Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/231d511b-2822-3e93-b7db-631be943a84b.roa
File:                     231d511b-2822-3e93-b7db-631be943a84b.roa (raw, json)
Hash identifier:          SV/IG3//OVNieHxW5ZeeYR9ERXa6gqE9AaOamlnegJo=
Subject key identifier:   16:E4:7B:6B:41:F3:7F:99:F3:E0:89:7D:AE:07:A7:7E:F9:CC:E6:C2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA794F931FC6EFAB036C80C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/231d511b-2822-3e93-b7db-631be943a84b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36183
IP address blocks:        172.224.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:f9:31:fc:6e:fa:b0:36:c8:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a8f7b040-076d-4b49-864d-5176f7e53410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:98:42:3c:7d:c8:94:81:ec:5e:99:8e:25:
                    5b:33:48:9e:0f:c5:61:71:90:29:43:4b:3b:dc:3d:
                    d9:61:29:a1:1d:a6:0c:4e:7f:0a:5b:c8:ea:81:11:
                    44:e6:7a:61:e9:cf:9e:4e:f4:81:16:af:2b:20:27:
                    14:78:1b:dc:2f:9b:51:71:17:ce:a1:f3:40:e9:1d:
                    9e:1e:ab:40:25:be:40:45:39:ac:a7:c9:ea:59:a1:
                    b6:57:0f:27:56:9b:54:69:1e:94:b5:ca:a2:ab:18:
                    35:9a:6e:c4:53:a2:25:c7:bd:0e:66:33:12:1d:e1:
                    6c:f5:7b:cb:19:9c:b1:c6:fc:47:c8:79:80:f8:7e:
                    3b:5e:d2:ce:8b:fc:a3:b0:c3:eb:07:ca:75:e9:d8:
                    18:28:72:09:8c:65:94:49:00:56:dd:81:bb:30:a4:
                    27:93:b7:eb:e5:1b:e6:ad:c9:a5:1e:15:12:d7:cb:
                    9a:d8:70:7f:08:6d:63:a9:f2:01:0a:1a:99:e8:68:
                    53:90:f0:b3:22:7f:e8:f3:06:35:d5:2b:26:34:2d:
                    02:7f:c8:8c:e0:36:79:c1:ca:87:d4:0c:35:c6:61:
                    de:c3:b3:12:27:16:e2:a1:a5:65:78:cc:03:6e:5e:
                    79:ff:f7:8b:3f:18:82:91:50:07:55:1c:51:fa:50:
                    1e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E4:7B:6B:41:F3:7F:99:F3:E0:89:7D:AE:07:A7:7E:F9:CC:E6:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/231d511b-2822-3e93-b7db-631be943a84b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:a5:68:3d:bd:1c:9c:1e:f3:5e:87:f2:ca:e9:0e:89:13:
         c6:69:e5:ff:9d:1c:10:f4:00:64:e5:0b:24:52:9d:77:3e:1b:
         7b:56:e2:1a:db:69:04:66:f1:03:ee:aa:6e:8f:71:fc:e3:5a:
         44:c2:21:53:45:eb:53:4f:62:d2:54:21:24:93:a9:f7:b3:ff:
         f2:ca:b1:b4:f1:f4:b8:71:23:99:7f:08:6e:89:81:f8:47:29:
         54:e2:a5:7e:5a:43:a1:5f:d9:5d:62:72:4f:82:0f:7c:d5:e2:
         75:ed:21:08:3b:d2:75:77:7a:88:47:39:eb:fc:df:71:ca:4d:
         57:d7:7a:f6:d7:5e:4e:7e:b0:2f:aa:1c:9c:11:2c:c0:e2:4c:
         5b:f2:32:77:33:60:34:64:57:f7:e9:7a:0f:78:f2:97:07:90:
         81:fc:05:61:4a:25:8d:99:02:35:97:aa:e3:8d:36:21:54:a4:
         90:bc:4a:58:79:fe:a4:2a:55:81:8a:e8:47:7f:65:ce:34:57:
         b0:73:8b:15:0e:2e:4d:89:4d:c9:49:a0:5e:f3:15:19:53:77:
         dc:03:f2:6f:d0:3b:3c:54:0a:a5:0f:47:06:5f:e1:a8:e8:00:
         de:7f:51:c3:b7:84:9c:6a:cf:56:7c:ac:2c:cc:d6:21:af:cf:
         6c:91:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:21:45 2026 by rpki-client