Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7dc4cd9-b980-365b-86cb-e7b7aff99575.roa
File:                     c7dc4cd9-b980-365b-86cb-e7b7aff99575.roa (raw, json)
Hash identifier:          cjx54eptQBrb03GWrkVIwZGKQ/t4E9gfSGAVOx7vwx8=
Subject key identifier:   F2:8C:B7:5A:96:58:5F:78:FF:2F:88:04:51:E5:2E:E0:10:29:4E:30
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EC20C7334DC798C26E2080040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7dc4cd9-b980-365b-86cb-e7b7aff99575.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     36183
IP address blocks:        172.225.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:73:34:dc:79:8c:26:e2:08:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=a1b2d2ba-64bd-4bd8-9fd8-e6b1436317e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bb:23:a9:50:99:5f:dc:4d:bc:a6:3d:cc:2e:
                    e4:74:62:19:50:53:00:25:07:1b:4e:a1:cf:cd:9c:
                    ea:4c:84:92:d6:c8:75:7a:94:d0:63:de:05:ad:9e:
                    fd:50:13:94:07:c4:43:b1:78:72:bc:31:72:a1:95:
                    83:cd:b3:34:dd:09:e5:34:3f:3a:61:f8:0d:3d:b5:
                    0b:84:ec:98:5c:1a:6b:63:8c:76:15:52:4c:fd:41:
                    ea:46:a9:da:fa:1f:f7:d7:d1:2b:74:d3:ac:76:31:
                    db:a0:6a:e7:1e:0f:28:d4:b6:20:8c:2b:c3:16:c4:
                    8f:8b:01:9e:7c:c0:fd:69:19:67:52:39:79:1e:ea:
                    f3:a0:15:45:b7:21:06:49:d5:7e:fe:e8:0a:75:2c:
                    75:bd:d3:02:35:09:d3:f6:56:04:26:22:e1:35:75:
                    b7:a5:31:c4:fb:0f:60:85:28:6d:ab:54:81:61:2c:
                    f7:36:1e:1d:fe:d2:8e:32:d0:0a:6f:6e:bc:b3:7b:
                    7c:36:64:f6:18:f6:19:58:b5:e7:ee:72:b6:d1:f5:
                    d0:c5:a3:b7:08:67:aa:c7:4d:d5:10:77:9e:fb:b8:
                    ca:a5:61:a3:c6:63:aa:33:02:0a:1d:50:99:e2:bb:
                    c2:9f:d2:3b:e5:fa:e1:a9:79:16:33:1d:04:bd:6e:
                    35:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8C:B7:5A:96:58:5F:78:FF:2F:88:04:51:E5:2E:E0:10:29:4E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7dc4cd9-b980-365b-86cb-e7b7aff99575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:8c:81:0c:b2:91:38:67:62:66:24:88:09:a8:f8:59:a2:fb:
         42:cb:11:a6:d8:70:a6:fa:ee:94:1e:ee:f5:46:0d:0e:f2:b0:
         bc:10:ac:d0:a0:de:5f:d5:31:03:7e:8b:37:51:b2:e1:32:33:
         a9:c2:0b:25:31:99:fc:71:a8:c5:10:4e:97:20:39:49:f5:73:
         8b:10:71:60:62:f9:b8:0c:1a:36:da:45:47:c6:3c:60:af:3d:
         67:29:2d:86:eb:b4:23:d2:2a:ff:6c:68:6b:03:a6:b4:9b:26:
         65:56:24:e5:6b:48:39:cc:c4:6c:73:27:1f:d6:95:7a:9c:4a:
         80:19:33:cf:b9:ea:f7:45:bb:56:75:03:dd:18:0b:11:8f:34:
         3c:de:c1:12:7e:93:7c:d6:8f:68:56:64:56:bc:34:71:21:45:
         ac:4d:67:02:94:9f:db:43:37:a6:22:b1:2f:b3:fe:77:b6:c1:
         2c:48:68:df:bc:d1:1a:5c:02:79:61:83:42:e3:5c:48:db:bc:
         cd:ef:7f:78:05:20:c6:20:5d:67:95:63:71:60:52:83:39:84:
         9c:a5:ee:55:f3:a0:56:ad:cd:0e:35:7f:ec:28:7e:87:91:58:
         70:a4:71:4a:0f:37:38:78:25:09:d3:90:1c:7f:09:73:fb:47:
         db:19:e9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:08:58 2026 by rpki-client