Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4dfc590b-7e12-36c0-afdc-c885fca6f4cf.roa
File:                     4dfc590b-7e12-36c0-afdc-c885fca6f4cf.roa (raw, json)
Hash identifier:          daRbz6FPio6wcL+/ZnUQHc8GtCqhgqC3W8tCZtD4xSc=
Subject key identifier:   0C:FE:EE:FF:F0:D2:25:85:BB:B7:13:85:24:69:11:4E:57:D7:CF:B1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E1E4468885F2FC3EE20AFA530
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4dfc590b-7e12-36c0-afdc-c885fca6f4cf.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     36183
IP address blocks:        172.225.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:68:88:5f:2f:c3:ee:20:af:a5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=ca1d8c94-66c3-49c0-bfba-381bd42ecd0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:61:86:55:4f:44:06:62:b1:85:c2:eb:84:04:
                    42:03:c2:34:f6:18:de:d3:05:11:a1:4a:e4:6f:2e:
                    91:08:1c:5b:09:3a:42:33:50:d4:4b:a1:d0:6e:25:
                    9e:db:7d:e7:66:c4:a9:d6:9e:7b:1c:db:88:e3:49:
                    03:ea:af:9d:32:23:8d:af:25:11:e6:36:17:fd:fb:
                    73:f9:ee:78:af:65:ce:a0:80:94:7b:d9:6d:d6:0e:
                    fe:cf:ce:58:d1:13:69:b0:d7:48:b3:57:27:31:a1:
                    f5:66:93:9a:f8:1c:c5:71:bf:f4:49:4f:19:13:8f:
                    1b:b7:bb:89:a1:ab:a8:7b:21:12:2c:f5:e6:48:cd:
                    fe:e3:5e:58:3d:40:48:68:c0:a8:a9:32:7c:bb:67:
                    cb:98:aa:4a:ac:3d:fb:af:31:ef:cc:33:ad:0d:0f:
                    75:f2:31:b8:1a:15:dd:9d:6a:68:51:9f:2f:0e:36:
                    7b:cf:6d:c6:f4:d5:1f:e5:d3:4c:03:45:67:fc:cc:
                    7d:b9:49:f9:f0:18:5f:e2:66:bc:08:04:05:88:c9:
                    b7:6d:3a:28:0c:fe:2e:2a:c5:1e:10:bc:4b:08:1c:
                    dc:95:4d:f3:69:aa:22:f8:33:8f:ac:23:b7:3b:5c:
                    50:15:f6:33:7c:68:7f:0b:29:7c:49:11:5c:da:73:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FE:EE:FF:F0:D2:25:85:BB:B7:13:85:24:69:11:4E:57:D7:CF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4dfc590b-7e12-36c0-afdc-c885fca6f4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:80:70:a2:fa:9d:54:32:33:89:93:67:4b:c7:93:db:8c:44:
         d0:67:f2:52:ed:e2:6d:d8:91:7f:e7:cb:d2:0e:bc:83:55:fb:
         42:b9:8c:bb:83:04:3c:c9:66:07:39:3c:5f:57:4a:22:ea:1f:
         2d:9e:4b:2b:3e:ac:3c:c5:81:dd:a6:33:c5:ce:8b:98:de:ec:
         eb:ff:3c:d8:8e:27:13:99:a0:30:16:a3:7b:4e:84:e0:7f:d3:
         9d:d4:2e:3f:b6:76:b8:4d:24:cf:22:87:1f:ac:d6:de:da:7c:
         f8:74:22:9a:0d:11:9a:11:57:24:63:b5:b5:d2:02:3c:ea:bd:
         4d:6f:15:f8:85:06:71:f8:c4:0a:05:b1:7d:42:13:db:ad:a5:
         19:99:3c:1c:73:55:e5:19:de:ca:f7:2a:e5:c0:8f:75:41:73:
         8e:c5:94:c5:9b:01:d0:39:1e:ba:a2:c1:47:ea:d4:c7:91:bb:
         60:37:9c:4f:62:10:0e:13:a7:a0:9c:79:01:38:e2:36:34:30:
         73:e5:bf:68:0a:d0:4b:cf:eb:fe:8f:29:ef:24:98:ec:1a:5a:
         09:c4:95:2f:c9:d0:2f:f1:bf:eb:3c:bc:12:01:34:7c:40:b7:
         4b:31:ec:76:cd:6f:38:e4:1c:3f:6d:09:7e:b7:43:cf:5b:b9:
         d9:8a:34:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:27:33 2026 by rpki-client