Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48187770-36fc-38f9-9122-7f1070d1cea7.roa
File:                     48187770-36fc-38f9-9122-7f1070d1cea7.roa (raw, json)
Hash identifier:          QwGepjXI9Cr6AV/XYXV+ql18nBz+pvF+h4fHDZ2Lsjs=
Subject key identifier:   A3:1B:53:BD:8A:4B:71:68:38:DA:2F:ED:AB:46:43:F5:D0:6F:0B:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B8EACF7CE4C1A71BBF3B1C600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48187770-36fc-38f9-9122-7f1070d1cea7.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     36183
IP address blocks:        172.226.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:f7:ce:4c:1a:71:bb:f3:b1:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=b3280192-d330-454f-a059-aff44a58ceb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7d:79:4d:be:55:e6:cb:1d:e2:bb:2e:b2:79:
                    b8:83:f9:5e:5d:5d:7b:32:4e:27:56:ad:66:ea:6a:
                    01:35:68:60:78:aa:2d:f1:1c:11:89:c8:78:b2:27:
                    52:d5:d0:a8:ec:e2:c7:bf:3c:a8:04:a0:75:a2:e5:
                    3b:16:b1:72:5e:c4:a6:6f:2c:ca:2d:c7:79:c9:6b:
                    b2:27:d6:95:2d:dd:8e:95:d7:01:08:a8:79:40:32:
                    50:2c:7c:7d:ed:4b:df:0b:26:65:32:f9:4d:84:3f:
                    90:87:95:ad:08:cd:8a:47:9b:50:85:91:c1:a4:be:
                    83:07:5d:04:8d:3d:3d:45:2c:72:f3:07:0c:2e:c5:
                    9a:47:db:1f:62:5e:f7:01:92:84:73:1b:a7:b8:a0:
                    e2:1e:36:c7:47:db:24:04:71:75:3f:d1:bc:30:0b:
                    8c:23:f7:2d:fe:3a:61:55:51:e6:fe:9c:1f:22:4e:
                    97:68:69:9b:c2:d3:f4:68:01:f9:c0:92:ab:72:bc:
                    b6:e4:7a:0b:a5:bf:a1:45:4a:59:01:5f:43:b9:0f:
                    95:12:74:2a:fe:ee:99:44:8b:3a:85:5a:c7:db:b1:
                    ee:fc:b8:03:d4:22:fc:dc:c7:19:dc:63:22:cc:e9:
                    d3:c6:6a:a4:0e:9c:cd:c4:fc:42:69:a5:42:2b:37:
                    32:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1B:53:BD:8A:4B:71:68:38:DA:2F:ED:AB:46:43:F5:D0:6F:0B:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48187770-36fc-38f9-9122-7f1070d1cea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:07:35:a4:21:f9:a9:cf:33:a3:bb:df:6e:ac:59:0f:ce:71:
         af:30:83:1d:92:3a:3c:d6:d9:9f:a9:4a:a7:08:fc:7b:3c:b3:
         c8:63:8a:bf:85:a1:5f:4a:0c:e6:ac:56:bf:f2:65:52:12:7b:
         8c:c7:41:55:64:42:1c:17:65:0a:88:1b:1f:1f:5e:eb:fa:91:
         4d:63:bc:b7:34:35:e9:c0:b8:2a:24:93:52:54:dc:87:54:4a:
         16:0b:0e:d7:12:6d:a5:21:ad:15:c1:8b:8d:c8:f7:8d:7b:15:
         c0:ef:43:4a:8b:a5:14:3d:ad:ea:b0:17:3c:07:81:bf:de:33:
         41:d1:2a:41:50:f0:3d:a5:6f:5a:1b:03:38:f9:39:0a:fe:78:
         ae:2f:ae:6d:5e:f6:0d:41:39:31:5a:83:f1:c6:9c:66:eb:df:
         45:dd:e9:94:c2:79:4d:c8:aa:c9:10:af:9b:9b:2e:9c:f6:24:
         99:13:79:25:04:64:64:6a:8c:0e:30:9e:56:eb:61:74:ac:59:
         b2:28:d8:da:52:7c:8c:66:40:8c:aa:97:5e:61:eb:ef:9f:f8:
         52:c7:0a:26:11:5f:9e:ca:42:a6:6a:ff:1a:72:4e:02:7a:e9:
         41:2f:3c:48:7c:0e:55:e2:90:b1:c1:d7:8c:fc:b8:06:d1:63:
         a3:ee:f9:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPfOTBpxu/OxxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
YjMyODAxOTItZDMzMC00NTRmLWEwNTktYWZmNDRhNThjZWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX15Tb5V5ssd4rsusnm4g/leXV17Mk4nVq1m
6moBNWhgeKot8RwRich4sidS1dCo7OLHvzyoBKB1ouU7FrFyXsSmbyzKLcd5yWuy
J9aVLd2OldcBCKh5QDJQLHx97UvfCyZlMvlNhD+Qh5WtCM2KR5tQhZHBpL6DB10E
jT09RSxy8wcMLsWaR9sfYl73AZKEcxunuKDiHjbHR9skBHF1P9G8MAuMI/ct/jph
VVHm/pwfIk6XaGmbwtP0aAH5wJKrcry25HoLpb+hRUpZAV9DuQ+VEnQq/u6ZRIs6
hVrH27Hu/LgD1CL83McZ3GMizOnTxmqkDpzNxPxCaaVCKzcyZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMbU72KS3FoONov7atGQ/XQbwvEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDgxODc3NzAtMzZmYy0z
OGY5LTkxMjItN2YxMDcwZDFjZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgHNaQh+anPM6O7326sWQ/Oca8wgx2SOjzW2Z+pSqcI/Hs8s8hjir+F
oV9KDOasVr/yZVISe4zHQVVkQhwXZQqIGx8fXuv6kU1jvLc0NenAuCokk1JU3IdU
ShYLDtcSbaUhrRXBi43I9417FcDvQ0qLpRQ9reqwFzwHgb/eM0HRKkFQ8D2lb1ob
Azj5OQr+eK4vrm1e9g1BOTFag/HGnGbr30Xd6ZTCeU3IqskQr5ubLpz2JJkTeSUE
ZGRqjA4wnlbrYXSsWbIo2NpSfIxmQIyql15h6++f+FLHCiYRX57KQqZq/xpyTgJ6
6UEvPEh8DlXikLHB14z8uAbRY6Pu+Vo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:39:17 2025 by rpki-client