Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4480650-b02f-33e2-b8c8-bfac08c36b75.roa
File:                     c4480650-b02f-33e2-b8c8-bfac08c36b75.roa (raw, json)
Hash identifier:          WW4hM3IdaipTmwqifQpP8TosUp0QVMxQR+blDNEKqmM=
Subject key identifier:   75:33:25:FC:F7:B0:95:3B:C8:7E:CF:63:BB:6A:DC:75:3B:13:48:8C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A9FFBB8A82745293488B12D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4480650-b02f-33e2-b8c8-bfac08c36b75.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     36183
IP address blocks:        172.225.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:b8:a8:27:45:29:34:88:b1:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=01b9536f-c41e-4148-b16f-e887b516cf1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2e:a5:93:6c:c8:0b:40:c9:b8:82:35:a3:e0:
                    28:bc:85:ef:42:2d:04:8f:57:57:f6:e0:5e:e0:a8:
                    ab:03:33:c7:47:6d:8a:79:71:f0:5e:08:5f:20:de:
                    c9:fa:f3:bf:82:37:5b:a4:34:a5:b1:d6:49:f8:5d:
                    08:85:c2:77:b2:6f:f8:57:75:3c:a7:e0:fd:34:41:
                    d1:48:58:69:a8:70:eb:b0:d2:c7:58:25:4a:7b:62:
                    8d:f2:fe:1c:5e:17:f1:d0:c5:73:47:90:4c:44:90:
                    c3:b1:9f:07:dd:15:12:de:a0:97:18:9d:25:8b:c3:
                    5f:5a:60:b6:58:7e:aa:ac:4a:c4:00:c3:4d:75:66:
                    6e:4c:4d:dc:d6:0a:22:a3:69:8b:02:d0:e7:d4:f0:
                    e5:1c:47:ba:04:60:f1:b4:98:ba:35:59:88:53:97:
                    77:a9:a3:82:d9:4a:bf:d8:a4:8c:d5:a0:01:3c:9a:
                    a7:e9:c6:aa:de:3b:db:d3:02:c2:7e:b7:9e:1d:06:
                    21:fc:62:c3:db:6f:b6:27:5e:5e:68:4c:9d:3d:cf:
                    41:73:05:13:b7:5a:82:a6:68:b5:f9:47:91:1e:df:
                    d0:03:10:a5:ef:67:10:cc:d9:13:ec:d2:22:6f:0b:
                    c7:9f:87:85:0f:96:da:12:2d:8b:37:81:09:e9:8e:
                    2a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:33:25:FC:F7:B0:95:3B:C8:7E:CF:63:BB:6A:DC:75:3B:13:48:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4480650-b02f-33e2-b8c8-bfac08c36b75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:95:b6:66:7b:ce:aa:f4:c8:d7:82:2c:23:43:49:d2:2e:36:
         a0:ac:69:e2:72:57:de:09:c0:ad:77:ff:88:17:92:a7:42:37:
         1d:49:bc:0e:95:0d:3a:ac:8a:d4:a7:a4:4a:0b:7c:11:c1:67:
         dd:bc:18:9b:94:bd:ab:d0:66:80:1e:0f:bc:44:ed:ca:f7:09:
         f1:db:d3:a4:1b:31:4f:f5:7f:17:df:b9:4c:2e:c1:b2:7b:e1:
         43:38:2a:69:2b:c4:ed:d6:4f:f0:67:d7:73:6c:6e:64:8b:32:
         a6:b9:c8:43:3d:ac:78:63:21:00:e8:33:7f:b9:cf:31:b5:a5:
         32:64:cf:d2:e3:ec:66:78:27:2e:1e:96:88:2c:84:a7:a6:10:
         04:8e:a6:22:65:55:ea:04:64:ed:1a:1d:97:91:e0:5e:46:01:
         87:b9:88:0e:22:34:ac:e5:9d:be:e4:b3:69:32:3d:48:e5:2c:
         91:3c:e9:2d:a8:df:11:be:7e:8d:88:00:01:ab:0b:62:c2:cb:
         be:d8:28:5c:a7:87:d3:d9:f0:0a:12:45:87:28:2b:2e:95:7a:
         1c:87:43:24:e1:63:b7:f9:0c:97:9b:15:e5:7e:9e:c8:62:28:
         00:1f:60:36:da:91:83:75:fd:47:54:54:f1:8a:0b:39:d5:b3:
         e3:90:47:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:33:47 2025 by rpki-client