Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec6f381a-431e-3135-bfb5-b2e746829e63.roa
File:                     ec6f381a-431e-3135-bfb5-b2e746829e63.roa (raw, json)
Hash identifier:          KYi9YZCh5CjaP1YDlRn+DWaDCGTMvGwTQjve09FIgmU=
Subject key identifier:   EF:E2:E8:FA:73:5A:85:04:78:34:42:B1:EE:A9:AB:9E:A8:2A:35:11
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AADF13399D2A9E5E22A408580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec6f381a-431e-3135-bfb5-b2e746829e63.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     36183
IP address blocks:        172.226.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:33:99:d2:a9:e5:e2:2a:40:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=2e83871b-5da9-4e7e-832c-b9588b5e0fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3e:fb:b7:35:5f:5b:67:9c:e8:ca:01:a8:3b:
                    df:0e:4e:1f:3f:a7:a8:84:f9:ba:d0:6c:0e:67:fe:
                    68:c0:d0:20:39:ff:4a:e3:17:ee:96:e2:59:b4:83:
                    cc:1e:3d:aa:d9:58:27:95:c1:0a:45:9a:12:5c:38:
                    0c:b7:0d:c9:84:72:3f:41:ef:a0:50:1c:19:9e:03:
                    e2:4a:14:48:bb:a3:06:9d:be:ec:5e:8d:41:a3:fc:
                    65:a6:ea:98:76:8e:fe:73:40:aa:41:6c:09:e1:33:
                    76:b3:a9:2e:f6:8d:f0:f7:68:42:f6:56:dc:a9:02:
                    21:d0:f7:a2:07:a1:50:73:87:1f:c2:ec:22:2f:f2:
                    8e:36:48:3d:43:bc:69:82:fc:d5:07:b7:3e:14:11:
                    26:0e:8f:16:30:b2:41:e6:22:95:5f:7a:11:32:4e:
                    f0:6f:f1:9d:26:24:cc:08:aa:4c:b1:5c:ee:5b:18:
                    71:1e:4b:b2:13:3d:d8:ed:7e:96:9b:0b:a6:a9:74:
                    34:3e:20:67:d8:21:3f:73:0c:bd:50:39:ab:ee:67:
                    53:84:cb:47:9f:47:d4:4c:bb:63:7f:2a:c7:a3:98:
                    be:01:d1:09:04:f6:23:74:00:9b:14:f4:12:b4:03:
                    b5:4f:2f:81:34:b8:2b:2c:fc:f9:cf:6f:c0:a4:52:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E2:E8:FA:73:5A:85:04:78:34:42:B1:EE:A9:AB:9E:A8:2A:35:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec6f381a-431e-3135-bfb5-b2e746829e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:9b:c4:9d:b8:09:c1:29:88:98:a6:ca:d6:e6:0c:1d:b0:78:
         b9:4c:f5:c1:7b:2b:f8:69:86:1b:be:70:02:fa:72:23:3e:62:
         f1:1c:28:63:b0:c1:aa:a9:bc:e6:61:88:8a:69:b3:bc:0c:2c:
         e5:07:3d:4e:9f:df:34:7c:2b:59:1d:fa:ed:8c:86:66:48:41:
         68:c4:49:41:12:3d:0b:0b:14:90:1d:8e:3b:e6:da:9a:04:3f:
         b8:8c:bc:bb:b3:3b:e9:c7:c1:b8:39:c2:12:17:84:c0:41:5a:
         97:bb:b0:45:9e:1f:b2:d7:fe:e7:c5:04:c9:62:72:90:da:b1:
         5e:28:86:3e:51:1f:81:18:64:1c:70:de:b0:66:1e:5b:f2:52:
         d5:f8:18:68:c9:f8:fd:9f:e7:64:8a:09:9c:59:51:ec:68:f4:
         39:d6:3d:0b:c0:7c:78:61:bc:48:27:5c:4d:32:4b:2e:23:a5:
         1e:6a:7c:a7:f9:9a:13:b4:5a:8d:a5:db:7c:a5:77:3e:ad:89:
         dc:2e:e0:3f:08:98:12:52:00:28:82:8f:2a:fd:3a:23:a2:aa:
         c4:a2:c1:98:6a:34:eb:40:7f:dc:e4:23:d0:6b:4a:82:fb:d2:
         f0:3c:ce:db:1b:12:86:f4:d3:0f:76:53:0f:92:09:d3:54:24:
         fd:de:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:09:26 2025 by rpki-client