Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c25853d9-3d04-379e-9d63-b30abc9b3675.roa
File:                     c25853d9-3d04-379e-9d63-b30abc9b3675.roa (raw, json)
Hash identifier:          N3H/QhPxeLyJOVVAZZvlxjJsLU6mlsV47nBMm+Mnux4=
Subject key identifier:   C5:3D:AE:4E:A0:9A:31:16:8F:7C:7D:66:8D:61:00:E5:E5:12:7A:E0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584C6E21941629C067312F669B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c25853d9-3d04-379e-9d63-b30abc9b3675.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     36183
IP address blocks:        172.226.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:94:16:29:c0:67:31:2f:66:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=d7e468bf-c056-4c7c-8f9b-d1e1e86a21a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:e8:32:72:83:c6:9c:b9:bf:45:58:32:2f:
                    6e:23:25:73:80:86:bf:ab:24:1c:2c:43:91:43:47:
                    e2:09:ea:74:ad:fc:7d:3a:b2:33:66:0c:b7:95:2a:
                    ab:ec:33:36:b4:a7:a4:75:30:8a:1f:55:f1:92:18:
                    7e:a1:34:b1:c8:05:01:90:6d:81:6e:4a:4c:b8:ad:
                    ad:f1:21:80:d2:9b:a4:e4:0d:a4:1d:50:f5:8a:77:
                    9b:15:97:25:f2:cf:12:ba:e8:50:bd:71:00:ab:5d:
                    74:f1:75:19:7b:ad:7d:1b:46:13:35:e3:dc:07:e6:
                    06:e4:2d:20:d0:5a:36:0b:d1:f4:75:3b:0a:12:69:
                    b7:a9:37:b7:c9:7e:b6:7b:a3:e7:a7:38:90:29:92:
                    df:42:d4:c5:46:83:d4:9e:f3:bd:87:ae:84:bc:10:
                    b8:c2:b9:4d:53:ef:d2:22:bd:96:41:04:23:65:7c:
                    d6:d0:68:b7:f1:dc:fd:dd:63:1d:71:be:f6:40:8c:
                    55:93:9e:ff:46:7e:65:fb:40:cb:d2:54:07:0d:bb:
                    af:f7:bf:54:f7:52:40:d2:6a:8a:6f:cf:0f:42:bb:
                    9c:1d:c2:75:50:54:83:99:28:d1:2f:3e:7c:1c:ed:
                    0c:ab:61:b8:21:f5:f6:9a:e6:c0:d2:dd:54:50:05:
                    9f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3D:AE:4E:A0:9A:31:16:8F:7C:7D:66:8D:61:00:E5:E5:12:7A:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c25853d9-3d04-379e-9d63-b30abc9b3675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f6:f8:3c:6b:4e:4e:c5:6b:3f:9e:35:5f:82:6e:4e:2b:1a:
         17:3d:27:04:a4:f5:9b:dd:76:f4:64:ee:6b:09:7b:51:79:f7:
         21:66:4d:2b:51:14:4a:d1:13:34:8b:81:12:84:13:58:d5:0f:
         06:08:85:ed:e4:58:cd:c1:8f:b5:75:9e:d4:7f:13:68:1d:bc:
         f4:6c:87:57:89:f2:b2:84:fc:a9:f8:4e:56:df:c6:3b:a4:f7:
         c4:ca:e6:ad:3e:0f:03:4e:c0:0c:38:a7:42:9f:3d:97:e3:67:
         10:07:3d:d6:ce:e3:06:58:8a:71:84:6d:d6:01:15:18:4b:4c:
         15:6d:93:26:97:23:22:5e:35:42:41:fc:0b:0c:2a:19:b0:8e:
         1e:a0:4b:33:62:7b:04:15:4a:72:6f:6e:a2:26:9f:f3:95:7b:
         d9:00:1d:8f:95:08:92:93:5b:1c:67:1c:c3:2f:4e:72:9c:cf:
         84:76:9a:f4:d7:50:6c:0f:de:88:8a:0c:aa:4a:ee:c8:b8:f6:
         98:48:02:5c:f4:5b:91:a8:ea:8e:26:41:f9:92:95:3e:0f:78:
         33:19:65:bf:54:4a:bb:9d:87:a9:6c:e9:10:50:7d:ca:0c:c0:
         cb:e7:e4:ff:ee:5a:bb:ed:b5:99:a5:06:f4:e6:8e:55:78:4d:
         ec:8c:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:16:07 2026 by rpki-client