Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c87d6073-d113-3d6c-a8ca-b75af538c39d.roa
File:                     c87d6073-d113-3d6c-a8ca-b75af538c39d.roa (raw, json)
Hash identifier:          WEVwpfp7hsbvfFSbnKQvNrKUJZPAX9Mimi/TBpCyLZw=
Subject key identifier:   9B:A2:96:A6:16:FC:22:AF:F5:2C:C3:1C:03:DB:CE:31:0E:EC:61:DE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A9A66397C13EA4D28A2743900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c87d6073-d113-3d6c-a8ca-b75af538c39d.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     36183
IP address blocks:        172.225.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:39:7c:13:ea:4d:28:a2:74:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=da32db3d-3220-4b31-b2d7-53171204179a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:7c:b3:9b:46:ae:76:d2:1a:e1:9f:9e:1f:
                    db:56:22:37:48:d2:8c:97:f6:5c:68:72:39:b2:bb:
                    47:40:58:6e:36:f2:7b:be:1e:01:2f:b6:b9:2c:fa:
                    c9:f8:c4:7f:73:80:f0:1d:cc:dd:e4:fa:df:8e:20:
                    5f:95:f4:3b:a5:23:33:e2:20:74:a6:af:f3:5b:ea:
                    57:06:ce:3d:2f:8f:21:0b:3d:e0:6e:f5:83:a2:90:
                    d0:06:89:95:97:27:13:60:fb:68:e5:84:95:85:0f:
                    48:56:12:c5:04:30:0e:60:5e:b0:a0:b5:cd:0b:1c:
                    74:c7:f0:99:37:db:a3:5b:8a:87:bd:b3:ee:1f:9e:
                    e2:32:2c:7c:dc:9d:fe:58:fd:9a:19:8b:52:57:5f:
                    db:09:09:d6:c4:45:be:c6:64:b2:b5:39:cc:fa:31:
                    14:15:fd:ab:fc:b2:de:c8:d8:a7:13:4d:69:56:d0:
                    c3:c8:d6:09:25:b5:ba:12:2a:75:9b:76:0b:10:a5:
                    5a:a7:54:32:e3:76:94:1c:b2:4a:9b:72:3e:22:a7:
                    98:c7:0d:cf:1f:31:cc:93:a4:26:a0:65:24:b5:53:
                    6b:ac:4b:56:74:5f:ba:28:9c:7c:b3:31:49:e8:65:
                    0f:15:8b:f6:8e:ce:e9:93:00:46:74:14:4b:35:ce:
                    dc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A2:96:A6:16:FC:22:AF:F5:2C:C3:1C:03:DB:CE:31:0E:EC:61:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c87d6073-d113-3d6c-a8ca-b75af538c39d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:81:b6:d5:61:10:79:b3:fe:43:ef:30:b3:40:b9:e7:1b:e5:
         39:7b:d0:80:37:61:f4:f7:27:4d:63:e9:d6:a2:f3:d1:31:88:
         b2:d8:9c:cc:e1:0f:e2:ba:b6:d0:6b:42:1a:c7:9b:f9:74:fb:
         ef:22:10:e7:83:a5:44:81:0b:69:0c:8f:63:0f:5b:4f:d8:78:
         37:d4:5f:14:a1:28:b7:05:39:57:40:a6:68:97:c7:31:34:b1:
         76:34:30:46:3a:f3:fc:61:49:2b:07:fa:e7:bd:1a:4b:f1:33:
         31:f5:a9:09:51:1c:b1:ba:b7:1b:2f:52:35:fd:8a:7c:8e:69:
         7b:c5:a8:cb:4e:af:74:c3:17:90:59:53:ee:7d:cc:9a:7d:82:
         b1:85:7f:87:e1:0b:f7:15:43:54:8c:ea:e2:ee:15:c8:9e:cf:
         d2:c3:08:f2:0a:c5:bc:6b:49:ed:f8:ab:23:4b:65:de:82:5b:
         6d:57:7a:70:fa:44:db:7f:41:55:87:26:86:ea:e0:55:7d:a4:
         cc:1d:50:7b:bd:47:c8:09:d4:80:89:01:ea:93:2c:ce:a7:58:
         b2:a3:24:27:b6:15:24:d9:6f:60:23:8f:0b:fe:ca:e9:42:a2:
         24:e5:a0:73:17:ea:ac:04:81:7e:b7:a0:53:a6:bd:d8:87:e1:
         65:6d:61:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:33:27 2025 by rpki-client