Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43612791-7d6b-3e44-99b1-411c6d54b12e.roa
File:                     43612791-7d6b-3e44-99b1-411c6d54b12e.roa (raw, json)
Hash identifier:          t4/+JYtZI40FaU2D4vFEfRs5QmKkOvcM0CWojivTohw=
Subject key identifier:   36:33:6B:E6:27:71:35:A7:9B:ED:EF:92:E1:20:B8:F9:3E:3F:85:12
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E210F71F3A08F69A71FD5C380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43612791-7d6b-3e44-99b1-411c6d54b12e.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     36183
IP address blocks:        172.225.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:71:f3:a0:8f:69:a7:1f:d5:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=8094cd4b-aba3-47b4-9075-1d93c54fce74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:73:6d:7c:4f:80:47:e8:83:db:7b:48:26:
                    27:37:80:cb:9c:b5:8b:62:bc:a3:5d:22:e4:9c:6c:
                    4a:c7:1f:66:a7:73:88:64:73:15:81:af:76:84:69:
                    70:ad:19:f1:41:b9:c0:d9:83:d8:34:8a:d7:30:54:
                    41:98:19:56:de:6a:8a:ae:a0:32:63:f1:6f:e0:4b:
                    61:92:ba:f5:81:ec:83:de:fd:56:65:91:3e:3a:c6:
                    0c:22:65:df:1c:7a:1a:be:06:41:dd:f9:f1:01:0a:
                    e4:70:45:47:c7:af:6c:06:77:76:06:0b:b6:2c:40:
                    8e:6a:81:fc:66:5d:e4:54:3b:22:b5:5a:c1:7e:c1:
                    e2:f1:2d:87:c8:81:b9:cd:04:9d:93:99:62:42:81:
                    17:0a:59:72:e7:7e:a3:7f:fd:9f:e6:7a:68:d8:c9:
                    fa:54:dc:60:3d:bd:16:36:e3:36:e6:15:a1:9b:67:
                    14:27:be:ce:2c:9c:35:fd:a6:64:10:a7:ec:74:07:
                    5d:f8:28:22:67:38:e2:9f:01:de:c6:8b:09:f9:7e:
                    4d:f9:af:ba:28:18:ba:36:04:e1:9a:65:c6:8b:39:
                    8f:9e:2e:11:61:b2:5d:13:84:ff:04:d2:4e:c3:0f:
                    48:12:e8:c4:d7:9a:30:d6:9e:f8:d7:e8:a4:76:3f:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:33:6B:E6:27:71:35:A7:9B:ED:EF:92:E1:20:B8:F9:3E:3F:85:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43612791-7d6b-3e44-99b1-411c6d54b12e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ab:97:58:2f:96:c3:79:8b:62:35:44:e6:50:56:0a:2b:fb:
         23:49:b1:51:67:0e:f6:8c:89:98:e3:12:83:dd:bd:55:4d:11:
         7c:fc:10:8e:7e:32:5a:da:b4:50:f8:4e:c1:da:11:9f:fe:35:
         8b:94:29:1c:cd:8c:79:2a:02:a9:34:18:78:e2:2b:e7:a8:9b:
         31:f9:ba:a7:be:b7:03:49:bb:c7:a4:01:4b:77:26:78:f3:df:
         9e:06:0e:f8:d1:16:99:8e:d2:fc:87:72:75:4f:48:97:5f:ba:
         84:1b:47:e2:12:f7:5f:57:00:54:7d:05:e8:2b:73:e6:b3:fe:
         f8:a6:2a:f7:fb:9e:86:1b:03:84:42:34:c2:84:39:c6:38:0a:
         23:00:08:ef:ad:08:55:3b:b5:c8:24:b8:0e:af:de:54:34:18:
         75:bc:20:17:97:ab:d9:3d:10:ab:e5:67:fe:03:6e:7c:32:4f:
         ee:b4:96:89:3a:9d:f7:22:ff:7a:73:b5:77:63:c8:95:d7:32:
         d0:e5:1c:0c:04:29:93:6d:0b:bf:10:7c:02:a9:7d:df:6c:53:
         7a:78:a2:8d:2b:48:77:9d:33:d9:b2:ed:34:26:23:a1:bb:d9:
         7e:39:c4:d9:8d:97:74:a1:76:11:1e:06:33:3d:f6:11:d0:aa:
         6a:13:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:59:49 2026 by rpki-client