Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7444bf38-3dda-388c-b825-9312daf39f7e.roa
File:                     7444bf38-3dda-388c-b825-9312daf39f7e.roa (raw, json)
Hash identifier:          mRymJ2guI6B/we/rV01NBye6bmnl+mnmRfLNMopgR9E=
Subject key identifier:   6F:81:65:B3:84:24:4B:14:48:3C:C7:94:6B:53:20:D8:4D:7B:30:EC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E210FD96AA8072098FBA06500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7444bf38-3dda-388c-b825-9312daf39f7e.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     36183
IP address blocks:        172.225.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:d9:6a:a8:07:20:98:fb:a0:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=692ac97d-21b1-492c-9ccc-08d71df2edfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:7c:37:13:81:06:1f:74:96:ef:4c:6a:7a:
                    bc:6e:b3:61:32:f4:f7:04:42:01:1e:89:66:40:a9:
                    2d:51:79:e7:85:82:96:07:50:39:c1:15:83:80:27:
                    df:60:a3:7c:fe:51:df:dd:de:67:b6:81:22:a4:77:
                    4b:40:5c:d7:d7:ae:29:0c:70:44:0d:f4:6a:d5:b7:
                    4b:3a:74:50:90:d1:a0:aa:96:63:18:e1:38:81:2f:
                    2c:44:d0:86:44:b8:a7:d0:78:c2:16:eb:3c:51:05:
                    03:c2:6c:2e:d7:04:7c:c1:e1:ca:a2:0a:1b:89:2e:
                    40:22:c4:10:f0:0e:74:b5:a3:f5:d5:2a:68:de:26:
                    ec:99:7f:81:58:c3:d7:1f:56:65:73:6d:eb:d0:98:
                    aa:ca:12:39:f7:c5:85:04:87:88:b4:10:e9:a4:24:
                    df:a3:1d:8e:b5:18:34:19:2f:9b:1f:79:2b:2f:8f:
                    ad:33:27:45:82:2f:d6:fd:1f:54:2f:58:e4:31:39:
                    5e:7e:ea:de:80:61:2e:fc:e1:d6:73:e4:ba:71:c5:
                    4a:45:5f:eb:1f:55:4c:a7:f6:1a:45:c9:4c:bf:12:
                    5c:7e:81:d5:e3:62:05:95:c2:70:de:f4:ab:cd:d6:
                    12:55:70:ff:16:b7:98:a3:5d:a0:32:78:30:6a:77:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:81:65:B3:84:24:4B:14:48:3C:C7:94:6B:53:20:D8:4D:7B:30:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7444bf38-3dda-388c-b825-9312daf39f7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:cd:18:9e:86:08:1f:20:23:2e:27:ed:46:62:87:76:19:cf:
         21:b3:36:37:4a:d5:ab:ba:ae:c5:c0:39:0b:a6:35:f8:cc:57:
         02:bb:b9:30:64:1a:8d:11:00:18:fa:a8:08:67:7b:46:86:50:
         aa:a1:98:b3:30:89:39:39:a0:8e:c6:dc:27:b4:72:7d:60:b3:
         8f:41:91:15:a9:36:84:6f:36:48:55:29:76:db:02:72:55:25:
         79:70:0f:bb:28:1a:8f:b5:4c:23:11:e0:02:73:49:9d:97:d3:
         3d:1d:92:08:f3:83:3a:98:31:cf:45:51:8c:bc:86:3c:20:bc:
         2e:49:47:b2:44:f1:71:dc:fc:50:76:75:bb:37:c5:e5:ff:28:
         10:f7:0c:3b:1b:d0:5c:e1:c2:3a:9f:ad:5f:cc:93:48:98:ad:
         06:ee:00:56:56:90:45:47:93:41:a6:b6:85:dd:ab:f5:37:b8:
         8b:a3:5f:09:2d:e4:23:d8:8d:8e:ee:e2:06:48:db:1a:25:e4:
         59:db:a4:6e:43:4d:e3:fc:98:9d:5d:dd:d8:17:04:e5:d2:a2:
         89:cc:e3:3f:ed:9c:b9:30:a3:4e:56:64:15:6a:2e:a0:08:ba:
         f9:27:85:70:3e:db:c9:e5:9e:99:51:a2:52:16:06:a2:d9:37:
         a9:42:d3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:58:03 2026 by rpki-client