Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/875cf69a-9afb-3a4c-b332-8f215e9b1665.roa
File:                     875cf69a-9afb-3a4c-b332-8f215e9b1665.roa (raw, json)
Hash identifier:          hd2ujAaFj31J4KwPD+1Sy80JJEICouEWhq+l/ZxEFj0=
Subject key identifier:   25:04:99:45:8F:42:83:22:63:44:91:8A:31:1F:B0:CC:B2:E5:70:7E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A9D30F4845490058A9630F380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/875cf69a-9afb-3a4c-b332-8f215e9b1665.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     36183
IP address blocks:        172.225.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:f4:84:54:90:05:8a:96:30:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=269056da-0ff6-4964-bd9d-1dc2812dd4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8f:64:59:b8:0e:a3:f9:94:c1:58:ae:a2:2d:
                    14:f7:86:b2:15:cd:39:8d:ab:e5:f1:f9:c4:c3:b2:
                    8f:01:9a:90:d9:b7:54:37:bb:a1:f6:66:d1:62:10:
                    da:3b:60:42:72:6a:d1:50:00:53:27:ae:e2:0b:d5:
                    bc:d1:62:b1:2c:48:68:1a:10:17:d9:20:1a:6f:b0:
                    53:04:4c:8b:d7:8c:93:c8:35:89:93:56:33:76:6a:
                    1f:01:9f:32:a3:5c:e2:c2:d0:5f:f3:8f:36:f3:6f:
                    19:9c:fa:da:d0:a9:4d:bb:8d:88:5c:9b:5d:87:52:
                    82:ba:b3:74:57:e4:c6:65:08:d6:8a:cf:73:01:ce:
                    d1:80:02:d8:e8:13:ce:f0:3e:af:eb:77:d5:01:88:
                    cf:5a:5b:94:23:b9:15:40:8d:b8:85:f2:81:3a:f1:
                    21:db:17:35:43:e2:8d:f8:68:0e:35:24:fe:14:0b:
                    56:35:6b:35:33:80:75:1b:c5:fe:0b:a3:90:b9:3c:
                    cb:8c:fe:08:62:1f:29:15:0e:08:06:33:66:4b:81:
                    f1:15:26:db:44:09:ec:c9:64:0b:9a:e4:74:f3:f3:
                    28:3f:3a:b7:cb:cb:8b:1e:1d:4c:0e:29:7a:92:12:
                    82:22:ce:44:de:b6:2b:04:ec:6e:e6:bb:3d:f2:36:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:04:99:45:8F:42:83:22:63:44:91:8A:31:1F:B0:CC:B2:E5:70:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/875cf69a-9afb-3a4c-b332-8f215e9b1665.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d7:cf:b1:40:8b:52:91:7f:01:8f:19:67:99:cb:05:47:1f:
         f7:d1:e4:d1:9c:9d:a6:5b:75:00:01:16:cf:44:e3:bb:7a:68:
         c4:13:38:93:89:d7:f4:e0:7a:cf:68:e5:da:59:99:9b:f1:8a:
         a8:34:2a:d6:5e:b6:9a:35:f8:53:a3:8d:22:c1:f9:47:d9:0a:
         89:3c:a4:4b:7a:fb:39:ae:d8:3b:d8:67:49:0a:73:cc:c2:ba:
         cc:ed:e5:ca:c6:32:d4:e5:0a:46:fe:77:55:26:d7:c9:3d:52:
         96:d4:06:33:af:d8:4f:d3:c9:93:fc:0f:2a:c5:6c:d6:45:19:
         fc:6b:1c:d4:df:5d:8b:32:32:a1:a3:e4:53:f3:d1:f0:2f:23:
         89:08:b4:a7:a5:68:9f:dc:bd:53:76:f4:16:4d:af:86:44:06:
         b3:b3:2f:6a:b4:15:21:25:06:03:5f:68:b2:4c:9a:8b:23:a9:
         d0:bb:03:88:bd:cf:ba:51:61:ad:89:83:5f:7c:7b:24:e6:f1:
         7a:99:1d:aa:4c:24:ca:f9:d3:6d:11:47:db:19:73:bd:2a:4d:
         e5:da:30:3c:5b:7d:ea:14:17:12:92:57:5b:48:14:0d:79:94:
         c2:fa:96:b1:d8:d7:93:cb:29:e5:48:38:13:84:60:1c:e1:85:
         03:28:2c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:28:00 2025 by rpki-client