Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a767ba3-2fd4-3415-940d-455ace57a09c.roa
File:                     8a767ba3-2fd4-3415-940d-455ace57a09c.roa (raw, json)
Hash identifier:          gmRNT4DKSPD0BplIJakbJHvDMzNXlbNmvEaqEWuThNk=
Subject key identifier:   EB:8E:2A:4A:18:C4:47:F3:8A:DD:7A:1C:73:30:01:3B:7C:B9:6F:AB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D39CF920F06A947CCECD71080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a767ba3-2fd4-3415-940d-455ace57a09c.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     36183
IP address blocks:        172.225.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:92:0f:06:a9:47:cc:ec:d7:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=be17cf65-4a1e-4403-b578-583a7e481f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:78:51:0e:d7:94:32:20:f1:88:59:0b:ef:94:
                    7b:26:37:11:12:fd:c5:c0:9b:7f:03:58:e1:70:14:
                    d7:91:fb:46:3c:f0:5a:4b:89:96:7e:e7:96:5c:ec:
                    99:15:9e:fb:83:71:e9:c1:b9:55:28:0c:df:aa:f3:
                    72:63:a4:0b:0f:0d:49:79:c4:f2:ef:3e:09:82:bd:
                    a6:6b:b3:0e:d3:a3:6e:b5:05:b6:06:21:90:29:13:
                    cf:68:ba:07:9c:96:2e:1d:34:26:b7:8e:22:36:d3:
                    d0:a9:fc:39:32:bc:e7:c2:0e:b1:1a:8d:77:83:ef:
                    72:ed:80:87:39:e4:31:34:9f:1a:9a:69:68:fa:0c:
                    58:02:5d:9a:4a:5e:e3:af:07:6a:1d:1f:40:5e:31:
                    25:07:de:59:8c:98:42:25:94:81:36:a5:a8:17:b9:
                    43:c1:3a:e1:4f:23:f3:c2:fc:f9:3d:04:ea:0f:8c:
                    1b:0e:a9:ce:14:00:0f:04:28:49:41:28:be:e2:28:
                    88:69:fe:04:82:0a:f0:fe:a0:37:9a:e9:3c:38:57:
                    f5:df:a7:72:4d:df:6d:91:fc:17:b4:72:ba:ba:f6:
                    d6:91:29:05:bc:01:60:c3:a6:46:37:7a:a1:a0:e7:
                    ab:53:52:30:29:fd:73:10:ef:f2:0d:76:65:f8:76:
                    ee:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8E:2A:4A:18:C4:47:F3:8A:DD:7A:1C:73:30:01:3B:7C:B9:6F:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a767ba3-2fd4-3415-940d-455ace57a09c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:69:18:88:2b:60:cd:15:db:44:70:03:29:81:be:2b:93:90:
         fc:7d:72:c2:86:ac:e2:2f:fb:f0:8e:cf:11:13:04:e1:57:e9:
         6b:b0:c3:2a:5e:a1:89:72:f9:74:87:7d:b7:37:14:86:9d:59:
         46:eb:5b:b8:7b:26:ee:35:0a:6c:29:70:c3:63:37:81:fb:cf:
         89:27:e5:45:e2:cb:6b:dd:bc:83:45:64:02:65:b9:a5:65:10:
         21:89:e3:8f:00:f8:57:45:1e:6a:18:79:74:d7:40:2e:f0:b5:
         56:49:f4:d8:95:69:25:14:38:25:88:43:f4:c6:da:33:3d:92:
         f6:e5:e4:a1:48:02:2b:aa:b0:83:b7:fb:e0:eb:75:6f:62:fc:
         d3:40:07:d6:fd:ab:35:3b:e6:1f:55:74:26:94:a6:4b:ca:f4:
         d9:37:32:41:5f:8c:37:a8:5b:54:5a:e0:71:3c:f3:a6:d1:b8:
         0d:38:32:e0:f4:59:db:d7:15:66:c4:be:22:b1:06:95:b3:53:
         dc:74:9f:c2:c4:43:af:a4:f7:3c:1a:e7:44:e5:e4:c4:6f:da:
         be:40:f9:34:c0:85:92:3e:75:06:bd:85:a8:06:b4:e1:30:06:
         cc:3f:ec:3b:58:3e:3d:b9:1f:51:1b:84:13:09:04:49:97:d9:
         50:58:74:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z5IPBqlHzOzXEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk
YmUxN2NmNjUtNGExZS00NDAzLWI1NzgtNTgzYTdlNDgxZjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHhRDteUMiDxiFkL75R7JjcREv3FwJt/A1jh
cBTXkftGPPBaS4mWfueWXOyZFZ77g3HpwblVKAzfqvNyY6QLDw1JecTy7z4Jgr2m
a7MO06NutQW2BiGQKRPPaLoHnJYuHTQmt44iNtPQqfw5Mrznwg6xGo13g+9y7YCH
OeQxNJ8ammlo+gxYAl2aSl7jrwdqHR9AXjElB95ZjJhCJZSBNqWoF7lDwTrhTyPz
wvz5PQTqD4wbDqnOFAAPBChJQSi+4iiIaf4Eggrw/qA3muk8OFf136dyTd9tkfwX
tHK6uvbWkSkFvAFgw6ZGN3qhoOerU1IwKf1zEO/yDXZl+HbueQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuOKkoYxEfzit16HHMwATt8uW+rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE3NjdiYTMtMmZkNC0z
NDE1LTk0MGQtNDU1YWNlNTdhMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOF+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlpGIgrYM0V20RwAymBviuTkPx9csKGrOIv+/COzxETBOFX6Wuwwype
oYly+XSHfbc3FIadWUbrW7h7Ju41CmwpcMNjN4H7z4kn5UXiy2vdvINFZAJluaVl
ECGJ448A+FdFHmoYeXTXQC7wtVZJ9NiVaSUUOCWIQ/TG2jM9kvbl5KFIAiuqsIO3
++DrdW9i/NNAB9b9qzU75h9VdCaUpkvK9Nk3MkFfjDeoW1Ra4HE886bRuA04MuD0
WdvXFWbEviKxBpWzU9x0n8LEQ6+k9zwa50Tl5MRv2r5A+TTAhZI+dQa9hagGtOEw
Bsw/7DtYPj25H1EbhBMJBEmX2VBYdOo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:21:28 2026 by rpki-client