Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fd6bc71-c754-3d0d-9333-9280e5b663a6.roa
File:                     7fd6bc71-c754-3d0d-9333-9280e5b663a6.roa (raw, json)
Hash identifier:          RQtffZfhRUVOluWJ7lQn+2/zEHhNgD0UqQi18p9V62I=
Subject key identifier:   9A:80:A2:02:27:A6:D0:50:83:56:2E:F6:1E:F1:71:83:D8:33:50:BB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E210F71A8C935BEBF2BE83C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fd6bc71-c754-3d0d-9333-9280e5b663a6.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     36183
IP address blocks:        172.225.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:71:a8:c9:35:be:bf:2b:e8:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=ca2c85ef-567d-4f1d-802e-06bc118164ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e7:b9:b3:36:59:4a:35:8f:e7:3a:19:30:9f:
                    b0:6e:1b:e1:69:db:41:9d:53:83:e0:5e:c2:e6:18:
                    08:bb:8b:64:4a:cc:84:2b:45:5c:bd:4d:79:b6:85:
                    71:d0:70:c0:f7:e2:ce:04:8a:bc:fd:3f:d8:f9:6e:
                    9e:7a:fb:4f:27:81:98:30:61:52:1c:dc:95:a8:13:
                    d3:4f:2a:15:d5:d5:57:60:35:b1:60:46:17:7f:d0:
                    75:fa:19:6a:5d:94:b5:30:9a:7b:db:3a:0f:f6:7e:
                    8e:df:0f:ed:88:f5:ff:6c:d3:9b:61:c4:bb:eb:f6:
                    e3:31:7f:83:f2:1f:36:15:7d:98:d0:a0:09:0b:85:
                    5b:39:68:f0:6d:1e:ae:e1:11:3a:ad:e1:78:76:d5:
                    94:b8:df:b9:d9:eb:0e:b4:e3:c2:0e:4d:c0:8e:82:
                    1b:ac:da:42:48:ef:6a:91:22:fd:5e:86:66:d4:94:
                    ab:5d:e6:db:36:59:cb:bb:83:23:96:91:17:0d:44:
                    9e:bd:61:17:be:e3:a7:6f:05:86:58:a6:87:6e:dc:
                    dd:75:ed:73:55:1b:48:01:dc:38:18:9f:ab:90:6d:
                    62:d1:fb:de:9f:b2:95:c9:98:aa:7c:a5:c5:0e:4c:
                    3f:87:f4:45:7d:07:ff:0e:e2:fa:db:7b:72:de:40:
                    f8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:80:A2:02:27:A6:D0:50:83:56:2E:F6:1E:F1:71:83:D8:33:50:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fd6bc71-c754-3d0d-9333-9280e5b663a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:5e:db:99:d2:b4:df:d4:b2:7a:ab:70:a1:ef:45:23:c2:e3:
         7e:9b:a3:e5:5e:3f:fc:36:09:92:33:d0:34:3b:4f:97:0f:0e:
         9d:b7:1b:41:b5:17:9c:0a:f1:da:98:d3:86:80:74:6e:f3:dd:
         32:8c:39:ca:3d:03:69:fd:f9:48:55:9d:ed:9d:9f:b3:82:56:
         f7:c7:c3:16:16:9f:b6:85:c4:b0:4d:ed:b7:04:94:b3:a1:89:
         6b:4e:fd:28:56:a8:b2:4e:7b:54:63:91:04:a7:23:ff:f6:cb:
         73:a7:30:b7:b3:a2:cb:79:bf:3b:fb:8f:15:66:c1:ed:21:ff:
         bc:c8:4a:8b:af:ea:c3:a5:8c:1e:9e:b2:01:f7:e2:23:21:86:
         a3:3b:f7:08:54:01:6c:f6:f4:18:81:f4:1d:41:21:67:db:91:
         1d:e7:6f:40:37:b2:62:fe:b8:ae:59:9a:7b:0e:15:8d:72:0e:
         03:ed:47:d3:d8:dd:4b:fc:cd:cb:80:6a:98:c6:bd:7e:56:32:
         e8:67:5a:1b:ef:9f:42:0e:1c:aa:96:ba:24:dc:af:07:b4:81:
         46:f3:75:c7:62:d0:d7:6b:66:52:c3:20:17:db:70:d0:09:4f:
         f7:f7:39:dd:47:d8:15:b9:ba:b0:e7:d2:26:9e:76:b5:74:7a:
         e3:76:86:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:39:52 2026 by rpki-client