Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b3d4377-d222-329b-a0e0-9cfea758faff.roa
File:                     0b3d4377-d222-329b-a0e0-9cfea758faff.roa (raw, json)
Hash identifier:          o/3fBX9G5L3C5yJ2O9zERfDfHusoaDiSft5ablPEw+k=
Subject key identifier:   2B:74:A2:8B:42:27:93:18:CC:34:58:A2:18:A2:31:D0:D5:79:C9:AF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B8EAD01DB1BD082A92BF51C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b3d4377-d222-329b-a0e0-9cfea758faff.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     36183
IP address blocks:        172.226.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:01:db:1b:d0:82:a9:2b:f5:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=50b6a207-86be-421b-bf88-55d656b398b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:d8:56:99:86:10:fe:db:2d:ee:9b:70:c5:
                    88:5d:d9:7d:75:c6:ea:72:53:4b:d5:ad:4a:05:ad:
                    82:bc:3c:6e:1d:5b:4a:b8:a4:50:13:63:7c:cb:e7:
                    23:31:3b:92:d3:1c:6a:0e:60:9c:b7:ef:66:ba:72:
                    68:32:0e:bf:e1:ca:51:49:d0:fa:1e:b6:94:29:7d:
                    84:19:7d:bf:9f:7f:86:b2:ce:75:65:ee:f2:a0:c3:
                    f5:94:1a:11:d9:f1:58:d5:91:ee:7a:49:1b:55:18:
                    80:bc:04:9c:6d:92:80:2c:0d:98:f4:ab:de:63:2b:
                    9b:4b:68:4d:b7:d4:2c:5e:73:a6:53:1d:cf:48:ac:
                    ba:34:87:21:de:d2:30:b5:a7:89:7e:0f:d6:b6:99:
                    10:73:b9:dd:9e:5c:14:7c:a9:93:e3:a7:43:a9:73:
                    05:27:dd:f1:d2:6e:10:a0:04:86:99:a4:69:5d:29:
                    28:30:94:7c:5f:98:11:aa:a6:eb:e0:68:16:0e:fa:
                    65:78:d7:4f:0b:b4:8b:ec:ec:90:ed:4e:83:52:18:
                    81:41:75:be:43:d2:df:f6:da:5c:af:56:ee:59:ce:
                    f3:4a:bd:f4:d2:1a:84:6d:b7:28:24:1d:61:21:0e:
                    37:23:82:c1:c1:8f:48:36:56:9e:24:ca:72:ad:4a:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:74:A2:8B:42:27:93:18:CC:34:58:A2:18:A2:31:D0:D5:79:C9:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b3d4377-d222-329b-a0e0-9cfea758faff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:47:28:73:fc:f4:19:e8:7a:b8:51:0f:5f:28:ba:cb:48:de:
         7c:12:a5:24:6f:16:13:68:8f:09:ba:94:ef:0b:b3:16:85:87:
         7e:16:c4:0f:84:3f:5f:8f:e2:f4:de:2a:c0:72:52:8e:c1:2b:
         fd:58:03:3a:21:e3:fe:aa:ab:39:d8:06:6f:f7:ea:f5:0a:4a:
         76:e0:1e:fa:f0:60:ac:00:88:60:95:26:18:dd:89:22:59:9b:
         a2:3a:55:6b:c6:c2:f8:b5:df:f4:a1:82:c9:16:c0:4a:60:3b:
         0d:fb:25:35:88:74:3c:74:48:f3:97:d0:14:0d:e4:1a:f3:4f:
         1e:91:cf:cc:d2:ec:85:c7:d3:91:ac:3f:f3:f4:88:17:88:97:
         c9:8b:c5:6f:79:24:c4:1e:80:5e:98:df:c2:3a:c0:1d:03:c7:
         86:1b:3b:50:66:01:9d:d8:25:b5:f8:d0:0a:31:f2:50:bc:ff:
         01:7e:68:54:74:8d:3b:ef:b9:49:59:13:79:f9:6f:56:1c:eb:
         96:cc:f5:57:80:76:4e:93:fe:90:e3:e1:73:6c:79:e6:84:99:
         17:f3:67:2f:99:8d:94:48:f8:2a:84:31:8a:ab:3b:f3:9a:7f:
         b5:3f:39:28:12:b8:ec:c8:6a:c3:08:9c:1d:77:21:ca:13:61:
         e5:20:c6:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQHbG9CCqSv1HAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
NTBiNmEyMDctODZiZS00MjFiLWJmODgtNTVkNjU2YjM5OGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAzYVpmGEP7bLe6bcMWIXdl9dcbqclNL1a1K
Ba2CvDxuHVtKuKRQE2N8y+cjMTuS0xxqDmCct+9munJoMg6/4cpRSdD6HraUKX2E
GX2/n3+Gss51Ze7yoMP1lBoR2fFY1ZHuekkbVRiAvAScbZKALA2Y9KveYyubS2hN
t9QsXnOmUx3PSKy6NIch3tIwtaeJfg/WtpkQc7ndnlwUfKmT46dDqXMFJ93x0m4Q
oASGmaRpXSkoMJR8X5gRqqbr4GgWDvpleNdPC7SL7OyQ7U6DUhiBQXW+Q9Lf9tpc
r1buWc7zSr300hqEbbcoJB1hIQ43I4LBwY9INlaeJMpyrUrnJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCt0ootCJ5MYzDRYohiiMdDVecmvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGIzZDQzNzctZDIyMi0z
MjliLWEwZTAtOWNmZWE3NThmYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJHKHP89BnoerhRD18oustI3nwSpSRvFhNojwm6lO8LsxaFh34WxA+E
P1+P4vTeKsByUo7BK/1YAzoh4/6qqznYBm/36vUKSnbgHvrwYKwAiGCVJhjdiSJZ
m6I6VWvGwvi13/ShgskWwEpgOw37JTWIdDx0SPOX0BQN5BrzTx6Rz8zS7IXH05Gs
P/P0iBeIl8mLxW95JMQegF6Y38I6wB0Dx4YbO1BmAZ3YJbX40Aox8lC8/wF+aFR0
jTvvuUlZE3n5b1Yc65bM9VeAdk6T/pDj4XNseeaEmRfzZy+ZjZRI+CqEMYqrO/Oa
f7U/OSgSuOzIasMInB13IcoTYeUgxsU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:38 2025 by rpki-client