Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaabda53-d164-3ae9-aed8-f893f7b33cbf.roa
File:                     aaabda53-d164-3ae9-aed8-f893f7b33cbf.roa (raw, json)
Hash identifier:          yu2qBxqcb9Q3aYJ+YWOkbKpe8LCsCaSkhNFEDB0vDU8=
Subject key identifier:   4F:B7:A4:10:62:83:E9:D5:1C:5A:05:5A:AD:4E:6C:1B:3B:88:B2:D5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AB650FCD9EAE4F3695E02DC40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaabda53-d164-3ae9-aed8-f893f7b33cbf.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     36183
IP address blocks:        172.224.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:fc:d9:ea:e4:f3:69:5e:02:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=9e4a2949-ba04-48b6-bd55-ecae0cc0320c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:60:08:41:a1:f1:aa:04:a6:7f:21:39:f1:16:
                    54:38:73:cb:78:fe:26:d8:f2:c9:d2:92:5e:cc:57:
                    bc:ea:b9:e6:db:59:50:59:41:68:be:ea:5f:f2:99:
                    98:9a:b6:c4:1d:bc:11:fd:e1:8a:3d:08:4d:80:cf:
                    d5:ab:fe:d3:83:ee:63:cc:b2:03:40:5c:bf:1b:39:
                    41:f6:0f:c4:3d:52:f1:31:56:2f:b1:ea:1d:8f:d4:
                    f0:8c:70:d6:dc:3e:af:c1:e1:3a:f5:9d:d0:31:6c:
                    d3:b0:37:56:97:73:ae:2d:7e:95:bd:81:00:55:43:
                    c4:d4:3d:3e:b0:29:22:c4:8c:11:38:9d:43:7c:1c:
                    b7:b2:f4:4b:7a:0d:9e:90:a0:38:77:94:38:13:6c:
                    30:26:e9:9c:74:2f:15:c3:1c:ee:83:5e:10:bf:f9:
                    d0:58:76:c2:46:ef:f3:08:48:71:9d:68:68:f9:a3:
                    42:0a:9f:90:08:87:ef:69:e7:2b:21:5f:2d:30:3a:
                    bb:a8:8e:a6:f0:b0:1d:de:8d:36:3d:69:47:2f:ca:
                    d5:ae:92:83:5a:f4:80:c5:71:18:4d:d7:90:f2:d3:
                    a9:97:e8:69:b1:6b:26:c8:d4:f1:e7:15:70:e4:6a:
                    18:27:5c:f7:10:dc:ac:67:16:9b:92:f9:7a:7f:f1:
                    93:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B7:A4:10:62:83:E9:D5:1C:5A:05:5A:AD:4E:6C:1B:3B:88:B2:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaabda53-d164-3ae9-aed8-f893f7b33cbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:28:3a:af:97:27:36:7b:14:58:12:5e:67:58:7d:31:eb:a8:
         b7:8b:e0:4e:97:d3:5a:bf:e0:43:f2:4e:cc:ca:3f:02:fc:b9:
         ca:73:32:0b:74:b3:dd:7f:f9:df:c9:81:cc:a4:a1:59:79:b0:
         4d:9d:30:f0:80:e9:e9:c3:1d:f5:ba:13:84:9e:95:78:91:ce:
         ef:aa:62:02:c4:64:a9:3f:80:7d:36:1f:b3:1b:b7:1b:5f:fa:
         59:7b:48:e5:31:69:44:5c:58:c3:f5:65:4a:92:18:f6:69:9c:
         af:b2:f4:54:33:bc:47:ca:30:31:77:2b:22:94:48:47:a5:f2:
         2d:93:e4:3f:40:b8:d3:ee:60:8b:25:ef:e2:5c:ba:07:1b:90:
         05:07:59:da:3f:3c:8a:8f:96:5c:fb:79:1d:79:31:97:38:96:
         eb:3a:42:23:22:a7:db:f9:3f:d3:3c:3c:fb:a5:bb:67:0d:df:
         f7:88:85:c9:59:0a:d0:f4:0a:18:94:e2:32:c0:42:66:01:4e:
         25:f1:97:4e:4a:b8:e0:ab:7e:e1:f6:3e:0e:99:f6:37:17:7d:
         ae:32:47:44:5b:09:48:c5:88:58:8f:6f:0a:27:db:a8:20:34:
         cb:b3:fc:7e:0f:1a:80:e0:0b:92:2a:ad:6e:5e:62:eb:4e:d8:
         28:d4:ee:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:55:25 2025 by rpki-client