Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0908899-d728-3f31-9b10-220c2754c80c.roa
File:                     a0908899-d728-3f31-9b10-220c2754c80c.roa (raw, json)
Hash identifier:          CkyRXtxmljTDVnOukhcRoZLhDMlUyjFqdGrx4/AV5wk=
Subject key identifier:   94:F9:BA:A1:E5:AE:8B:C9:34:16:AB:2F:97:B5:69:47:CE:95:42:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D571FBA634D518319152CD680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0908899-d728-3f31-9b10-220c2754c80c.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     36183
IP address blocks:        172.224.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:ba:63:4d:51:83:19:15:2c:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=f53f29ff-26e3-4ec0-8b0a-95b2ffae7068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:83:bb:c2:a6:0a:b5:5f:67:0b:37:43:1c:df:
                    27:ca:53:55:59:e6:3a:b8:ba:a0:63:09:90:66:92:
                    6a:af:47:80:91:fc:3a:6f:1c:33:82:b1:7b:74:8e:
                    5d:28:d8:34:f4:ac:81:69:52:2e:59:4d:44:a8:77:
                    9b:91:9c:6f:a7:9f:94:88:4a:31:db:50:0c:fb:af:
                    5e:8f:22:98:8f:3b:97:9d:65:be:a6:37:17:4f:ce:
                    9f:3b:1b:94:d8:22:0f:d2:8e:2d:02:df:35:39:67:
                    4b:72:dd:0d:e9:db:33:23:4b:d2:e3:3c:67:5c:4d:
                    aa:dc:7e:ad:bf:04:3a:d7:55:8c:6e:4a:7e:17:c4:
                    3b:f8:6e:b0:a3:cb:40:12:34:08:c3:b8:3a:25:1b:
                    6f:f8:d4:78:49:be:ad:00:0e:61:03:2a:89:60:5b:
                    7e:c0:6f:a3:8f:c2:35:d4:5e:1b:7b:b8:31:1c:20:
                    c3:82:48:62:cc:fa:ca:25:f0:03:6d:0a:85:d7:72:
                    c8:4b:76:5d:7b:a5:92:37:2e:c9:bd:1c:7d:19:73:
                    01:fd:e9:59:c1:ef:cf:be:72:30:03:c3:07:13:fa:
                    3e:60:c1:f9:b9:42:be:f1:b7:bc:fd:41:24:79:5b:
                    08:b8:a5:d4:1c:d4:c5:e3:71:f3:fc:06:97:a8:09:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F9:BA:A1:E5:AE:8B:C9:34:16:AB:2F:97:B5:69:47:CE:95:42:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0908899-d728-3f31-9b10-220c2754c80c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:51:08:dc:29:42:13:61:88:bf:a4:c2:6c:c5:df:72:c8:95:
         29:9f:48:3f:bc:22:44:b9:8a:f6:6c:97:68:42:de:cc:13:33:
         30:4c:ef:8d:0d:f5:d9:6e:9e:2c:9b:ae:04:38:c7:0c:30:ed:
         37:e8:65:1f:8b:cc:2d:9e:c9:fe:1c:30:20:29:2d:ed:8c:2a:
         94:60:75:3d:03:f3:08:2d:5d:a1:b9:6d:61:14:93:81:bb:09:
         76:05:0c:9a:7a:23:6d:c4:ab:ab:68:b4:1b:d8:a3:da:78:24:
         0c:fb:a4:c0:e0:9a:e6:cd:4b:01:0e:9e:90:d8:61:81:54:9c:
         31:d8:04:38:cf:cc:3c:7b:a5:32:88:12:f7:e8:2e:9a:b3:0c:
         0e:38:ff:31:7a:c6:c9:d2:0a:fb:77:cc:d6:7c:c0:05:d8:04:
         9b:fb:e0:58:b5:b4:52:ed:08:a0:55:85:c3:6a:24:7d:13:ed:
         5c:41:1d:c2:1e:0b:57:35:84:d9:19:da:f1:e2:d8:d8:ea:65:
         10:04:4f:8b:7e:97:2d:c4:19:3c:de:68:fe:a7:47:ce:97:53:
         dc:d0:84:29:c8:c7:a3:3d:1b:af:fc:07:8f:4e:09:df:d5:ab:
         32:b2:b2:0a:e9:cd:d8:f0:9f:5c:21:4a:a1:7d:37:11:77:dc:
         d2:6e:8f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:18 2026 by rpki-client