Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a9c1da48-3ccb-3502-b101-020332d0e746.roa
File:                     a9c1da48-3ccb-3502-b101-020332d0e746.roa (raw, json)
Hash identifier:          r4dCAXGCpgWmM9+Phda6Sq1n3dEFh9OGpKnGFuYNr4U=
Subject key identifier:   17:F4:32:F4:83:14:D0:02:76:C8:8E:5E:96:B9:62:63:1C:0F:1B:EC
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584F497CD380829098409F0F4500
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a9c1da48-3ccb-3502-b101-020332d0e746.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36040
IP address blocks:        104.237.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:d3:80:82:90:98:40:9f:0f:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b4ca5971-df84-46de-80ae-8674656996a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c5:85:9e:aa:e1:b9:2a:4a:d9:ab:19:75:39:
                    90:97:9a:11:b4:aa:10:46:2b:67:3e:e2:1c:57:fc:
                    e2:a5:e4:b1:f3:c2:c6:91:fd:c7:4d:88:36:f4:ff:
                    1b:00:61:ed:a4:f1:12:8c:4d:f9:8e:62:f3:c6:d0:
                    42:ee:11:27:27:dc:d2:41:06:17:e0:59:71:c7:f6:
                    b3:6f:c0:00:26:f0:8f:99:76:80:f2:4d:14:10:a0:
                    58:c7:90:0a:e2:66:c8:62:7f:f7:81:cf:a7:61:15:
                    4a:2f:a4:8c:51:5b:30:39:77:56:b3:74:64:ef:6a:
                    2b:f0:6c:d3:5b:bf:e4:05:11:e0:ee:ca:e1:e4:d1:
                    bb:23:e8:53:27:83:dd:4f:de:98:b8:95:11:a6:61:
                    53:d2:2b:7f:1e:ee:46:b0:35:da:0a:ba:a5:cd:1f:
                    2a:e2:df:40:ce:37:9f:39:4d:db:6a:2f:ff:36:79:
                    17:20:a1:ab:65:a2:b1:30:7f:52:97:58:b4:05:17:
                    cd:26:98:67:da:f4:60:d7:00:a1:75:a9:c5:39:02:
                    78:7e:75:15:00:5c:6c:a6:03:0f:4b:9a:28:f9:c7:
                    89:7d:65:03:be:34:65:e1:7d:51:69:a3:aa:1b:42:
                    35:ff:7a:c9:64:ae:bb:10:6a:f9:39:c6:f1:7a:2e:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F4:32:F4:83:14:D0:02:76:C8:8E:5E:96:B9:62:63:1C:0F:1B:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a9c1da48-3ccb-3502-b101-020332d0e746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f7:2b:e9:f2:09:4e:76:52:59:fe:b5:00:a8:08:f7:f5:10:
         59:b7:90:48:d0:96:30:4f:de:76:26:11:91:13:08:75:dc:4f:
         cc:07:a4:cd:bb:0e:16:87:40:62:65:c9:d4:b0:66:22:99:f3:
         c4:98:47:44:ee:15:80:3e:5c:0e:b4:5c:c4:1b:1c:b8:37:71:
         84:48:13:23:48:a5:64:a5:13:25:d9:05:4e:67:03:37:45:3b:
         c8:79:b5:ea:70:f2:9d:39:dc:16:14:7c:e0:56:5a:1a:d9:a6:
         60:0f:3b:f5:92:4a:5a:9f:3b:a2:be:0d:01:9f:cd:c0:47:76:
         c2:20:98:26:f2:52:7c:7b:00:4d:1f:27:18:73:4e:99:00:a3:
         2b:8c:b1:82:77:bf:cd:36:3f:74:47:49:66:f3:2c:21:5b:67:
         d7:5c:8d:3f:9f:00:cc:5b:a5:42:1d:17:ef:49:28:9b:00:b0:
         32:89:5b:c0:e1:19:1f:3b:5b:bf:22:bd:73:e5:48:2c:a2:5a:
         2c:73:1e:df:07:6d:35:97:37:87:24:bc:db:52:78:53:63:7a:
         39:e2:bc:f9:66:e6:39:0e:90:36:e6:5b:0f:d8:14:bc:d6:e0:
         5d:25:02:7f:e4:04:7b:28:b6:0f:cf:5f:67:f8:a6:6e:e1:08:
         f1:10:53:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfNOAgpCYQJ8PRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjRjYTU5NzEtZGY4NC00NmRlLTgwYWUtODY3NDY1Njk5NmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsWFnqrhuSpK2asZdTmQl5oRtKoQRitnPuIc
V/zipeSx88LGkf3HTYg29P8bAGHtpPESjE35jmLzxtBC7hEnJ9zSQQYX4Flxx/az
b8AAJvCPmXaA8k0UEKBYx5AK4mbIYn/3gc+nYRVKL6SMUVswOXdWs3Rk72or8GzT
W7/kBRHg7srh5NG7I+hTJ4PdT96YuJURpmFT0it/Hu5GsDXaCrqlzR8q4t9Azjef
OU3bai//NnkXIKGrZaKxMH9Sl1i0BRfNJphn2vRg1wChdanFOQJ4fnUVAFxspgMP
S5oo+ceJfWUDvjRl4X1RaaOqG0I1/3rJZK67EGr5Ocbxei5dYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBf0MvSDFNACdsiOXpa5YmMcDxvsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYTljMWRhNDgtM2NjYi0z
NTAyLWIxMDEtMDIwMzMyZDBlNzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO2uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/3K+nyCU52Uln+tQCoCPf1EFm3kEjQljBP3nYmEZETCHXcT8wHpM27
DhaHQGJlydSwZiKZ88SYR0TuFYA+XA60XMQbHLg3cYRIEyNIpWSlEyXZBU5nAzdF
O8h5tepw8p053BYUfOBWWhrZpmAPO/WSSlqfO6K+DQGfzcBHdsIgmCbyUnx7AE0f
JxhzTpkAoyuMsYJ3v802P3RHSWbzLCFbZ9dcjT+fAMxbpUIdF+9JKJsAsDKJW8Dh
GR87W78ivXPlSCyiWixzHt8HbTWXN4ckvNtSeFNjejnivPlm5jkOkDbmWw/YFLzW
4F0lAn/kBHsotg/PX2f4pm7hCPEQU40=
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:16:17 2026 by rpki-client