Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ef40b79-e98e-3de2-9838-1c7440da7bad.roa
File:                     5ef40b79-e98e-3de2-9838-1c7440da7bad.roa (raw, json)
Hash identifier:          aecB2jYRqOTrXZb/xTMt7GmhaafKfp3HHPlEdu/vJQk=
Subject key identifier:   0C:47:66:CA:06:EF:D4:63:85:FD:5F:DF:3A:00:AF:30:BE:EC:8D:96
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ED9C7624E1F364B7E87B20E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ef40b79-e98e-3de2-9838-1c7440da7bad.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     36183
IP address blocks:        172.224.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:62:4e:1f:36:4b:7e:87:b2:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=e0dad12b-eea3-4573-bc7c-a97e813cb3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:72:27:4b:17:8e:20:fb:57:eb:14:cd:2c:
                    90:cc:9d:01:e3:59:61:bf:d7:66:8d:6a:ea:d1:9b:
                    58:1f:01:12:a1:b3:8d:86:67:0f:ef:13:02:92:54:
                    fa:90:49:5d:3b:24:38:74:6a:27:7d:d4:41:96:46:
                    00:4d:61:96:5b:0a:07:9f:d7:63:67:da:ef:81:49:
                    47:92:4a:1c:96:11:2a:f6:9a:6d:b3:d9:24:f8:f7:
                    9c:e7:18:15:02:9a:eb:99:c9:b0:66:95:61:9b:98:
                    54:2e:a8:18:83:e0:1d:6d:a6:76:4b:2b:86:ff:cb:
                    8e:bc:0d:39:da:c4:00:a9:da:cb:3f:73:b8:6e:3c:
                    93:b6:40:c1:fd:6e:7e:28:3c:b6:c1:33:bf:23:69:
                    69:2e:9f:01:98:11:ce:e6:94:6e:6d:25:6b:93:0a:
                    55:20:1f:58:06:77:82:1d:bb:ac:e9:4f:97:5e:79:
                    c9:25:8b:16:87:f0:24:13:14:dd:10:2f:ce:e0:38:
                    02:da:68:79:3b:4c:ff:39:2b:09:0f:73:74:fc:f5:
                    99:c3:38:be:d3:6c:49:76:35:c4:f7:98:2e:a6:2c:
                    01:f4:8e:75:7e:c3:34:c0:59:31:1b:9a:91:be:7b:
                    e8:90:43:49:b6:d9:f6:25:d1:d3:fd:9b:35:4c:5b:
                    0e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:47:66:CA:06:EF:D4:63:85:FD:5F:DF:3A:00:AF:30:BE:EC:8D:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ef40b79-e98e-3de2-9838-1c7440da7bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:68:8d:5e:1e:0b:e1:11:47:1d:5d:8f:75:b5:e9:42:cd:59:
         1e:8b:83:85:6f:fb:5d:da:d9:4a:03:97:6d:6d:ed:d4:b2:01:
         29:24:ac:a1:d0:9c:85:06:d7:5b:4a:59:f7:2b:3c:26:f4:60:
         31:2e:e2:1d:2e:b4:d2:2f:a6:11:99:9e:96:fb:eb:e3:5f:c7:
         8b:d9:d6:5b:04:50:b1:69:42:50:00:50:80:68:63:f9:11:ef:
         6a:9b:7b:24:4a:8f:a0:7a:dd:e0:96:e0:36:eb:9a:5d:f6:a7:
         41:57:79:15:5f:6a:d0:09:f1:1c:1e:65:86:ef:17:da:1e:ab:
         94:a2:27:cb:2c:ab:2d:91:3a:0c:0f:53:86:8f:11:a0:19:63:
         94:c7:c3:be:ad:be:f7:c8:5f:a2:62:a7:0f:0b:7b:2a:36:53:
         68:6b:26:b3:10:0d:51:13:fe:41:0a:82:cb:14:71:34:d7:47:
         eb:b7:f6:49:1a:8f:c9:df:6a:1b:85:f5:46:6f:9a:c8:34:f7:
         15:09:93:31:75:bf:43:58:72:fd:b4:40:b3:0b:8a:4a:b1:8d:
         26:ff:5f:53:5f:27:bf:06:75:a5:d8:40:9b:3e:53:f0:43:67:
         53:7b:bb:5a:ab:46:94:30:54:54:c0:ab:e6:78:a0:68:26:40:
         ee:eb:50:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:08:46 2026 by rpki-client