Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a10c5298-0414-3e67-8988-567019aa7595.roa
File:                     a10c5298-0414-3e67-8988-567019aa7595.roa (raw, json)
Hash identifier:          qWAl45stCIHrmuqN+4eRpWrx3j0F7GVrKnpjGysDEMY=
Subject key identifier:   F4:27:DA:28:32:C7:E5:D7:1F:59:04:C1:C6:79:B6:FB:F7:71:9E:ED
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ED9C760AB11779E9139AAFFC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a10c5298-0414-3e67-8988-567019aa7595.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     36183
IP address blocks:        172.224.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:60:ab:11:77:9e:91:39:aa:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=29ef4f7b-04c5-40d0-b5ab-a81533fbaf3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:be:6c:07:6a:93:2f:39:6a:10:fa:30:b0:
                    f4:da:1d:e8:bf:e8:93:01:18:f9:e9:da:16:5c:1a:
                    3e:5e:0b:36:7b:1c:e3:e7:29:5a:02:e4:11:4b:1f:
                    7f:9c:65:a7:b7:8e:44:a7:31:13:f3:62:ce:6e:7b:
                    b9:00:84:dc:82:33:63:c4:f2:2c:e7:20:2c:c5:de:
                    5d:d6:b2:8f:3f:29:16:35:49:a5:eb:b1:91:27:c3:
                    fb:62:2f:7b:d3:7b:98:b8:f9:56:31:4f:69:06:48:
                    61:93:1a:40:3f:81:f3:dc:7b:ba:4b:85:c3:d3:02:
                    28:e8:47:ca:58:25:3a:7d:76:f8:78:0b:28:ab:69:
                    f4:0f:8a:07:ce:08:71:b9:31:93:e8:cd:22:8b:3d:
                    04:b8:8a:42:11:ef:91:c7:bc:ee:98:db:22:2e:39:
                    a0:39:fa:09:dc:47:82:a2:88:16:a8:d6:d9:c3:d1:
                    14:29:ab:f1:10:98:94:b8:5a:ef:33:a0:c0:a2:73:
                    05:3c:bf:38:bb:01:ca:db:5b:98:dd:f3:cf:da:8a:
                    ed:30:b9:ec:92:fb:f5:5e:62:6b:da:15:7e:b9:64:
                    84:74:f6:f3:50:09:5c:d4:a8:a9:8b:a4:8b:35:e5:
                    b0:18:d6:a6:75:56:c4:0b:1f:de:29:59:59:ee:e5:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:27:DA:28:32:C7:E5:D7:1F:59:04:C1:C6:79:B6:FB:F7:71:9E:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a10c5298-0414-3e67-8988-567019aa7595.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:96:3b:f0:df:33:91:50:bb:01:a2:43:10:50:e0:02:15:c2:
         18:00:c3:ab:4d:c6:f4:18:b3:85:e5:d6:2d:8b:aa:54:df:be:
         d4:0a:4f:75:1e:9d:53:16:c8:e4:28:48:78:17:69:e2:d0:04:
         dc:43:17:6c:93:2b:34:60:4d:9b:dd:58:85:76:7e:df:85:f4:
         69:40:11:50:4c:a9:6f:65:a4:56:00:92:23:01:73:20:02:e7:
         55:c6:ab:d7:af:c4:f8:ea:4c:3e:5e:ca:ec:62:8e:1e:ca:d5:
         6e:81:89:b1:62:9e:ff:da:0b:f9:e9:42:4c:77:9d:0c:5c:c2:
         f7:aa:1c:15:fd:1d:c9:58:fa:f2:b3:8f:0f:99:06:1b:d9:55:
         08:3e:c3:ea:bb:3b:18:65:33:c4:75:e6:85:f5:40:e9:b7:77:
         5a:e7:fb:ac:7f:8b:2d:b6:2a:2b:cb:fc:c1:fb:64:12:7b:aa:
         47:e5:f4:b5:af:ae:a7:d3:f5:fb:e0:68:2c:7a:45:d9:96:84:
         37:c5:d8:5a:e0:82:e1:6a:dc:8f:9f:14:8a:e3:49:6e:27:2a:
         48:af:14:9e:2e:87:36:cc:71:c7:ae:9c:6e:73:74:13:1c:d7:
         4c:da:e7:b8:3d:5e:2e:63:85:a8:ee:c7:db:20:60:ec:8f:f2:
         4e:03:d1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:39:59 2026 by rpki-client