Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad22a3db-5321-31b5-941e-41cd403bd83c.roa
File:                     ad22a3db-5321-31b5-941e-41cd403bd83c.roa (raw, json)
Hash identifier:          mDsQW1vsJDZOTkb+sahUvuibV7nCrvrRhOuSLpA4z1o=
Subject key identifier:   DF:19:B5:39:18:88:EA:03:06:45:37:E5:A4:26:79:A1:08:84:FE:F5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497342B3BD9EF7FC46825EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad22a3db-5321-31b5-941e-41cd403bd83c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36183
IP address blocks:        172.224.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:42:b3:bd:9e:f7:fc:46:82:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=135397e5-e493-4889-8269-7fb3643d1419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0d:97:01:d7:c2:75:37:5e:05:81:3d:b5:f8:
                    bc:2c:4a:c4:a4:8f:02:2c:d0:eb:a2:f3:2b:1b:c9:
                    4f:a4:07:95:95:b2:43:9c:02:47:4e:b8:c0:f1:4a:
                    f2:cf:21:24:da:0c:05:a0:71:96:f5:74:65:46:37:
                    22:cc:0e:5c:83:26:63:90:0e:11:31:7a:52:d1:b1:
                    1b:5c:00:b0:3b:3f:11:ae:8d:83:e3:08:a2:4c:fa:
                    3d:c7:ba:bb:b6:28:99:fa:1f:4f:7e:c0:ce:fc:26:
                    2a:64:a7:af:1b:2a:82:85:78:2f:d1:c9:14:67:a2:
                    ac:00:a9:68:3e:01:52:d2:3e:8e:27:84:f4:80:dd:
                    d5:e4:98:48:06:0f:24:e2:86:24:a1:f6:b1:38:48:
                    c9:fc:88:21:f8:08:af:d5:57:4c:af:c1:4d:a2:8f:
                    1c:0e:e9:f9:1d:59:00:d0:38:0d:70:22:57:10:2e:
                    fd:7b:45:b0:30:51:05:c6:f9:c1:2a:97:1b:aa:51:
                    50:3c:4e:cb:49:3c:0b:1a:1e:ff:23:c7:55:84:d8:
                    8a:77:9e:a7:64:55:b9:0d:d5:76:79:4c:3c:23:4b:
                    6c:8e:96:de:43:0f:aa:15:28:ad:c0:f3:68:f6:9f:
                    2a:a2:7d:39:68:5d:50:fd:93:2c:5e:32:0e:79:75:
                    75:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:19:B5:39:18:88:EA:03:06:45:37:E5:A4:26:79:A1:08:84:FE:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad22a3db-5321-31b5-941e-41cd403bd83c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:12:16:8f:67:10:60:7e:ca:95:f3:da:c0:28:67:cb:3b:ea:
         d4:b2:4a:f3:76:6c:07:79:81:0d:13:b2:12:55:8d:18:1d:12:
         95:c5:16:a5:27:ee:7e:b1:b9:50:13:db:af:74:2a:09:9d:3e:
         fd:18:a5:58:c9:a6:23:c0:0c:87:f3:95:9e:01:13:1a:80:4f:
         6a:f5:40:87:01:7b:44:a6:ed:9e:e5:14:5c:67:66:37:32:00:
         15:ee:3d:fc:50:b5:42:1f:20:d7:e0:05:ee:a8:7b:c0:44:0e:
         c9:2c:ed:a2:6b:14:8c:74:f1:94:14:92:6d:6a:b0:1a:87:01:
         06:38:c2:9e:d4:8d:d4:d1:b6:ad:81:26:cc:11:2f:d8:4c:a3:
         74:86:a7:d3:78:c4:bc:fb:81:b1:ce:a5:8d:54:da:cc:37:81:
         c1:1c:a5:91:50:f7:b2:6e:91:13:14:16:26:20:61:29:49:05:
         e9:79:67:48:9e:c3:93:1b:74:57:6d:89:95:fa:3f:7e:93:27:
         e8:25:64:0f:9a:ed:ac:2a:36:18:81:dd:dd:f5:cc:ef:27:30:
         91:8b:3c:77:39:aa:54:71:cf:bb:f3:24:54:af:5b:79:d2:50:
         3c:64:ca:50:8e:58:b0:c2:53:c1:ae:a6:68:99:97:8d:57:dd:
         48:b8:af:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:28:27 2026 by rpki-client