Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e22d759d-172a-310c-b64f-2d86622f1421.roa
File:                     e22d759d-172a-310c-b64f-2d86622f1421.roa (raw, json)
Hash identifier:          hRD8mUK7cScX6h/OloBIdE/IlBaXfYwtdxOW7g0bvKg=
Subject key identifier:   06:02:77:C8:B5:AF:5E:F3:28:D4:EB:D4:5B:2B:4E:4C:C1:D8:51:D5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E1FA9AC628C237EBB04C04180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e22d759d-172a-310c-b64f-2d86622f1421.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     36183
IP address blocks:        172.225.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:ac:62:8c:23:7e:bb:04:c0:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=ae980a89-8573-454e-be64-840dbb9d2225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:69:48:b5:27:c2:86:49:44:3e:e1:42:be:cf:
                    1f:b6:87:7c:4a:2b:4b:31:cb:de:17:8f:0c:ef:d0:
                    b9:7e:75:ca:bf:4f:8a:5f:92:68:15:f5:08:b5:05:
                    1d:8c:58:1b:ad:5c:3a:81:ff:6b:36:fd:86:56:d9:
                    85:e7:4a:dd:cf:a2:fc:47:17:7f:b7:b6:78:4e:72:
                    f9:7a:e2:fa:9b:23:52:22:f7:ec:61:2e:94:a3:5b:
                    d3:cd:13:2b:36:ee:79:ad:9c:e8:f9:1c:63:00:99:
                    50:49:ab:09:bc:46:4e:00:8b:94:3e:e8:19:3e:d0:
                    26:75:f7:88:83:cf:21:0e:6f:43:d3:d4:a0:02:ac:
                    5b:f1:cf:d6:7a:49:32:4c:18:f0:26:e8:fa:a0:ca:
                    c8:30:3b:c0:e2:c5:78:97:04:73:4f:ff:e0:4a:43:
                    0a:70:36:30:a4:83:c0:33:9d:80:8a:a0:03:56:fa:
                    ff:5e:30:ab:45:f5:ae:85:11:6a:c7:9a:e0:0f:ba:
                    8e:44:2e:6c:01:b9:64:99:53:07:87:df:e3:52:34:
                    21:20:e4:a3:eb:23:68:fd:23:43:51:79:db:17:ed:
                    69:2e:a5:0f:ac:e3:65:b7:d5:e3:83:ee:a6:18:e3:
                    80:72:1e:9c:da:a9:00:51:6b:fe:0d:a9:20:17:c9:
                    2d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:02:77:C8:B5:AF:5E:F3:28:D4:EB:D4:5B:2B:4E:4C:C1:D8:51:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e22d759d-172a-310c-b64f-2d86622f1421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f9:d1:c3:04:75:e0:92:6a:37:38:15:cb:a1:86:4e:58:84:
         5d:9d:07:b3:13:8b:06:50:4f:9f:58:ae:b8:0f:11:88:90:e4:
         16:76:9f:e7:61:70:6f:71:53:2b:42:b8:5f:6c:c0:ce:61:bf:
         70:a8:97:f5:2b:06:77:f1:30:3d:83:f1:cc:ff:fd:89:c7:d9:
         df:3f:37:66:d9:1b:63:cb:9a:5a:77:4f:3b:59:35:64:c5:c7:
         88:85:4c:6d:ce:89:57:7c:30:da:1c:a2:9f:bf:52:7c:30:12:
         31:01:fe:98:9b:c4:02:ea:6e:03:d0:7b:d0:bb:7a:65:18:af:
         26:ed:69:84:df:08:ec:47:21:f9:79:92:19:7b:6e:4d:7a:9e:
         c5:d5:80:ce:d5:9a:4e:ec:be:da:c4:66:01:4d:37:54:e2:c7:
         fb:10:69:f7:40:02:93:e9:15:90:76:48:d6:f1:64:a5:7b:26:
         13:91:24:96:61:b1:37:43:fe:2c:dc:57:b4:a8:0c:49:c6:57:
         ab:01:4d:e1:6e:6e:94:5a:c3:d8:ae:21:7e:4f:e9:eb:5c:67:
         c1:f3:36:8c:82:05:41:17:df:40:4c:47:a2:c2:b7:5c:2a:8c:
         9c:d0:b0:52:55:34:4a:05:33:66:cd:6d:43:69:e5:bc:21:29:
         46:24:da:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqaxijCN+uwTAQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk
YWU5ODBhODktODU3My00NTRlLWJlNjQtODQwZGJiOWQyMjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWlItSfChklEPuFCvs8ftod8SitLMcveF48M
79C5fnXKv0+KX5JoFfUItQUdjFgbrVw6gf9rNv2GVtmF50rdz6L8Rxd/t7Z4TnL5
euL6myNSIvfsYS6Uo1vTzRMrNu55rZzo+RxjAJlQSasJvEZOAIuUPugZPtAmdfeI
g88hDm9D09SgAqxb8c/WekkyTBjwJuj6oMrIMDvA4sV4lwRzT//gSkMKcDYwpIPA
M52AiqADVvr/XjCrRfWuhRFqx5rgD7qORC5sAblkmVMHh9/jUjQhIOSj6yNo/SND
UXnbF+1pLqUPrONlt9Xjg+6mGOOAch6c2qkAUWv+DakgF8kt/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAYCd8i1r17zKNTr1FsrTkzB2FHVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTIyZDc1OWQtMTcyYS0z
MTBjLWI2NGYtMmQ4NjYyMmYxNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOH3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGz50cMEdeCSajc4Fcuhhk5YhF2dB7MTiwZQT59YrrgPEYiQ5BZ2n+dh
cG9xUytCuF9swM5hv3Col/UrBnfxMD2D8cz//YnH2d8/N2bZG2PLmlp3TztZNWTF
x4iFTG3OiVd8MNocop+/UnwwEjEB/pibxALqbgPQe9C7emUYrybtaYTfCOxHIfl5
khl7bk16nsXVgM7Vmk7svtrEZgFNN1Tix/sQafdAApPpFZB2SNbxZKV7JhORJJZh
sTdD/izcV7SoDEnGV6sBTeFubpRaw9iuIX5P6etcZ8HzNoyCBUEX30BMR6LCt1wq
jJzQsFJVNEoFM2bNbUNp5bwhKUYk2kA=
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:27:06 2026 by rpki-client