         31:c6:ce:61:c4:48:30:59:a8:19:2f:58:6d:00:23:ec:a7:53:
         c4:23:82:df:33:66:c4:f7:f8:1e:cf:86:bc:94:93:01:5f:4b:
         e6:3a:e2:f3:7c:cf:25:70:ae:2e:dd:5c:e2:ee:9f:9c:34:4e:
         68:b2:69:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpQ/HiJGIaCEjmYQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk
ZTIzY2RkMmMtZDNiZi00N2JhLWFkZTgtZjBhY2RkNThmOTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJC+iIvJehd9duKZH/O5SsGowZtapj2uQw2w
/YKooNjiYhse0BImGo0qU69uYrk7k4u6vaLqD089eHN5jUEmC4S6lsDTvURZEgvs
pttvDsgHhkVfi80CTVjQwP0EwzB1EOiP4y+pKH6YfkkZshpdLS0QF9aK4BM/mo2O
85IrkIa+LPa6jSBu+GZ2iRTQNkUv1vWvTg90/vQ3+A1hFWd5uUCHx1dYgHve/KbG
x4x3MwZndypbrA0RYw0ldNx5WqFMQfnG4WLuExc8xARHf/mnKSpgCzv4pA1y+SC5
u+/rszZbTy0j/pv5uUiwDN31iu+KLGHpU/msCWcPWsvc6GfWyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKIZo3QnR+9Db262KdsnrXiMJqeMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDhiOWE1ODUtMzNjYy0z
MThjLTgxMDItZGVkZGUzZDRmYTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd5oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhuWHGfQVvxf1DO/ASodMFtmOwjLjD88uX5wwFywthpfq3xI4l8IPg/
hLCslKhnq4ULjdI8A0r1//EIK8dsSo+z+7w2UIPqUxXTyFml82rCTnbMCrWzkySR
L1H42SXwMxHryVf1RUx60nHWBTirs2D3gY23qTjEpRYKCMJ7AQIImb4IQ7d848zN
hVVg+UCvQqEfl1AiVJ6ajoCaUZP0Um2gEmXZ+j0Wx4p+lUlXNXpBFmXAwDGGXmc+
8DHdl+7OYsAoa+RQrjHGzmHESDBZqBkvWG0AI+ynU8Qjgt8zZsT3+B7PhryUkwFf
S+Y64vN8zyVwri7dXOLun5w0TmiyaWQ=
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:28:47 2026 by rpki-client