Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4352d55-9512-39c9-83f2-45641ff778f5.roa
File:                     b4352d55-9512-39c9-83f2-45641ff778f5.roa (raw, json)
Hash identifier:          lY6wuqyXPJwoSJ2A0h0ediuVv9LExHAmoP65KgSVYK4=
Subject key identifier:   3D:32:29:AB:7D:66:EB:6C:EE:ED:18:6C:28:76:58:6A:95:8E:93:02
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AADF1338DE712D409CBB11400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4352d55-9512-39c9-83f2-45641ff778f5.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     36183
IP address blocks:        172.226.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:33:8d:e7:12:d4:09:cb:b1:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=5400e2ef-f828-474c-b8ab-110c6f4ef6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:7b:01:26:68:8c:8b:ea:29:da:59:f9:b7:
                    7b:f7:10:88:09:c0:36:45:a3:a3:3c:d1:3c:cd:31:
                    f6:5d:54:ba:af:e4:2e:10:ca:e7:55:ac:33:8e:73:
                    e7:e7:26:22:df:2e:bb:59:64:fd:75:6f:ca:da:2a:
                    ee:75:38:af:bb:10:71:73:19:38:b3:75:83:2d:47:
                    ff:70:8d:5d:c9:8a:e4:fe:a1:16:bd:aa:be:b1:6f:
                    7e:d9:79:4b:a6:e0:72:7f:e7:2b:86:6e:ae:8d:14:
                    8c:60:51:f7:d8:ef:d2:fb:af:a0:ef:43:62:f0:40:
                    55:9d:02:8e:70:6e:1f:1d:ea:1c:a3:f4:13:e4:f7:
                    de:1f:b9:50:41:72:d1:b6:3f:02:af:fd:d1:f4:60:
                    50:97:ef:f1:e0:23:ac:dd:94:9b:07:f9:5f:c9:ba:
                    5a:be:44:fd:c0:9c:af:52:b0:2f:b2:b0:8a:81:9f:
                    18:4f:13:e4:e6:0d:34:3a:74:df:5c:be:fc:e7:51:
                    35:82:67:49:67:e4:92:26:94:fe:73:4e:df:33:73:
                    8f:2e:70:99:cd:42:71:f9:b3:f9:d0:28:74:e0:07:
                    7a:97:10:60:2b:ec:19:12:16:ef:a4:7d:0f:f3:be:
                    7c:d9:cf:ef:d2:5d:55:6b:18:97:d4:25:24:aa:56:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:32:29:AB:7D:66:EB:6C:EE:ED:18:6C:28:76:58:6A:95:8E:93:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4352d55-9512-39c9-83f2-45641ff778f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b3:40:f6:42:49:f5:4c:be:cc:17:5c:c2:81:7f:67:af:91:
         f8:f4:4b:bc:5b:1d:da:90:8a:0f:87:59:2b:35:4b:14:26:8f:
         f0:95:f3:3e:45:41:4e:a6:c3:64:77:c5:7c:e0:ad:03:cf:1c:
         97:5d:aa:90:6b:0c:de:76:17:f1:e3:83:08:2d:47:4a:ca:5c:
         5f:d6:49:bd:fa:fd:90:bb:ed:37:fc:79:97:9f:59:6b:9c:66:
         85:bb:cb:cd:b2:22:cd:43:60:a3:85:a3:c4:de:97:da:fd:85:
         9e:cd:bb:1e:80:48:fb:9c:a5:f0:f0:5a:13:c5:e4:15:6d:5e:
         0a:29:b2:a0:13:49:d2:31:8e:04:3a:6e:15:df:44:69:ae:1e:
         47:f7:12:ed:8a:34:02:0a:ba:93:48:b3:cb:25:7c:d9:2d:61:
         17:7f:6a:4e:ef:bd:ed:0a:28:a8:67:4b:50:4b:78:76:a8:42:
         1a:49:ed:7a:6d:a2:fb:5d:d9:09:42:51:2f:c8:57:89:48:82:
         03:33:2b:46:40:57:d9:df:89:05:98:48:4a:68:1a:80:89:6e:
         e8:6a:7a:12:3e:e5:45:e3:fb:cf:f2:18:6e:f5:ec:d9:05:cf:
         3d:6f:2b:79:13:a2:79:d0:0c:c9:2c:87:09:83:5c:df:77:88:
         8e:85:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:29:56 2025 by rpki-client