Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/750a1e7a-79ea-3e15-a1c3-6495422bb49d.roa
File:                     750a1e7a-79ea-3e15-a1c3-6495422bb49d.roa (raw, json)
Hash identifier:          aahEQ9sCgVwc7R0NAFRPTuDabpjA7hwvYkLVbYfp8vc=
Subject key identifier:   E9:18:ED:57:C5:89:DA:29:4F:20:2C:EC:57:CC:A0:CC:70:33:F8:3F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E6145139C48C2B9AB2B378220
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/750a1e7a-79ea-3e15-a1c3-6495422bb49d.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     9498
IP address blocks:        184.25.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:13:9c:48:c2:b9:ab:2b:37:82:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=38285cf2-24ab-4f88-9a28-c1c1cbca4579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:38:63:9c:75:9f:88:62:7c:f7:b1:80:eb:
                    70:3d:3f:d0:75:8c:15:f3:b1:ae:97:19:74:46:7d:
                    5f:a9:ba:89:91:86:2a:3b:6c:50:89:48:07:5b:43:
                    df:74:15:86:29:29:3c:23:1b:03:6c:71:95:38:b2:
                    ac:f1:bf:f7:b4:b5:bf:f7:1d:9e:3e:13:84:6b:44:
                    9e:15:72:17:f8:56:d0:dc:0e:cd:f0:87:1c:35:84:
                    56:8b:bf:72:e8:84:76:58:95:54:86:0f:77:30:86:
                    c1:f1:71:6a:f9:86:6d:ce:63:17:6f:91:f4:87:f4:
                    67:ea:c4:56:4a:a4:a1:d4:46:38:e2:b3:5d:b6:2b:
                    e1:06:0d:b4:a8:23:69:ea:5d:dd:c8:40:79:05:97:
                    ac:23:dd:68:f3:65:5a:ed:88:f8:6b:54:db:38:46:
                    c7:a5:96:cf:e2:19:45:9b:fa:2d:50:2e:b0:9c:e6:
                    81:2f:53:52:9b:0e:f8:92:1b:64:55:a9:8a:16:4a:
                    6c:79:4d:9a:45:85:e0:8b:09:18:d1:66:b1:d5:db:
                    a9:8b:2a:5e:31:fc:b8:79:d7:f8:2a:57:e0:4b:d5:
                    c0:75:a0:f3:11:72:d7:dd:cf:93:7a:be:ee:53:27:
                    ab:31:c1:45:2a:1a:86:1a:78:62:af:3a:60:1b:db:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:18:ED:57:C5:89:DA:29:4F:20:2C:EC:57:CC:A0:CC:70:33:F8:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/750a1e7a-79ea-3e15-a1c3-6495422bb49d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:8f:0e:d3:b3:93:11:63:5b:77:26:5f:70:70:08:e2:2a:7c:
         de:b2:50:a1:c1:79:ca:06:00:9a:f0:6e:32:d6:e8:38:eb:43:
         e9:fe:d6:a8:97:47:09:fd:0e:e1:d6:bc:70:26:06:3f:13:49:
         c7:f9:cd:ca:e1:03:d4:33:06:b0:3e:50:21:72:7f:ae:23:d9:
         5e:2e:03:ac:33:d9:1e:6a:66:ea:bb:76:e8:60:02:12:a6:cf:
         3e:bd:aa:bf:ed:b7:12:71:dc:c3:af:a9:c4:e5:6d:a4:c6:21:
         01:c2:b0:7e:25:a9:ce:c0:b9:93:cb:59:5d:6d:8c:72:38:40:
         fe:99:a1:75:93:f6:06:db:97:85:72:80:6d:bc:d2:2a:04:9b:
         94:9b:52:c6:74:d8:13:2d:10:34:b4:35:bc:17:73:20:30:59:
         13:03:a0:96:d9:b5:a1:a5:00:b6:ea:2c:c3:c5:6a:d3:d1:6f:
         61:50:b7:24:f5:2a:d9:9d:78:09:3d:5b:5b:db:da:d3:de:95:
         59:a3:51:b5:5a:c8:2a:43:df:b6:e1:b0:09:58:fc:a4:28:54:
         d3:87:98:7b:6d:0c:b2:e5:c5:d4:c6:f6:1b:5c:17:45:1c:e6:
         3c:0b:e3:25:9a:cb:91:0d:6f:e4:b7:e0:0f:8b:50:50:ee:f1:
         15:42:99:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRROcSMK5qys3giAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
MzgyODVjZjItMjRhYi00Zjg4LTlhMjgtYzFjMWNiY2E0NTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuk4Y5x1n4hifPexgOtwPT/QdYwV87Gulxl0
Rn1fqbqJkYYqO2xQiUgHW0PfdBWGKSk8IxsDbHGVOLKs8b/3tLW/9x2ePhOEa0Se
FXIX+FbQ3A7N8IccNYRWi79y6IR2WJVUhg93MIbB8XFq+YZtzmMXb5H0h/Rn6sRW
SqSh1EY44rNdtivhBg20qCNp6l3dyEB5BZesI91o82Va7Yj4a1TbOEbHpZbP4hlF
m/otUC6wnOaBL1NSmw74khtkVamKFkpseU2aRYXgiwkY0Wax1dupiypeMfy4edf4
KlfgS9XAdaDzEXLX3c+Ter7uUyerMcFFKhqGGnhirzpgG9uJtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOkY7VfFidopTyAs7FfMoMxwM/g/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzUwYTFlN2EtNzllYS0z
ZTE1LWExYzMtNjQ5NTQyMmJiNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuBmgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGPDtOzkxFjW3cmX3BwCOIqfN6yUKHBecoGAJrwbjLW6DjrQ+n+1qiX
Rwn9DuHWvHAmBj8TScf5zcrhA9QzBrA+UCFyf64j2V4uA6wz2R5qZuq7duhgAhKm
zz69qr/ttxJx3MOvqcTlbaTGIQHCsH4lqc7AuZPLWV1tjHI4QP6ZoXWT9gbbl4Vy
gG280ioEm5SbUsZ02BMtEDS0NbwXcyAwWRMDoJbZtaGlALbqLMPFatPRb2FQtyT1
KtmdeAk9W1vb2tPelVmjUbVayCpD37bhsAlY/KQoVNOHmHttDLLlxdTG9htcF0Uc
5jwL4yWay5ENb+S34A+LUFDu8RVCmSY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:02:48 2026 by rpki-client