Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5eae492-949a-38fc-b66d-ccd884cb4dae.roa
File:                     a5eae492-949a-38fc-b66d-ccd884cb4dae.roa (raw, json)
Hash identifier:          nuFvmcs6+svDEylTtS6nBX6FAJps8S+aWmHtiVdzsPo=
Subject key identifier:   B6:91:40:55:C6:8E:F0:2A:24:72:6B:9D:D4:88:55:4B:79:C3:88:3B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B8EAD03F5F371F4FF37045680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5eae492-949a-38fc-b66d-ccd884cb4dae.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     36183
IP address blocks:        172.226.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:03:f5:f3:71:f4:ff:37:04:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=57b5ad40-9f8a-4d87-993a-0bed651415ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:c6:30:40:5f:cb:df:ae:00:f3:b7:cc:02:
                    9f:3b:d7:49:a5:c6:bf:29:6e:e4:2b:6d:9d:f5:a5:
                    2d:c6:97:36:b2:7e:d3:c9:4c:b2:87:51:ea:2d:bf:
                    39:24:3e:bd:f1:99:33:6e:50:85:a2:85:9a:41:40:
                    34:cc:58:4e:b5:c8:36:d3:79:90:a7:04:7b:ea:b3:
                    fa:a9:a4:36:d8:86:87:6d:67:39:32:79:2a:e7:df:
                    28:86:ac:04:91:83:71:6a:b3:d0:9d:2a:76:33:33:
                    13:bf:d9:18:08:2d:22:1a:f8:44:9c:20:7a:ad:76:
                    40:06:93:a8:24:ee:4c:78:96:23:c3:a7:d3:21:b4:
                    b4:14:74:53:38:1b:a5:68:82:28:80:ee:44:8e:8a:
                    f7:0f:b2:01:92:81:03:0c:48:02:48:cf:b1:c6:80:
                    c2:03:ba:1e:50:35:a8:3d:b9:62:06:33:f5:93:78:
                    79:32:14:e9:72:f0:2c:cc:fb:63:d3:6a:6f:76:91:
                    8c:54:b5:0d:de:23:4e:b5:7d:57:44:be:ea:f4:2e:
                    cd:5f:8a:3c:58:15:6f:6a:b9:b7:b2:4d:c9:08:c2:
                    4f:e6:81:48:5e:b5:54:2b:63:83:e9:06:a0:a9:23:
                    0d:71:ed:00:59:b2:f7:cb:1b:51:f8:9d:98:3a:06:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:91:40:55:C6:8E:F0:2A:24:72:6B:9D:D4:88:55:4B:79:C3:88:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5eae492-949a-38fc-b66d-ccd884cb4dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f1:3e:ae:08:d6:28:1d:95:47:15:13:2f:e2:ec:a1:f2:f0:
         ee:1c:0b:83:b5:e4:13:ed:2c:60:5f:b6:d3:25:42:a6:12:ff:
         14:4e:f1:f6:1f:10:38:c5:62:97:8c:a2:ae:42:7f:97:6f:ca:
         1e:66:13:5b:24:9e:9d:93:b7:0d:73:2d:d2:0c:94:48:17:bd:
         aa:32:47:c1:2e:bf:43:a1:3e:29:39:f9:59:35:ea:c8:73:d0:
         7d:e8:18:f7:ee:71:b1:6b:f3:70:57:10:ba:4d:79:c6:f0:b5:
         79:15:71:80:47:74:51:28:d7:69:9e:73:71:a4:4c:be:18:ce:
         1d:9a:4d:5c:8f:f9:53:ca:e9:b4:fc:fa:85:80:69:95:a2:1e:
         54:8d:f8:fa:b4:64:c6:07:23:3d:c6:ed:4f:8b:73:35:71:43:
         6b:84:9a:6c:3a:7c:c5:26:c2:4f:f4:05:08:bc:b8:ca:82:50:
         9c:88:f1:50:55:f1:aa:5d:e8:2d:db:c9:84:69:4b:76:4f:ec:
         ba:35:87:fe:62:89:ff:6f:c5:11:67:e3:5d:49:4c:d7:93:71:
         79:f4:28:e0:51:22:fb:80:de:e2:aa:53:04:51:eb:34:7c:49:
         df:32:8b:cb:c0:e7:e9:70:55:96:21:59:b8:81:78:b6:2b:10:
         ae:e8:fc:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQP183H0/zcEVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
NTdiNWFkNDAtOWY4YS00ZDg3LTk5M2EtMGJlZDY1MTQxNWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAworGMEBfy9+uAPO3zAKfO9dJpca/KW7kK22d
9aUtxpc2sn7TyUyyh1HqLb85JD698ZkzblCFooWaQUA0zFhOtcg203mQpwR76rP6
qaQ22IaHbWc5Mnkq598ohqwEkYNxarPQnSp2MzMTv9kYCC0iGvhEnCB6rXZABpOo
JO5MeJYjw6fTIbS0FHRTOBulaIIogO5Ejor3D7IBkoEDDEgCSM+xxoDCA7oeUDWo
PbliBjP1k3h5MhTpcvAszPtj02pvdpGMVLUN3iNOtX1XRL7q9C7NX4o8WBVvarm3
sk3JCMJP5oFIXrVUK2OD6QagqSMNce0AWbL3yxtR+J2YOgZ8GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLaRQFXGjvAqJHJrndSIVUt5w4g7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTVlYWU0OTItOTQ5YS0z
OGZjLWI2NmQtY2NkODg0Y2I0ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITxPq4I1igdlUcVEy/i7KHy8O4cC4O15BPtLGBfttMlQqYS/xRO8fYf
EDjFYpeMoq5Cf5dvyh5mE1sknp2Ttw1zLdIMlEgXvaoyR8Euv0OhPik5+Vk16shz
0H3oGPfucbFr83BXELpNecbwtXkVcYBHdFEo12mec3GkTL4Yzh2aTVyP+VPK6bT8
+oWAaZWiHlSN+Pq0ZMYHIz3G7U+LczVxQ2uEmmw6fMUmwk/0BQi8uMqCUJyI8VBV
8apd6C3byYRpS3ZP7Lo1h/5iif9vxRFn411JTNeTcXn0KOBRIvuA3uKqUwRR6zR8
Sd8yi8vA5+lwVZYhWbiBeLYrEK7o/Dk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:13 2025 by rpki-client