Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32fef26c-9dc1-3164-b8e3-74b8c43eb11e.roa
File:                     32fef26c-9dc1-3164-b8e3-74b8c43eb11e.roa (raw, json)
Hash identifier:          b3DszhupCh9yu6zbQ5ze507FAeBYC0WmIipyTRs/kuI=
Subject key identifier:   96:D0:D3:86:BE:5F:C2:62:DB:88:8E:C6:5A:41:9E:11:65:17:2B:A7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A9FFBAE4E57923ABEF422A640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32fef26c-9dc1-3164-b8e3-74b8c43eb11e.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     36183
IP address blocks:        172.225.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:ae:4e:57:92:3a:be:f4:22:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=d4d1bf7d-5de8-44d3-982f-114e7c81657d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:75:57:bd:52:38:5c:9b:a7:49:5d:aa:46:91:
                    14:c7:37:69:46:68:15:c3:5f:fb:c1:fa:0a:2b:06:
                    f5:b3:42:f6:6b:25:cb:30:4d:20:ac:56:8c:22:d5:
                    8e:4a:be:7a:d6:86:38:b2:3e:7a:41:ba:fa:38:18:
                    51:bb:9c:34:da:50:8c:6b:1b:49:9b:c1:03:32:d6:
                    1e:6e:9e:67:69:6d:20:c0:d7:8e:37:54:b4:ac:79:
                    bd:7b:08:d5:c7:bb:23:03:ad:84:fe:a9:55:80:f3:
                    a5:c0:96:b9:3f:40:43:56:4d:95:c6:d1:d5:34:10:
                    8f:e9:87:fa:50:d0:24:2a:e8:35:99:69:c5:1b:80:
                    aa:8c:94:e4:35:c4:c2:03:df:d3:6e:6b:1c:1f:01:
                    cd:64:4d:ce:4b:0b:f7:28:04:ff:96:1c:43:c8:07:
                    61:a9:6a:02:26:7e:ca:b0:b5:37:26:b6:c7:1d:3c:
                    18:51:cc:8c:2b:2d:45:2b:b3:92:54:f9:7c:cb:5e:
                    26:47:57:ff:81:6e:97:32:ad:9b:9e:4d:1d:e8:1f:
                    fc:78:0d:39:b5:34:de:05:93:67:3f:ee:da:f7:ca:
                    cb:58:a2:d5:b7:ab:9d:54:5d:09:68:8b:20:ed:cf:
                    a7:27:3d:21:4d:2e:f0:88:59:4e:88:4d:77:8a:28:
                    b6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D0:D3:86:BE:5F:C2:62:DB:88:8E:C6:5A:41:9E:11:65:17:2B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32fef26c-9dc1-3164-b8e3-74b8c43eb11e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a1:16:33:54:6d:44:ee:a7:7f:0c:89:a1:7e:23:df:92:5d:
         c0:bf:bb:2a:b9:7f:e1:ed:d9:ce:f5:cc:73:7b:44:09:b9:f2:
         64:d5:7e:ee:41:eb:75:99:be:e5:61:8a:35:9d:15:9d:a2:63:
         9f:24:19:9e:6e:3f:9b:39:47:91:c7:fa:33:6e:b4:77:64:c3:
         31:9b:0b:02:52:56:5f:7b:c8:79:5b:01:58:28:5d:f2:48:18:
         58:c2:4a:6d:62:3a:e5:e8:d3:30:0c:c1:53:af:b4:b0:79:7d:
         9a:03:aa:94:bb:e9:4d:23:25:68:fa:fd:2e:48:65:ab:73:ec:
         f6:0e:55:7e:bc:36:34:09:d8:90:24:c8:c2:15:bd:55:e7:e5:
         2e:a3:0a:e1:01:db:13:b9:9b:f8:fe:6a:e0:51:26:74:82:13:
         da:5a:60:96:42:eb:58:23:55:6c:88:d8:b2:37:55:00:d9:e8:
         41:37:44:a3:aa:66:e5:57:4f:0b:b3:0f:54:87:37:3f:51:1c:
         bd:e7:00:9a:43:1a:d0:04:1d:9b:3c:19:85:97:27:75:a6:0b:
         14:c6:e3:fe:b4:ef:7a:30:07:92:f1:6a:ef:a3:08:8c:26:c6:
         9a:0f:8a:ea:f8:4c:d2:2f:78:e8:c9:c1:95:cc:b5:f3:e9:45:
         cb:fc:2b:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+65OV5I6vvQipkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk
ZDRkMWJmN2QtNWRlOC00NGQzLTk4MmYtMTE0ZTdjODE2NTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HVXvVI4XJunSV2qRpEUxzdpRmgVw1/7wfoK
Kwb1s0L2ayXLME0grFaMItWOSr561oY4sj56Qbr6OBhRu5w02lCMaxtJm8EDMtYe
bp5naW0gwNeON1S0rHm9ewjVx7sjA62E/qlVgPOlwJa5P0BDVk2VxtHVNBCP6Yf6
UNAkKug1mWnFG4CqjJTkNcTCA9/TbmscHwHNZE3OSwv3KAT/lhxDyAdhqWoCJn7K
sLU3JrbHHTwYUcyMKy1FK7OSVPl8y14mR1f/gW6XMq2bnk0d6B/8eA05tTTeBZNn
P+7a98rLWKLVt6udVF0JaIsg7c+nJz0hTS7wiFlOiE13iii26QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbQ04a+X8Ji24iOxlpBnhFlFyunMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJmZWYyNmMtOWRjMS0z
MTY0LWI4ZTMtNzRiOGM0M2ViMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABuhFjNUbUTup38MiaF+I9+SXcC/uyq5f+Ht2c71zHN7RAm58mTVfu5B
63WZvuVhijWdFZ2iY58kGZ5uP5s5R5HH+jNutHdkwzGbCwJSVl97yHlbAVgoXfJI
GFjCSm1iOuXo0zAMwVOvtLB5fZoDqpS76U0jJWj6/S5IZatz7PYOVX68NjQJ2JAk
yMIVvVXn5S6jCuEB2xO5m/j+auBRJnSCE9paYJZC61gjVWyI2LI3VQDZ6EE3RKOq
ZuVXTwuzD1SHNz9RHL3nAJpDGtAEHZs8GYWXJ3WmCxTG4/6073owB5Lxau+jCIwm
xpoPiur4TNIveOjJwZXMtfPpRcv8K9U=
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:20 2025 by rpki-client