Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c247b0a-4d0b-3b78-a291-2f4f88037390.roa
File:                     3c247b0a-4d0b-3b78-a291-2f4f88037390.roa (raw, json)
Hash identifier:          jMoHBsumpqjMsF6kLQaAXh5tA9SFpWviRQSUCtINkTw=
Subject key identifier:   54:2B:C8:98:8A:E8:F2:72:22:D9:3B:E8:BF:2D:E2:90:0F:B9:D0:A3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E210FD910AF60952202800800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c247b0a-4d0b-3b78-a291-2f4f88037390.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     36183
IP address blocks:        172.225.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:d9:10:af:60:95:22:02:80:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=08b3945b-55fc-4903-abad-0e994e9ce7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:64:30:97:d1:ba:60:30:f2:68:c1:8a:10:
                    44:67:3a:2a:de:72:ec:dc:2e:f5:47:92:c7:56:99:
                    f2:db:9a:3a:b8:aa:4d:44:2d:85:7b:26:27:56:e8:
                    ba:83:2e:f9:e5:36:2c:9c:a8:fd:ef:e4:9d:10:ff:
                    43:7e:69:e1:ea:71:5c:e2:2f:3e:4b:d0:26:54:c4:
                    e3:02:29:96:20:14:70:0b:5b:1e:b6:02:37:53:df:
                    0b:27:ec:94:0b:e6:75:05:46:ba:e7:e7:e0:43:a9:
                    cf:c5:f1:b5:a0:ff:71:b0:59:9d:85:31:f7:34:8d:
                    c3:b7:bc:5d:c5:4a:d6:55:03:d3:74:be:7b:26:dc:
                    bf:22:b1:ce:ee:58:7e:cd:20:c9:7f:3d:e3:b9:8d:
                    76:0c:46:ad:42:ae:c8:6e:09:c0:c8:f2:cf:05:1c:
                    28:34:1a:8c:e0:31:6a:1a:e6:16:cf:59:fc:5f:68:
                    fd:cf:b8:f5:f3:83:ce:13:e6:4e:ad:63:90:6d:ed:
                    78:6b:20:17:6c:ea:18:db:dd:2e:be:58:5d:90:66:
                    0a:4e:4f:18:13:cf:0a:b7:14:23:af:af:a7:76:f4:
                    99:fa:6f:0e:81:d2:d2:f9:20:ab:ce:cb:b3:99:6f:
                    f7:07:47:66:6f:ef:68:7a:23:3c:5e:4e:04:5e:e9:
                    27:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2B:C8:98:8A:E8:F2:72:22:D9:3B:E8:BF:2D:E2:90:0F:B9:D0:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c247b0a-4d0b-3b78-a291-2f4f88037390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:57:da:e5:78:35:40:1b:8a:65:4c:d2:d4:fe:a8:04:f2:f9:
         9f:77:09:6e:47:00:da:7d:16:e8:12:ab:e2:06:05:f8:09:22:
         75:da:56:47:01:07:ca:05:f3:65:46:a4:92:42:3d:da:ef:1d:
         36:77:02:51:2e:ec:ca:0e:6b:a6:b7:81:87:64:d4:4c:42:90:
         ec:d0:cb:25:09:9e:88:a3:39:14:f7:c0:f7:9f:1e:e2:13:ff:
         41:3d:b3:a8:de:7b:1a:5e:72:d1:0e:19:f9:62:8f:09:d9:83:
         b8:39:a4:3e:16:cb:7d:a5:4a:b8:1b:f9:8c:46:f4:d3:b3:be:
         f8:76:d4:56:23:85:97:ca:8d:ec:7b:5b:7c:24:c3:6d:72:54:
         01:3d:dd:2d:37:23:70:a2:9a:43:bf:ca:b0:eb:5e:b5:d3:cd:
         80:d1:6e:13:24:6a:b7:6f:62:95:24:be:e7:14:cc:21:8f:00:
         a7:c6:ec:6e:31:31:fd:fa:c4:e2:41:21:98:5a:34:60:d0:4c:
         2c:94:ad:1a:8c:d5:dd:12:1e:6a:48:fe:21:df:bd:7f:26:d9:
         55:27:1c:19:f1:78:57:9b:17:4a:d9:be:1f:f5:db:b8:e2:0e:
         8d:d1:3b:3f:47:2c:8c:1d:b8:e5:1c:03:e3:07:16:f1:e9:10:
         1a:2e:57:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:19:34 2026 by rpki-client