Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76235146-189c-3d53-b800-09a297f7ec20.roa
File:                     76235146-189c-3d53-b800-09a297f7ec20.roa (raw, json)
Hash identifier:          mCHB2zUs9qJShpYPF31NE/KvV8CfFKCkoCrjH70esis=
Subject key identifier:   AB:B0:04:85:D4:A9:26:20:61:13:ED:F8:EE:37:D0:E6:F3:D3:67:A6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AADF13A7CBABB1FAC07C3E000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76235146-189c-3d53-b800-09a297f7ec20.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     63949
IP address blocks:        172.235.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:3a:7c:ba:bb:1f:ac:07:c3:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=3ac9b93e-a127-42e0-bdb1-43fb142968a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:ba:0a:80:ad:b6:49:57:5d:2f:c1:eb:af:
                    8e:3b:80:fd:32:00:ef:9c:d7:23:31:0f:4e:53:c9:
                    9e:40:35:23:f7:d8:b1:87:c4:0a:74:f2:37:27:b7:
                    bc:ee:76:6e:fa:8c:79:ed:64:08:80:ee:63:6a:87:
                    f8:ef:e8:2a:f4:9a:be:e2:26:77:d6:94:58:f1:42:
                    38:67:23:c3:e7:f6:d3:4a:64:e6:fb:0c:96:59:21:
                    5f:b0:e9:de:15:5e:90:e9:64:ab:d2:3d:7b:be:d9:
                    bd:8c:93:c4:f5:87:52:15:82:6b:c0:ed:2c:56:50:
                    35:1c:5b:4d:95:53:69:69:cc:c0:36:88:34:11:45:
                    3c:ac:95:e9:88:63:bc:42:63:f6:03:10:4b:5f:85:
                    ed:11:f7:39:25:e4:c1:d9:dd:2c:f1:50:98:a8:82:
                    a5:1b:66:bf:42:bd:fc:b0:b8:b5:e0:f3:35:fa:57:
                    f4:f8:c3:16:c0:4b:81:88:8b:71:2c:f4:dd:08:9a:
                    3f:01:f8:03:0d:9b:83:9d:f5:d3:fa:bf:fd:f0:cc:
                    ee:bf:56:ee:e1:59:d7:d5:72:83:9c:41:17:74:d5:
                    db:2f:50:6d:c7:62:c3:97:36:27:d5:3d:38:84:41:
                    08:b9:be:9e:62:75:49:84:78:d2:26:1f:21:4f:6f:
                    45:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B0:04:85:D4:A9:26:20:61:13:ED:F8:EE:37:D0:E6:F3:D3:67:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76235146-189c-3d53-b800-09a297f7ec20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.235.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:63:27:41:6f:31:33:97:1b:5e:2c:1a:87:dd:11:17:4e:c2:
         57:44:de:1d:16:e7:46:b3:de:3f:8b:70:e6:dc:90:6c:3e:7b:
         60:81:fd:b4:c1:17:d9:64:63:2e:ac:f8:d9:8b:99:bf:d6:64:
         71:0c:0c:4a:6b:94:13:92:a2:a9:68:a3:e9:06:bb:82:ef:2c:
         7c:09:44:57:c3:59:ee:85:ca:6d:c0:8b:6f:49:4d:f4:a3:06:
         0c:03:52:b0:b1:ee:52:ae:5f:bf:c4:a2:b0:eb:0c:95:f1:a4:
         b5:a5:9b:9e:97:f4:b8:aa:04:08:92:21:0f:87:d7:07:30:34:
         4e:02:a5:2d:4c:3e:f5:7e:75:be:85:9f:76:26:0e:b1:26:e4:
         b9:2f:c1:7b:ea:8d:62:33:2b:f0:0b:d7:3e:8d:8e:f7:2c:c8:
         0f:40:99:b4:6b:66:91:bb:d2:29:73:4d:fb:02:16:dc:49:90:
         b6:55:e7:d3:ce:8b:13:68:b6:04:28:cc:4a:be:16:04:e4:89:
         0a:f7:2b:f9:4c:59:d5:16:fe:03:4d:b1:b1:16:bc:1c:d3:8e:
         52:38:e5:c7:d1:d3:8d:da:3d:f9:af:b9:fd:7e:3c:fd:95:8b:
         83:71:b1:3d:b8:a4:dc:1d:ca:6b:8e:45:91:31:f5:2c:78:81:
         e0:f2:c3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:15 2025 by rpki-client