Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8feca399-a922-3768-9f87-237352ba744e.roa
File:                     8feca399-a922-3768-9f87-237352ba744e.roa (raw, json)
Hash identifier:          zg2A0dEkP3+WkrPmf/suYEXLC2oRB7wGfNBJ976vqMA=
Subject key identifier:   A3:C9:29:F2:DA:9D:C6:7B:95:80:3C:63:48:B8:95:0B:CB:4C:EE:5B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AADF134780EA51DD1EDD15C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8feca399-a922-3768-9f87-237352ba744e.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     36183
IP address blocks:        172.226.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:34:78:0e:a5:1d:d1:ed:d1:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=3c2f1047-04e9-4f6f-b243-4870ac713f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:4e:de:b2:74:9a:52:59:17:88:20:d2:08:
                    39:84:36:fd:02:8b:6d:3b:64:38:f7:6a:fa:a7:ae:
                    06:d8:bd:d6:46:a3:fc:22:e5:9a:ed:ad:49:f5:51:
                    b2:57:11:a7:8c:79:72:ac:ab:bb:b3:80:dc:83:a6:
                    81:06:1d:dd:e5:d5:78:eb:f1:78:30:d8:b7:e7:35:
                    2b:89:e3:3c:c8:88:46:f9:e2:52:5d:7d:65:14:d4:
                    a8:5f:23:59:27:f5:6f:ec:6b:18:07:a9:4e:56:3d:
                    e0:2e:44:64:41:36:a6:54:0d:96:30:78:ac:81:10:
                    ed:1c:4b:62:3a:5d:3a:24:1c:47:7e:12:16:98:71:
                    22:e4:ce:27:30:21:ef:37:f4:a2:c7:f8:39:57:6e:
                    37:d8:65:5d:94:5b:1a:0b:5a:36:07:76:d6:63:a5:
                    45:2d:0a:01:34:9b:5f:00:a5:f7:8c:9a:66:6e:76:
                    85:7d:d4:3a:3e:25:c2:d3:f4:ce:91:f9:ae:b1:4f:
                    f3:ba:25:b1:05:45:b6:e3:62:51:98:d2:77:5d:63:
                    2c:40:25:bc:a6:bf:08:97:cd:dc:d6:33:92:64:14:
                    89:0b:d9:84:df:da:cb:25:db:05:50:e9:62:b0:17:
                    e5:08:f2:94:db:b4:fb:05:58:04:b9:aa:d5:41:ff:
                    ec:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C9:29:F2:DA:9D:C6:7B:95:80:3C:63:48:B8:95:0B:CB:4C:EE:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8feca399-a922-3768-9f87-237352ba744e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:69:3f:64:19:3e:91:9a:2d:c4:f6:e7:d2:fe:09:2d:c9:b2:
         5c:2b:42:57:e3:55:d2:8a:63:b2:7d:b6:6f:55:44:af:13:9b:
         9f:ed:a0:e8:71:af:49:8a:f8:21:58:90:4f:eb:cb:ca:5c:e2:
         9c:4d:0f:f2:06:09:e7:78:af:5d:e6:d8:c1:c3:95:df:21:1c:
         ff:9c:64:3a:54:44:fc:a5:3a:59:56:e2:1b:b1:f8:89:10:88:
         79:ff:09:f1:fb:31:5a:ef:89:1b:21:50:a2:3f:f3:fd:6d:07:
         4e:37:49:1e:07:52:e7:22:0a:d0:e3:7d:d3:b9:fa:1d:66:81:
         ce:d2:2f:91:e1:46:54:1a:d6:8d:47:34:4a:3f:73:a9:26:77:
         b0:72:e0:ad:9f:51:99:f2:27:1d:43:1c:4e:4c:b8:ad:8d:26:
         25:45:1a:7b:44:d7:d7:7b:2c:c8:7c:ed:63:b0:4e:d6:ac:c0:
         67:e6:85:2c:fc:9f:16:ef:95:af:61:fe:45:ad:0b:e0:60:b1:
         9d:dc:c8:48:44:c0:1e:14:fd:d9:cf:1c:5b:2a:8b:45:64:a6:
         72:77:6f:02:90:b9:ea:e6:13:53:92:0b:5c:52:91:d6:ba:4d:
         91:60:5a:ee:71:b3:8b:01:f8:7e:ec:de:38:16:1e:6e:df:b6:
         3c:64:42:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8TR4DqUd0e3RXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
M2MyZjEwNDctMDRlOS00ZjZmLWIyNDMtNDg3MGFjNzEzZjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O5O3rJ0mlJZF4gg0gg5hDb9AottO2Q492r6
p64G2L3WRqP8IuWa7a1J9VGyVxGnjHlyrKu7s4Dcg6aBBh3d5dV46/F4MNi35zUr
ieM8yIhG+eJSXX1lFNSoXyNZJ/Vv7GsYB6lOVj3gLkRkQTamVA2WMHisgRDtHEti
Ol06JBxHfhIWmHEi5M4nMCHvN/Six/g5V2432GVdlFsaC1o2B3bWY6VFLQoBNJtf
AKX3jJpmbnaFfdQ6PiXC0/TOkfmusU/zuiWxBUW242JRmNJ3XWMsQCW8pr8Il83c
1jOSZBSJC9mE39rLJdsFUOlisBflCPKU27T7BVgEuarVQf/s6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPJKfLancZ7lYA8Y0i4lQvLTO5bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGZlY2EzOTktYTkyMi0z
NzY4LTlmODctMjM3MzUyYmE3NDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOLFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5pP2QZPpGaLcT259L+CS3JslwrQlfjVdKKY7J9tm9VRK8Tm5/toOhx
r0mK+CFYkE/ry8pc4pxND/IGCed4r13m2MHDld8hHP+cZDpURPylOllW4hux+IkQ
iHn/CfH7MVrviRshUKI/8/1tB043SR4HUuciCtDjfdO5+h1mgc7SL5HhRlQa1o1H
NEo/c6kmd7By4K2fUZnyJx1DHE5MuK2NJiVFGntE19d7LMh87WOwTtaswGfmhSz8
nxbvla9h/kWtC+BgsZ3cyEhEwB4U/dnPHFsqi0VkpnJ3bwKQuermE1OSC1xSkda6
TZFgWu5xs4sB+H7s3jgWHm7ftjxkQrI=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:25 2025 by rpki-client