Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/996029ef-9c3a-370e-b19b-50ecdcb90adb.roa
File:                     996029ef-9c3a-370e-b19b-50ecdcb90adb.roa (raw, json)
Hash identifier:          JV7jv7Uz4P4wh57CgzrPztDVTOxucW9hUAI5+WVNRlk=
Subject key identifier:   90:C5:7C:34:9B:E8:81:84:03:3C:AE:A2:B0:9B:59:03:AA:8D:0E:40
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AB650FFFD57A05D3020A6D080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/996029ef-9c3a-370e-b19b-50ecdcb90adb.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     36183
IP address blocks:        172.224.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:ff:fd:57:a0:5d:30:20:a6:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=32c415b6-64ed-4547-a379-c151f7f50d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e9:12:10:9d:7e:56:2d:40:bc:98:19:1f:f7:
                    2c:68:1d:e1:dd:a7:66:ba:c0:d4:63:c2:6e:5f:d8:
                    54:b1:3c:2f:33:88:6d:1f:76:a1:a8:b9:8f:9a:22:
                    c8:c4:10:16:27:9d:a7:d5:3b:ec:5c:91:06:88:56:
                    d1:5c:bd:84:52:f4:a3:23:29:68:4f:db:de:a3:7a:
                    bf:51:53:2f:9f:c5:c4:3a:3a:56:08:08:b6:9d:be:
                    cd:86:07:3b:df:b6:bc:b2:54:f7:47:3e:25:f7:6c:
                    f5:8d:58:40:aa:ab:7c:c1:a8:d4:a9:60:e5:c5:38:
                    89:d7:12:e6:3e:0c:7b:a3:5f:4b:ad:11:e6:64:64:
                    7d:df:6c:00:93:d2:8f:bc:11:60:e6:15:4c:35:b8:
                    46:94:a5:43:05:5b:51:32:ca:89:ff:d2:ae:3c:62:
                    21:1c:1a:c0:33:6f:d5:ca:33:92:3c:7f:28:a7:42:
                    84:27:b7:2f:d7:73:9a:2d:79:d6:04:cc:f4:9e:eb:
                    d1:fc:46:f6:1b:6a:89:d7:c8:9d:4e:cd:17:ac:cf:
                    8c:89:8a:7e:55:6a:dc:f3:6a:e2:cb:f6:d9:6f:7d:
                    56:d7:9d:9e:1a:e1:25:22:7d:be:ea:c4:a7:5e:50:
                    69:73:ee:a5:7b:f4:1a:95:06:fd:1e:b0:6a:46:36:
                    15:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C5:7C:34:9B:E8:81:84:03:3C:AE:A2:B0:9B:59:03:AA:8D:0E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/996029ef-9c3a-370e-b19b-50ecdcb90adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:fc:7f:77:a5:b2:e4:13:74:79:bc:1a:14:27:ec:45:3c:d1:
         98:0f:e2:e3:50:76:33:7a:61:5e:3b:16:71:92:a6:c3:58:ff:
         2c:11:7e:18:42:37:02:79:98:e5:28:97:7f:7a:e3:1c:22:e3:
         de:51:c6:43:ec:1b:02:4f:dd:b9:e6:c2:0a:28:73:75:f3:3c:
         8d:74:cd:87:2f:d8:67:72:f2:88:43:e4:1a:fc:a6:12:be:87:
         1b:d6:13:4d:c9:ed:53:cc:6d:12:fa:75:5b:02:b1:35:fa:67:
         08:9e:9b:f2:36:40:7a:26:4a:e6:68:d0:a9:a9:18:8b:b0:3d:
         80:d9:a1:75:7b:80:b4:82:22:fa:81:3f:4c:4a:b6:71:6e:f9:
         88:d6:15:7d:c1:91:5a:af:31:8c:6d:02:aa:1e:be:63:db:59:
         79:fa:35:86:b4:21:76:a4:69:9d:d7:d3:21:3a:a0:72:ca:4f:
         6d:20:ca:c7:1c:57:7f:61:1d:47:c8:03:f4:8e:00:e6:09:d2:
         f8:dc:24:74:9a:ce:2b:5b:a2:de:2e:30:34:29:e6:14:83:4d:
         3d:a9:30:a4:4b:a1:e2:79:e0:07:c2:0e:81:75:93:c8:7f:c9:
         e9:f7:10:b2:2b:9c:5e:f4:5f:96:8c:5f:ed:b1:2a:7b:9b:e0:
         43:77:6d:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UP/9V6BdMCCm0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk
MzJjNDE1YjYtNjRlZC00NTQ3LWEzNzktYzE1MWY3ZjUwZDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+kSEJ1+Vi1AvJgZH/csaB3h3admusDUY8Ju
X9hUsTwvM4htH3ahqLmPmiLIxBAWJ52n1TvsXJEGiFbRXL2EUvSjIyloT9veo3q/
UVMvn8XEOjpWCAi2nb7Nhgc737a8slT3Rz4l92z1jVhAqqt8wajUqWDlxTiJ1xLm
Pgx7o19LrRHmZGR932wAk9KPvBFg5hVMNbhGlKVDBVtRMsqJ/9KuPGIhHBrAM2/V
yjOSPH8op0KEJ7cv13OaLXnWBMz0nuvR/Eb2G2qJ18idTs0XrM+MiYp+VWrc82ri
y/bZb31W152eGuElIn2+6sSnXlBpc+6le/QalQb9HrBqRjYVsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJDFfDSb6IGEAzyuorCbWQOqjQ5AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTk2MDI5ZWYtOWMzYS0z
NzBlLWIxOWItNTBlY2RjYjkwYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOASMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF78f3elsuQTdHm8GhQn7EU80ZgP4uNQdjN6YV47FnGSpsNY/ywRfhhC
NwJ5mOUol3964xwi495RxkPsGwJP3bnmwgooc3XzPI10zYcv2Gdy8ohD5Br8phK+
hxvWE03J7VPMbRL6dVsCsTX6Zwiem/I2QHomSuZo0KmpGIuwPYDZoXV7gLSCIvqB
P0xKtnFu+YjWFX3BkVqvMYxtAqoevmPbWXn6NYa0IXakaZ3X0yE6oHLKT20gyscc
V39hHUfIA/SOAOYJ0vjcJHSazitbot4uMDQp5hSDTT2pMKRLoeJ54AfCDoF1k8h/
yen3ELIrnF70X5aMX+2xKnub4EN3bdQ=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:27:59 2025 by rpki-client