Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a251165-6582-3af5-87c4-9c70585aa198.roa
File:                     4a251165-6582-3af5-87c4-9c70585aa198.roa (raw, json)
Hash identifier:          x5S0AXKHPwmhsQe7k5zigpK2ljwZoaXVLm2Nv+IbGAw=
Subject key identifier:   B2:30:3A:41:91:AD:A5:F8:2B:90:D5:F5:23:B5:45:4C:1E:5D:47:23
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AADF137031FDCE5DB6B8CD9C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a251165-6582-3af5-87c4-9c70585aa198.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     36183
IP address blocks:        172.226.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:37:03:1f:dc:e5:db:6b:8c:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=1d602a83-6622-4a77-b6d8-fd19d7791b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:6e:f5:5b:a8:91:c1:0c:47:72:ad:de:5f:
                    b5:a1:a2:c3:df:05:4f:7c:53:c8:2f:d9:51:d7:54:
                    05:a8:34:2f:a1:9b:8e:a2:9c:8e:bc:07:c9:4f:be:
                    1c:85:60:96:32:65:ce:6e:a1:fc:10:4e:06:69:f2:
                    b3:29:37:7b:9c:24:f8:10:26:4a:65:52:a4:32:5d:
                    32:6c:50:61:f8:b5:87:c8:73:7b:db:f9:b3:dc:0c:
                    ec:18:ba:da:23:c5:d7:ff:b7:86:07:d0:aa:ff:6c:
                    9d:ed:88:f0:f8:6a:45:a6:ad:8d:3d:33:89:28:bd:
                    da:60:7b:81:da:2a:fc:49:ac:5e:4f:d7:47:83:7d:
                    20:37:7e:a8:36:f1:02:83:bc:84:dc:13:13:92:b7:
                    ad:77:2f:4f:68:61:58:b6:d4:ae:dc:f3:ce:55:cc:
                    71:52:25:7d:e9:b8:3b:0e:a7:55:64:e9:50:d6:d7:
                    9d:e4:d2:7c:ca:f9:10:57:d5:97:45:8f:58:da:8b:
                    8d:cc:f4:0f:35:26:20:34:1c:f6:e6:e0:b7:16:6d:
                    1c:15:fc:f1:87:e1:e3:ed:a8:76:e6:20:ce:ae:1e:
                    f8:e5:e7:c4:59:46:36:ae:8a:ee:ff:d5:0d:49:35:
                    d8:7a:59:45:af:70:f8:bb:61:05:e2:31:3a:ff:54:
                    ac:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:30:3A:41:91:AD:A5:F8:2B:90:D5:F5:23:B5:45:4C:1E:5D:47:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a251165-6582-3af5-87c4-9c70585aa198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c7:56:47:c0:c7:ff:30:cb:93:83:d7:c0:2a:b0:89:d0:3a:
         85:06:0c:73:6e:70:fc:50:4c:10:f4:13:e4:e1:b8:1b:f4:d7:
         b2:a8:88:a1:d2:39:57:5a:85:84:ab:cc:5c:71:ab:25:33:7d:
         9c:76:8e:5e:0c:0a:ff:9c:ea:3e:7b:c3:5d:d7:17:b6:04:f1:
         c0:7e:05:4e:a3:5a:2c:b9:59:ef:d2:df:da:30:5d:6d:59:7e:
         df:44:be:46:50:56:a9:5f:b0:fc:37:02:ad:3e:a1:35:d0:a3:
         52:c8:e3:ff:92:18:66:cf:f4:38:f5:81:ca:49:74:29:db:a5:
         fb:1e:04:31:5a:18:46:82:84:dc:4e:70:0d:be:0b:75:4b:00:
         44:94:01:20:63:d4:f2:7a:5c:5d:34:59:6e:67:35:0a:3a:d3:
         17:f1:07:69:1b:9d:7d:6f:e6:3f:83:e8:6c:7a:0b:c0:8d:20:
         c7:fe:be:d1:4e:8d:7b:74:dd:f2:58:93:d3:67:73:ce:7a:d0:
         6d:b1:15:a4:e3:e1:0d:54:ff:15:1c:d1:f7:be:58:f4:29:c8:
         10:8d:72:b3:de:59:a0:f1:9c:92:9a:e8:7b:08:ae:2a:de:54:
         76:8a:f0:6a:84:42:90:af:36:01:38:a8:60:0d:66:4d:aa:be:
         de:ec:be:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:38 2025 by rpki-client