Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef092e08-8308-394c-b3c2-43502efaabdd.roa
File:                     ef092e08-8308-394c-b3c2-43502efaabdd.roa (raw, json)
Hash identifier:          Ui15NIEtul+duH8OqVEmGB5QOTJCE1X7kUEFVQdSw4Y=
Subject key identifier:   72:7E:8B:FB:35:9A:C1:AA:16:92:0E:36:C0:C1:15:82:8B:79:95:35
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AADF12931E8E0AF36DA943FA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef092e08-8308-394c-b3c2-43502efaabdd.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     36183
IP address blocks:        172.226.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:29:31:e8:e0:af:36:da:94:3f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=54cfeb99-08c4-41ba-9637-69f92d95c558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:5f:a5:e2:55:fa:10:4c:c7:13:58:5b:ed:
                    73:a8:6b:dc:37:f3:09:5e:d5:8b:35:4d:81:65:26:
                    33:de:35:d7:76:0c:a9:f6:71:aa:17:bf:ad:4f:d7:
                    cb:c3:6e:4c:0c:ac:df:f8:3d:af:d8:75:a7:9e:6a:
                    4c:b7:30:68:f3:b5:57:84:c7:72:ef:b4:aa:a0:fb:
                    68:17:9c:44:c6:73:da:52:fa:9a:5a:ae:ed:22:8f:
                    2e:10:8a:08:04:37:13:8c:a8:4d:61:72:a1:70:99:
                    99:ca:0e:20:09:8b:0a:ac:86:34:dc:55:87:91:af:
                    3b:4f:26:78:23:57:7f:e3:e8:28:73:ee:ec:72:bd:
                    0b:68:da:97:7f:de:11:c6:df:18:46:27:4f:4c:43:
                    78:fa:e3:c3:c1:3e:5c:8d:55:f1:f1:f3:71:e1:88:
                    d4:99:8b:07:01:f2:2a:35:bf:76:72:2d:9f:aa:30:
                    74:bb:61:ab:73:34:22:8f:80:74:dd:d2:3e:48:07:
                    c2:a9:68:3f:34:a7:6f:3f:08:ff:6d:61:1b:02:d0:
                    b6:68:50:2d:0c:eb:7e:8a:af:31:69:76:28:3b:09:
                    97:79:90:f2:a1:bb:b4:4f:73:fc:28:8d:82:ef:f1:
                    dd:f1:d5:6f:03:d7:b7:f5:f6:4a:89:ff:01:96:a7:
                    18:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7E:8B:FB:35:9A:C1:AA:16:92:0E:36:C0:C1:15:82:8B:79:95:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef092e08-8308-394c-b3c2-43502efaabdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f6:7b:a9:42:2b:ed:3d:70:86:45:59:64:b8:2c:f2:ba:53:
         4e:fb:c5:db:c0:dc:95:bc:55:82:f9:7f:25:d4:a8:00:2c:b5:
         93:3d:4c:5c:5f:49:bc:eb:46:9d:89:d9:21:1e:62:40:61:ae:
         7f:d2:14:8d:81:65:44:5e:cb:68:d9:18:6f:11:48:20:ba:03:
         8f:a0:f0:b8:3e:34:5e:ff:3b:73:71:ee:d9:04:e6:c2:aa:07:
         47:e4:af:b3:8b:1e:f0:8a:63:5b:a5:3b:bb:98:f3:11:29:36:
         1a:62:c8:36:75:c2:73:20:56:e0:69:4a:54:57:1e:8e:1c:09:
         d7:a6:22:ad:e4:b2:be:f1:6e:79:b2:cc:48:fd:1b:37:77:dc:
         09:8e:c0:2c:4d:90:b6:10:ed:f4:65:7b:6b:80:be:cb:79:3f:
         60:f8:85:15:59:76:bb:4f:38:c5:66:26:34:cc:ac:f8:6a:a7:
         80:70:37:a7:b5:91:bb:d7:4d:ad:16:9e:00:e4:7f:01:00:16:
         df:29:e9:bf:26:52:3d:9b:84:8b:95:39:75:e8:d0:1e:ce:ff:
         c5:e6:c7:84:38:99:34:99:f9:08:06:bd:44:37:85:80:86:34:
         59:b5:06:b0:5f:89:2a:02:c0:0e:52:72:8c:b8:36:87:3e:21:
         73:32:45:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:16:19 2025 by rpki-client