Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524df8c9-153b-3562-b90e-97cf8df41341.roa
File:                     524df8c9-153b-3562-b90e-97cf8df41341.roa (raw, json)
Hash identifier:          pY2dC7dCYBtfp17CRSGP/6m14Ib0nXHfwpGk9mbdX0k=
Subject key identifier:   5B:1C:A5:58:88:F8:BA:2D:4D:E6:2B:6B:3C:0D:F3:EA:37:A9:06:F0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A9D30EDCF77783C3C95468FC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524df8c9-153b-3562-b90e-97cf8df41341.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     36183
IP address blocks:        172.225.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:ed:cf:77:78:3c:3c:95:46:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=2c79f90c-18e9-408b-aa4e-9ba8f49e52f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:58:29:ce:e4:c1:56:89:8c:62:a7:76:61:
                    64:9f:dc:e3:e0:6c:14:7c:f8:bd:41:69:1a:36:6b:
                    db:f4:49:96:e2:b6:55:30:56:12:fc:f2:a0:99:9d:
                    35:cd:74:f4:a9:1a:48:d1:1e:e3:20:e0:21:ab:a6:
                    61:9b:28:19:7e:a7:02:da:ce:85:95:33:b9:c1:1f:
                    55:71:14:58:f8:e1:93:08:c3:d3:ce:7e:70:44:58:
                    14:0f:95:64:e0:c3:0b:73:42:bc:5a:df:7c:85:97:
                    5c:eb:86:ee:25:bd:d8:2e:94:05:c8:7a:71:df:a2:
                    10:26:ef:a0:ff:33:a8:d4:ea:5f:a4:40:9d:92:ee:
                    1c:e8:33:23:dd:26:06:80:84:ac:07:a3:aa:87:01:
                    1e:29:98:53:20:1a:d3:45:5a:e3:19:24:c2:97:21:
                    59:06:e7:86:f0:c6:2f:ba:d8:fe:15:ff:36:78:46:
                    62:4e:df:73:84:3d:f0:51:1c:e4:7e:bd:1b:4d:f9:
                    d4:86:da:f4:20:42:fc:02:d4:4a:c2:7f:a9:ce:d4:
                    e2:7e:90:a1:47:8d:84:e8:50:0f:6f:7f:36:33:5e:
                    d7:72:dd:dc:2e:d4:62:5f:73:b1:37:60:e2:76:d8:
                    c5:60:10:7d:65:ee:a1:40:4c:cb:8f:9d:8f:f1:a8:
                    0d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1C:A5:58:88:F8:BA:2D:4D:E6:2B:6B:3C:0D:F3:EA:37:A9:06:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/524df8c9-153b-3562-b90e-97cf8df41341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:3d:db:9f:ee:82:a9:8a:2c:79:34:35:2e:74:9f:34:2c:3b:
         68:ef:13:aa:02:d5:b5:5e:ea:ce:fa:49:3c:90:0b:7c:0f:21:
         6c:c3:74:3c:2f:9e:db:9a:d0:ce:32:88:50:e1:c3:d1:d7:8d:
         e7:dd:00:7d:37:19:78:7e:8a:42:21:60:b7:ce:89:7e:29:70:
         b4:2b:f9:eb:d8:22:14:56:7d:49:30:fb:69:00:50:5b:42:b5:
         c1:5f:3c:b8:7f:ad:59:66:d2:97:c7:a6:85:49:8c:76:88:3c:
         e3:04:bc:49:fb:2b:08:bb:22:47:b0:bf:c1:f0:a8:aa:f8:68:
         5e:43:88:20:60:ef:d9:32:cb:8d:aa:86:52:0e:bb:26:d7:03:
         78:1f:ae:c2:e3:4d:b6:c5:16:f5:7b:a8:68:2d:9a:e5:8e:b6:
         b5:c4:01:cc:62:79:12:4d:66:78:37:39:9b:6b:93:b1:1a:33:
         3b:54:ed:6a:d2:ec:42:7f:23:da:1b:c9:f2:aa:cc:1b:f0:4f:
         45:96:ad:eb:d9:70:8e:1f:7d:42:41:28:9d:8e:7f:75:6a:f4:
         64:50:fc:5a:ed:4a:d9:fd:9b:ae:61:91:4c:fe:0b:eb:db:56:
         eb:98:5b:18:44:8f:7d:05:dd:ed:e8:98:14:5d:c1:8c:da:f3:
         bc:50:b5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:16:44 2025 by rpki-client