Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/906e3684-aa68-3939-97e4-36543bf711de.roa
File:                     906e3684-aa68-3939-97e4-36543bf711de.roa (raw, json)
Hash identifier:          PPllr69KHeYXT1lAMXvf49uYb3SbE9ViG6wiDH+eNTU=
Subject key identifier:   52:51:5E:45:90:52:C6:61:1D:80:E6:29:5C:34:1E:9C:1A:4D:9D:84
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584F119CE09885B7A550AD089B80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/906e3684-aa68-3939-97e4-36543bf711de.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        144.25.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:e0:98:85:b7:a5:50:ad:08:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=4cc67122-8aee-4622-b10c-c2b5b1dd592d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:43:0d:22:e7:79:ce:d7:27:dc:86:90:74:
                    91:43:98:f2:23:d9:e1:86:83:33:b7:49:03:59:3a:
                    6d:95:74:c5:d2:06:14:c2:d3:9c:43:71:f4:a5:b8:
                    dd:2a:b1:76:76:41:f8:00:33:04:4f:9d:d5:78:2f:
                    3e:25:5a:09:23:9e:ad:25:c2:23:ba:9d:71:39:6a:
                    d5:da:ca:97:bd:23:cc:de:e1:37:1f:ea:68:8b:83:
                    af:5a:ae:ab:12:bc:6e:e8:3f:1e:39:31:e0:65:59:
                    88:a8:f1:64:20:45:97:b8:b7:31:be:66:6b:c1:eb:
                    58:21:91:3f:32:13:89:43:19:69:a8:a0:10:16:be:
                    a3:4e:3b:64:11:9b:93:64:3c:1c:5d:4a:b9:59:11:
                    a2:91:29:77:6c:17:78:b7:1a:94:9b:98:2f:e1:95:
                    dc:b9:c3:fd:ed:78:80:6b:7c:52:97:93:e5:3c:a8:
                    bd:c0:a7:da:08:27:c4:f8:70:77:92:79:1b:f7:6b:
                    24:85:39:82:14:da:4d:25:0c:79:02:ca:39:83:9a:
                    df:f4:a3:d9:3b:ba:50:3e:54:95:4d:f5:54:9c:dc:
                    a3:51:88:77:4c:be:a2:2b:c5:67:9a:65:21:23:25:
                    20:e7:45:f2:43:17:98:83:e7:97:97:f1:6e:8f:c1:
                    d1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:51:5E:45:90:52:C6:61:1D:80:E6:29:5C:34:1E:9C:1A:4D:9D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/906e3684-aa68-3939-97e4-36543bf711de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.25.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:47:8e:00:d6:62:75:7a:24:f6:48:f7:da:5c:f0:40:b2:58:
         a5:51:29:f8:eb:31:14:5f:3f:d2:20:38:3b:76:18:91:b3:29:
         13:95:17:ff:bc:f5:fc:99:ec:04:9a:31:ca:48:10:7b:3b:9b:
         94:b0:a3:08:8e:2d:ed:75:97:b0:ae:56:ae:91:80:e7:ac:66:
         e3:92:73:eb:a9:40:d2:a5:92:50:6b:73:ad:c5:c9:67:9f:59:
         b3:26:b0:03:55:53:55:79:a9:73:6c:15:af:84:b2:08:3e:00:
         1e:27:e2:65:77:21:5b:a1:94:51:a7:ab:57:38:0a:ea:6a:b0:
         c1:89:fe:66:fd:86:88:5e:e9:7e:c3:36:40:74:a1:ef:84:47:
         ea:b2:c1:41:4a:45:c2:a5:ff:43:32:f5:df:02:cc:00:bf:9e:
         84:45:05:59:30:6f:79:38:d5:00:2e:f0:6c:75:60:ae:2a:0c:
         bf:ee:ca:9e:fe:ff:98:bb:c0:a4:62:28:1a:d2:a9:db:d9:ed:
         f1:4d:c2:25:0a:55:38:ee:4d:ca:05:3e:df:08:35:3f:de:0d:
         e6:71:2b:d9:7b:48:34:ab:2c:84:1a:3b:2a:a7:6c:0e:3c:c2:
         67:3e:d9:ea:d4:ce:9c:24:e8:5d:3a:e5:47:4e:db:81:8f:f7:
         d7:87:b7:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOCYhbelUK0Im4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy
ZTQ0MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
NGNjNjcxMjItOGFlZS00NjIyLWIxMGMtYzJiNWIxZGQ1OTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPVDDSLnec7XJ9yGkHSRQ5jyI9nhhoMzt0kD
WTptlXTF0gYUwtOcQ3H0pbjdKrF2dkH4ADMET53VeC8+JVoJI56tJcIjup1xOWrV
2sqXvSPM3uE3H+poi4OvWq6rErxu6D8eOTHgZVmIqPFkIEWXuLcxvmZrwetYIZE/
MhOJQxlpqKAQFr6jTjtkEZuTZDwcXUq5WRGikSl3bBd4txqUm5gv4ZXcucP97XiA
a3xSl5PlPKi9wKfaCCfE+HB3knkb92skhTmCFNpNJQx5Aso5g5rf9KPZO7pQPlSV
TfVUnNyjUYh3TL6iK8VnmmUhIyUg50XyQxeYg+eXl/Fuj8HRYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJRXkWQUsZhHYDmKVw0HpwaTZ2EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0
MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvOTA2ZTM2ODQtYWE2OC0z
OTM5LTk3ZTQtMzY1NDNiZjcxMWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx
MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj
MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1
MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBlIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABNHjgDWYnV6JPZI99pc8ECyWKVRKfjrMRRfP9IgODt2GJGzKROVF/+8
9fyZ7ASaMcpIEHs7m5SwowiOLe11l7CuVq6RgOesZuOSc+upQNKlklBrc63FyWef
WbMmsANVU1V5qXNsFa+Esgg+AB4n4mV3IVuhlFGnq1c4CupqsMGJ/mb9hohe6X7D
NkB0oe+ER+qywUFKRcKl/0My9d8CzAC/noRFBVkwb3k41QAu8Gx1YK4qDL/uyp7+
/5i7wKRiKBrSqdvZ7fFNwiUKVTjuTcoFPt8INT/eDeZxK9l7SDSrLIQaOyqnbA48
wmc+2erUzpwk6F065UdO24GP99eHt4Y=
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:01:20 2026 by rpki-client