Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/5962fb8d-96a5-3b26-bdfc-d9776b3fa518.roa
File:                     5962fb8d-96a5-3b26-bdfc-d9776b3fa518.roa (raw, json)
Hash identifier:          1NQtkUx4kUKa2oQqrTbluFnqf218LvvSpv457/7uz40=
Subject key identifier:   F9:FF:C8:DC:E2:BB:D5:BC:69:36:12:55:31:8A:28:E1:EA:54:F0:24
Certificate issuer:       /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
Certificate serial:       010D0C9F4328584EA5AA71978AD74B260A0FDB00
Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/5962fb8d-96a5-3b26-bdfc-d9776b3fa518.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        172.86.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:71:97:8a:d7:4b:26:0a:0f:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=9b7a8edf-5b49-4d01-8774-236948df5a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8f:f4:ab:c5:6b:fa:ce:39:28:a6:b5:e8:9c:
                    87:f8:3f:0e:da:93:1e:f2:0a:0c:65:d2:51:03:98:
                    46:b5:d6:9b:97:0b:67:a6:d9:68:bf:b8:0a:e4:2f:
                    56:c0:4b:7a:0d:61:80:93:96:93:ae:fb:1a:ac:9e:
                    97:6f:64:21:d7:79:03:83:db:1e:58:87:1c:e2:15:
                    57:5c:d5:a2:05:18:c0:9f:74:43:23:58:80:94:8b:
                    96:d5:ee:00:f3:c6:c4:8c:ed:fa:d7:5e:20:da:25:
                    cf:27:4b:ab:2f:8b:c0:e6:0a:bf:3d:d3:68:f5:ee:
                    74:95:59:29:b1:d3:60:13:d4:f0:85:32:28:f5:2e:
                    35:c1:fd:df:32:52:e9:23:33:18:0f:7d:db:dd:fe:
                    8c:05:fc:d0:60:1d:e0:b7:dc:e9:d5:54:ca:af:50:
                    75:4c:c8:5c:b6:d1:0f:7c:dc:d1:46:55:19:23:41:
                    92:24:59:95:3e:3a:05:8a:76:8d:ee:60:2f:c1:c9:
                    9f:00:06:40:e3:8e:fa:1b:a5:c7:de:d5:c0:3c:a9:
                    00:c2:fd:53:0f:e0:48:f4:e8:2a:35:e8:de:84:12:
                    a5:3c:32:cc:24:2a:41:4d:9e:71:3c:e9:a8:86:2e:
                    4b:89:53:cb:aa:08:6d:e0:53:e0:a8:54:4e:d8:78:
                    22:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FF:C8:DC:E2:BB:D5:BC:69:36:12:55:31:8A:28:E1:EA:54:F0:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/5962fb8d-96a5-3b26-bdfc-d9776b3fa518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl

            X509v3 Authority Key Identifier:
                keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:14:6d:11:6a:9c:f5:a4:ab:22:34:a0:52:eb:98:a8:2f:45:
         c1:92:97:5b:8b:c9:88:f5:8e:5c:58:31:71:6b:46:24:3f:49:
         9d:0d:89:72:23:c0:aa:7b:9b:e2:cf:e4:af:d4:19:78:5f:06:
         bf:fd:63:e2:46:ac:1b:da:b3:0a:cd:94:f8:04:b7:ea:bb:f7:
         a7:19:d1:5e:1d:e2:30:e4:f4:89:2c:03:9e:61:ec:83:ab:43:
         94:90:c5:60:96:60:4a:29:cc:6f:d1:dd:d2:cd:6e:be:e0:34:
         0e:29:e6:a9:42:bc:18:d3:16:0e:28:3a:81:a1:e6:9f:e1:bb:
         fa:a6:6a:3c:4e:2e:fd:f6:72:e1:a4:df:6c:ba:a0:a4:8e:ef:
         c4:96:52:b8:25:8b:ae:c5:66:62:da:9a:c1:ae:8b:13:5c:9b:
         63:12:30:ad:16:5e:f8:fb:c1:8d:be:52:7b:74:10:fd:b0:ab:
         f1:c3:36:77:b3:e0:a1:f3:81:5a:79:0d:6a:4b:9f:1f:30:7b:
         c1:53:39:ae:d9:68:45:24:0d:04:d2:52:5c:2b:de:41:05:0d:
         26:18:cc:b0:62:4a:6c:19:ff:0d:cc:65:e5:d8:dc:6b:5a:e6:
         7f:5a:2b:c9:2a:08:8c:df:46:6c:83:b1:ac:e7:3e:e0:d4:96:
         0d:cb:8d:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqnGXitdLJgoP2wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRjMzJjZGUtNzY5My00ZDEwLWFlMWUtOGI4ZTlkMzYz
MDc0MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk
OWI3YThlZGYtNWI0OS00ZDAxLTg3NzQtMjM2OTQ4ZGY1YTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Y/0q8Vr+s45KKa16JyH+D8O2pMe8goMZdJR
A5hGtdablwtnptlov7gK5C9WwEt6DWGAk5aTrvsarJ6Xb2Qh13kDg9seWIcc4hVX
XNWiBRjAn3RDI1iAlIuW1e4A88bEjO36114g2iXPJ0urL4vA5gq/PdNo9e50lVkp
sdNgE9TwhTIo9S41wf3fMlLpIzMYD33b3f6MBfzQYB3gt9zp1VTKr1B1TMhcttEP
fNzRRlUZI0GSJFmVPjoFinaN7mAvwcmfAAZA4476G6XH3tXAPKkAwv1TD+BI9Ogq
NejehBKlPDLMJCpBTZ5xPOmohi5LiVPLqght4FPgqFRO2HgiFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPn/yNziu9W8aTYSVTGKKOHqVPAkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMz
MmNkZS03NjkzLTRkMTAtYWUxZS04YjhlOWQzNjMwNzQvNTk2MmZiOGQtOTZhNS0z
YjI2LWJkZmMtZDk3NzZiM2ZhNTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRjMzJjZGUtNzY5My00ZDEwLWFl
MWUtOGI4ZTlkMzYzMDc0L2U0YzMyY2RlLTc2OTMtNGQxMC1hZTFlLThiOGU5ZDM2
MzA3NC5jcmwwHwYDVR0jBBgwFoAUkjFMWL/PeT5XBCYBM6ApayuFfnowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMzMmNkZS03NjkzLTRkMTAtYWUxZS04Yjhl
OWQzNjMwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFbhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJIUbRFqnPWkqyI0oFLrmKgvRcGSl1uLyYj1jlxYMXFrRiQ/SZ0NiXIj
wKp7m+LP5K/UGXhfBr/9Y+JGrBvaswrNlPgEt+q796cZ0V4d4jDk9IksA55h7IOr
Q5SQxWCWYEopzG/R3dLNbr7gNA4p5qlCvBjTFg4oOoGh5p/hu/qmajxOLv32cuGk
32y6oKSO78SWUrgli67FZmLamsGuixNcm2MSMK0WXvj7wY2+Unt0EP2wq/HDNnez
4KHzgVp5DWpLnx8we8FTOa7ZaEUkDQTSUlwr3kEFDSYYzLBiSmwZ/w3MZeXY3Gta
5n9aK8kqCIzfRmyDsaznPuDUlg3Ljbs=
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:59 2026 by rpki-client