Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c247b0a-4d0b-3b78-a291-2f4f88037390.roa
File:                     3c247b0a-4d0b-3b78-a291-2f4f88037390.roa (raw, json)
Hash identifier:          MigriwkP6sGhGwpVlzDtaiA0QJkreLRIE59DPXfUofA=
Subject key identifier:   57:41:AA:38:91:29:66:CA:C3:4C:C3:3E:3F:C5:E2:E9:AA:49:0C:D1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AA1621AAE577D250E0D169430
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c247b0a-4d0b-3b78-a291-2f4f88037390.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     36183
IP address blocks:        172.225.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:62:1a:ae:57:7d:25:0e:0d:16:94:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=998a49c5-2892-4d15-9bf4-f0b5ac162022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:33:22:b1:b6:d2:f4:ff:9b:c1:02:4d:7e:27:
                    56:10:11:77:0c:c7:41:eb:72:92:b5:d4:05:ae:19:
                    b1:03:1c:c4:af:05:9b:b4:e8:fe:ac:0f:11:f5:73:
                    d0:49:7a:d7:1b:d7:e0:0f:36:0a:d8:a5:51:6b:96:
                    5a:8b:c2:6e:f2:26:3f:13:50:12:da:a4:6e:0d:9c:
                    99:8e:a6:b6:08:36:31:09:17:3f:2d:36:10:e4:e5:
                    9c:a4:a6:a7:05:5c:55:9e:a3:8d:2d:32:36:5f:ae:
                    83:87:51:e7:05:b0:d8:ea:dc:5f:63:65:e4:17:51:
                    38:42:d6:0d:9a:b9:cb:7f:94:07:78:c6:60:59:87:
                    9b:2f:0d:ad:b9:11:0d:e9:69:3e:b6:44:4e:1b:40:
                    0b:29:4e:c9:a0:d1:b3:9c:4c:cc:bd:a7:cf:60:e6:
                    de:e9:1d:3b:ba:bc:9d:82:3e:55:ae:76:2c:6a:7f:
                    4b:db:11:01:1e:ee:13:36:92:ce:af:07:f4:14:af:
                    42:d8:f4:2b:0e:d1:dc:7a:fd:b0:16:43:12:8e:13:
                    44:fc:cd:9c:b5:82:88:1d:de:e3:63:10:3a:99:a9:
                    61:f0:fa:3a:c3:39:c4:59:78:19:71:ef:7c:21:5d:
                    db:6b:c4:84:6a:17:93:03:82:7b:57:6d:4c:8e:51:
                    93:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:41:AA:38:91:29:66:CA:C3:4C:C3:3E:3F:C5:E2:E9:AA:49:0C:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c247b0a-4d0b-3b78-a291-2f4f88037390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:af:ac:c1:20:69:a0:02:9d:64:aa:8d:ff:77:ef:09:f8:17:
         48:8d:60:69:63:48:3e:0c:1f:0a:de:88:53:e2:fd:40:3d:62:
         7a:d2:4b:01:aa:8c:fe:fa:77:b9:43:cb:6e:b7:42:65:5e:2a:
         8b:25:06:0f:b6:40:ce:b6:4a:5e:f4:f1:13:f5:ee:63:20:d1:
         db:c5:71:6f:86:de:10:d1:17:e5:3c:9f:62:9b:d2:ac:6b:cf:
         32:b3:ea:58:29:5d:95:35:68:71:6d:c4:0d:d1:25:d3:ae:ba:
         d8:be:a4:84:f8:cf:33:10:32:c4:13:43:58:42:f9:57:b0:17:
         c4:08:d5:e3:0b:8c:50:35:6b:7a:87:a2:88:5f:6a:e2:36:37:
         3f:e8:b2:92:d8:c5:f6:74:4b:d7:68:ed:ef:65:44:df:45:99:
         e8:66:73:7a:01:ef:cc:ef:ec:1c:2e:d3:83:60:67:a0:26:b4:
         af:4b:8e:93:0b:6f:3f:61:02:7a:5d:8b:cc:46:d2:24:79:bf:
         2f:7b:63:4c:20:e8:a5:21:07:5f:3c:a5:30:53:42:1b:ab:12:
         87:76:6c:b3:3c:75:4a:f7:8d:15:84:60:fb:55:91:86:a5:45:
         80:84:82:46:bc:24:c9:a9:e0:e1:2c:84:b6:85:f3:4f:a6:5a:
         95:ae:e6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:49:20 2025 by rpki-client