Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f6bceaf6-9312-3399-ac8e-db4c275adba6.roa
File:                     f6bceaf6-9312-3399-ac8e-db4c275adba6.roa (raw, json)
Hash identifier:          zUtWjOMaAUuiFkAaSQ1AiRbjlWBRnw+gYAUI1XTaE64=
Subject key identifier:   D8:DB:66:E4:60:03:00:B3:7C:0E:BF:51:F3:88:3D:8B:E2:21:EA:94
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A9FFBAEA7CA23D7E91D325540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f6bceaf6-9312-3399-ac8e-db4c275adba6.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     36183
IP address blocks:        172.225.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:ae:a7:ca:23:d7:e9:1d:32:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=867d398f-ae02-4f7c-823c-e9af00fe2bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2e:37:f6:2c:22:a4:30:0d:92:7a:41:26:8d:
                    f2:81:98:58:11:f7:0a:aa:2f:a7:da:12:77:e3:f8:
                    0a:e2:7e:ee:7b:56:c2:cd:1e:6a:bf:1b:ad:a6:8e:
                    f3:d9:8a:ad:49:96:ef:af:10:71:af:96:c0:0a:2f:
                    5c:7e:73:72:65:73:a6:c8:f1:e7:a2:9d:77:2f:83:
                    6f:06:4e:15:54:52:20:d7:6c:65:12:55:7c:6c:35:
                    12:80:b2:40:59:88:32:e5:61:27:1e:59:38:1c:0e:
                    73:eb:67:87:d3:fe:e3:10:8b:0d:72:c6:e4:52:f5:
                    de:c8:34:15:88:24:93:59:38:91:b3:1c:a1:8e:0d:
                    f0:60:3d:c3:85:da:d7:d5:b3:07:02:09:41:c8:8f:
                    00:cf:a0:ed:e8:91:08:88:7e:b2:a2:09:5b:df:6a:
                    bf:2c:d8:6d:c3:2e:80:37:cb:f0:7f:e7:65:3c:99:
                    21:76:83:0d:19:d0:f3:6e:37:10:70:da:b1:1d:18:
                    bf:a9:c8:dc:4a:04:d9:9c:eb:46:a2:18:bf:4d:e9:
                    55:79:43:4b:cd:ba:d9:da:a9:75:2b:39:65:4b:a6:
                    ba:36:08:87:43:6e:fa:04:8a:49:d7:15:80:f0:ec:
                    e0:11:41:fb:18:5a:f8:f9:e8:4d:6a:87:54:06:3b:
                    6c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DB:66:E4:60:03:00:B3:7C:0E:BF:51:F3:88:3D:8B:E2:21:EA:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f6bceaf6-9312-3399-ac8e-db4c275adba6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a6:52:9a:50:35:3b:e0:2c:5a:fd:9f:41:26:a3:f3:c0:9e:
         f0:38:15:17:d7:56:06:47:0a:81:ec:ad:56:34:fa:58:d6:ff:
         ed:dd:68:97:96:de:cd:2a:97:57:ea:f2:b0:ee:1d:22:ec:4c:
         f3:9b:d2:19:8d:90:a4:a0:e0:96:85:fe:ff:62:02:f9:eb:c0:
         a2:a9:d4:69:54:b7:37:cf:c7:e5:8e:b3:5d:1f:33:b7:14:59:
         c7:3f:84:ae:98:82:11:e6:ef:13:5d:7e:fd:8e:09:2e:70:d0:
         87:5d:4d:39:8c:72:f9:95:c0:3f:f6:96:28:81:75:1d:5a:6d:
         70:b9:43:0c:dd:89:e4:fe:a7:28:23:5b:2a:56:f7:e0:34:0e:
         83:bc:d3:b4:d5:db:45:cc:da:0c:68:14:6f:46:b8:4f:a6:3c:
         f8:cc:e0:83:a7:a6:c6:56:75:67:df:38:50:d4:b0:f2:6a:c1:
         56:af:d3:b0:28:dc:67:1d:28:40:73:fa:8d:40:2e:fb:7c:45:
         e7:ae:9e:5f:ad:f3:3f:a0:f7:68:99:3f:f6:79:1f:cc:ef:ed:
         3d:20:ac:40:dc:2f:fb:b3:05:13:2f:83:1d:70:a1:fc:53:35:
         61:43:ff:4c:79:5f:35:3b:14:07:a5:1b:4c:69:56:98:5f:8a:
         88:ab:2e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:38:09 2025 by rpki-client