Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22ce450c-7b32-31ef-947a-59fa2f8dd6ab.roa
File:                     22ce450c-7b32-31ef-947a-59fa2f8dd6ab.roa (raw, json)
Hash identifier:          G+4Q8gy9L4U5mR6QUvyh4N6IzVGLZge6T0LdZZUH0Ao=
Subject key identifier:   35:66:79:F7:C6:FD:7F:D7:3D:D2:EE:6A:29:54:E8:8B:86:2B:7B:69
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A9FFBAF90E7BCFFD197D90A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22ce450c-7b32-31ef-947a-59fa2f8dd6ab.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     36183
IP address blocks:        172.225.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:af:90:e7:bc:ff:d1:97:d9:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=5621f63b-58df-4de3-a68b-2be1c4f247d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d7:ca:43:0e:50:43:5a:33:38:0b:44:54:64:
                    1c:8c:e1:c5:d0:36:30:da:c6:be:c9:a9:03:3f:54:
                    c3:7e:ee:b7:cb:5c:ba:f1:6b:ca:45:3e:aa:f3:f5:
                    a6:76:9b:ab:af:57:05:5e:c3:7c:ff:33:0d:ed:7d:
                    b3:4d:16:ac:c9:0f:c6:51:53:49:1f:de:11:a0:26:
                    f7:4a:79:fa:44:09:8b:f9:85:30:4e:c2:ad:d9:fe:
                    69:3d:dc:4b:eb:d5:00:a0:d6:91:c4:58:13:b5:1a:
                    96:06:35:2a:df:ab:69:3a:62:b3:af:b9:f0:d0:d2:
                    11:2e:2c:0c:7f:42:5b:fe:59:04:c9:21:ca:ac:b3:
                    50:5c:09:7b:43:15:58:92:a7:05:4e:b0:e8:0b:85:
                    99:29:76:32:24:3d:4c:f1:a1:c8:e2:08:c2:7a:b3:
                    58:d7:da:19:27:61:09:55:59:fd:c0:01:0e:db:36:
                    35:75:13:c1:75:45:c3:02:03:de:c1:c9:0f:08:d0:
                    1f:fe:03:51:a1:41:dd:6d:7e:9f:ab:80:75:59:27:
                    9a:7c:35:6a:03:d6:58:81:5f:36:8c:db:30:6f:0d:
                    2a:8e:10:5f:6b:4f:4d:10:b5:f1:39:ce:96:23:e7:
                    3b:eb:30:6e:e6:14:20:25:85:8a:7a:a5:05:a1:47:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:66:79:F7:C6:FD:7F:D7:3D:D2:EE:6A:29:54:E8:8B:86:2B:7B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22ce450c-7b32-31ef-947a-59fa2f8dd6ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:bf:15:3c:b2:44:96:c3:09:6c:5e:af:85:8c:05:b0:6f:aa:
         29:1f:1f:3e:29:1f:58:81:b7:c0:55:ad:42:8d:21:7f:2d:b0:
         ba:11:c4:c8:1f:f1:7e:27:86:32:23:62:08:98:0d:cd:01:8e:
         c5:ad:5a:bd:6c:54:d0:67:9f:79:51:d5:14:64:9a:49:e8:49:
         18:af:61:c2:60:ac:eb:22:23:1c:89:df:63:fa:7a:69:f7:d0:
         21:5c:82:27:86:85:d7:de:a1:19:87:bf:3a:2c:76:27:66:f4:
         ff:c8:b2:ef:27:58:19:99:b2:77:39:81:2c:15:63:fe:87:d3:
         f6:24:c8:09:e2:46:ca:f3:7b:74:de:4c:3d:81:0f:4e:b7:83:
         20:76:40:ed:ca:d6:56:fd:e4:9e:ed:f2:12:c0:c0:1a:cf:22:
         4b:ad:be:d9:a2:b0:c7:91:6e:83:81:fb:8d:1a:df:81:b4:68:
         5e:e2:54:92:54:a7:46:f7:ce:35:39:2e:e6:9b:59:7e:98:ca:
         60:20:5f:e9:0a:ae:b0:34:0a:88:56:96:04:f3:33:98:50:0a:
         18:e8:96:c9:f4:d2:b5:8d:1c:00:c5:dc:4b:a3:89:68:b1:76:
         b6:d1:18:8e:24:3b:25:c4:7f:9b:58:f9:07:b8:00:ec:9c:b6:
         fd:89:03:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6+Q57z/0ZfZCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk
NTYyMWY2M2ItNThkZi00ZGUzLWE2OGItMmJlMWM0ZjI0N2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NfKQw5QQ1ozOAtEVGQcjOHF0DYw2sa+yakD
P1TDfu63y1y68WvKRT6q8/Wmdpurr1cFXsN8/zMN7X2zTRasyQ/GUVNJH94RoCb3
Snn6RAmL+YUwTsKt2f5pPdxL69UAoNaRxFgTtRqWBjUq36tpOmKzr7nw0NIRLiwM
f0Jb/lkEySHKrLNQXAl7QxVYkqcFTrDoC4WZKXYyJD1M8aHI4gjCerNY19oZJ2EJ
VVn9wAEO2zY1dRPBdUXDAgPewckPCNAf/gNRoUHdbX6fq4B1WSeafDVqA9ZYgV82
jNswbw0qjhBfa09NELXxOc6WI+c76zBu5hQgJYWKeqUFoUf1xwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVmeffG/X/XPdLuailU6IuGK3tpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjJjZTQ1MGMtN2IzMi0z
MWVmLTk0N2EtNTlmYTJmOGRkNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABG/FTyyRJbDCWxer4WMBbBvqikfHz4pH1iBt8BVrUKNIX8tsLoRxMgf
8X4nhjIjYgiYDc0BjsWtWr1sVNBnn3lR1RRkmknoSRivYcJgrOsiIxyJ32P6emn3
0CFcgieGhdfeoRmHvzosdidm9P/Isu8nWBmZsnc5gSwVY/6H0/YkyAniRsrze3Te
TD2BD063gyB2QO3K1lb95J7t8hLAwBrPIkutvtmisMeRboOB+40a34G0aF7iVJJU
p0b3zjU5LuabWX6YymAgX+kKrrA0CohWlgTzM5hQChjolsn00rWNHADF3EujiWix
drbRGI4kOyXEf5tY+Qe4AOyctv2JA/Q=
-----END CERTIFICATE-----
Generated at Fri Jul 25 06:12:31 2025 by rpki-client