Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d80137cf-d83d-3de0-8d25-f43332092311.roa
File:                     d80137cf-d83d-3de0-8d25-f43332092311.roa (raw, json)
Hash identifier:          5pptSJ/4wq511IriBDLYUzANrkteX6XYEYLjjXCQEkA=
Subject key identifier:   F5:38:C3:2A:D3:AE:5C:19:15:F7:BC:78:80:BA:FA:92:D4:48:0E:9D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AB91BB9454180205A6BA16B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d80137cf-d83d-3de0-8d25-f43332092311.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     36183
IP address blocks:        172.224.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b9:45:41:80:20:5a:6b:a1:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=5a94530c-9cdf-41b8-b068-f22c23870eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c4:55:38:ac:84:e6:ba:33:ad:92:4f:95:32:
                    30:eb:bf:f7:38:4c:4d:88:0f:6d:2d:21:89:35:3b:
                    eb:0c:a1:30:88:03:a3:79:43:3f:fa:65:37:e5:aa:
                    ec:f3:84:ac:17:a6:ed:38:32:c3:41:ac:f9:f8:cc:
                    14:b9:ae:a4:35:b3:0f:ed:8e:7c:bc:19:30:89:a7:
                    af:d4:61:bc:59:9d:4e:d7:b6:f3:9a:ed:6d:0d:b6:
                    e4:cd:ed:ef:09:32:32:e6:fe:38:37:e0:eb:59:e8:
                    e7:f5:d2:f9:e7:97:63:e8:0b:ca:70:f1:68:08:f7:
                    e9:2e:b4:c8:a3:bd:8e:ae:c3:f6:66:2b:87:99:f2:
                    fd:80:ce:7d:01:f7:e5:c9:83:b6:b4:59:98:b7:3f:
                    94:e6:8f:b6:0f:e8:3b:6d:8d:0d:4a:74:dd:58:d1:
                    e5:7c:7a:78:4e:05:f4:5b:49:a3:07:9e:53:c5:2d:
                    3d:54:a5:1d:f8:2e:1e:94:ab:42:3f:42:34:34:c5:
                    37:ff:da:21:40:52:6c:b9:f3:83:4e:84:8a:d2:38:
                    87:4f:04:52:0a:4f:ed:85:ca:24:9c:2b:b8:03:eb:
                    ec:12:d5:a0:16:34:29:0f:30:05:68:28:47:b2:89:
                    f3:13:b6:56:a5:6b:5d:cc:1b:d2:f2:be:28:d8:a2:
                    66:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:38:C3:2A:D3:AE:5C:19:15:F7:BC:78:80:BA:FA:92:D4:48:0E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d80137cf-d83d-3de0-8d25-f43332092311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:77:1c:67:41:72:00:9d:72:1e:7d:b2:be:c0:85:4c:d2:e6:
         aa:1b:44:31:8a:6b:69:ee:e9:57:ff:c3:ef:58:e8:51:b1:e2:
         26:be:e2:0d:d6:6a:53:a5:07:06:4c:99:42:9a:6d:3d:fd:7e:
         7b:bb:52:b0:81:b2:fe:f0:4b:7a:08:77:79:6a:aa:fc:e8:c3:
         9d:5d:ab:3c:1d:bd:5b:2b:e4:b2:ab:fb:01:c8:21:f0:fc:e4:
         46:5e:78:4d:78:0a:ae:71:ee:70:2a:f6:dc:cc:6d:7a:60:79:
         51:c5:de:53:a3:dd:e2:e2:19:85:0f:62:db:e7:b5:f8:22:99:
         90:bb:80:02:63:cc:2e:90:4a:ba:22:7b:4e:fc:89:57:c1:3c:
         93:db:7a:cf:37:c6:be:28:dd:1d:98:99:39:5f:40:03:e5:bc:
         3e:92:d0:83:e2:89:5c:27:80:18:49:d7:78:2a:dd:72:1a:aa:
         7e:ae:ce:69:22:3b:9b:4e:e6:45:1b:df:a7:97:26:29:ec:dd:
         fb:42:14:0e:77:d1:4c:ee:63:50:0f:ba:fb:5d:dc:d0:a6:c2:
         21:bf:b4:ef:92:bb:9b:dc:1c:ba:0b:5c:0b:81:17:70:2d:92:
         54:72:3f:be:8d:b3:a1:ea:ec:a9:6d:e2:22:e9:dc:1b:a4:3a:
         aa:58:aa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:17:11 2025 by rpki-client