Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2d813ee-e641-319c-9081-c72ee2b639e0.roa
File:                     d2d813ee-e641-319c-9081-c72ee2b639e0.roa (raw, json)
Hash identifier:          9X7icpBX5+e75MRE1TTxwW6HJ6W3eOR3JaXV0ifYFoA=
Subject key identifier:   B0:37:CD:8D:99:16:CA:BE:BD:40:1D:61:59:A1:E6:88:E8:01:87:0C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ED00202050A762A766338C960
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2d813ee-e641-319c-9081-c72ee2b639e0.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     36183
IP address blocks:        172.226.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:02:05:0a:76:2a:76:63:38:c9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=b04f5c86-5a75-4b06-80d6-c1795ce3dae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d2:d9:2c:af:58:fe:61:ac:d0:e3:a3:58:02:
                    83:83:20:de:53:22:db:37:7e:7e:72:a2:bd:fc:5a:
                    41:de:ce:62:0d:88:48:77:6a:db:3d:b7:e2:95:49:
                    9d:81:99:61:b6:2f:b7:53:67:58:99:6b:36:e0:74:
                    58:cc:7d:33:c6:38:af:99:c1:07:71:16:46:7d:a4:
                    13:b9:92:3e:73:ee:40:e1:e5:21:58:48:d1:89:86:
                    c6:22:5e:3a:5c:d6:ca:39:e7:c3:35:43:a8:22:44:
                    c6:95:b2:ee:8a:d1:17:5f:9d:a6:62:3f:68:25:ff:
                    7a:3b:3e:e8:61:dd:90:2b:b8:48:e0:4a:e9:8e:4f:
                    35:ac:78:36:83:34:02:f3:0e:35:80:06:ef:15:f7:
                    6c:e7:48:9a:a3:e7:a3:45:2e:13:97:e8:fc:6d:33:
                    53:dd:71:7a:35:5d:a7:13:32:76:80:e2:28:80:5e:
                    49:88:b6:99:b3:26:f3:fc:83:e2:19:6b:30:96:b6:
                    28:93:2b:94:19:ba:2d:bd:b4:9f:29:2f:06:d6:bc:
                    f5:1a:50:e9:a7:77:fb:34:c8:85:88:5a:cc:a0:d9:
                    02:4a:b8:d8:a9:f6:86:ce:42:8d:d2:a1:2d:7a:ab:
                    4d:49:68:86:83:df:12:87:31:d2:ce:f7:c3:0a:ca:
                    d4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:37:CD:8D:99:16:CA:BE:BD:40:1D:61:59:A1:E6:88:E8:01:87:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2d813ee-e641-319c-9081-c72ee2b639e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f4:75:96:a4:57:0b:e2:10:37:48:f7:b4:66:e9:3d:3a:eb:
         91:48:54:9b:e1:8d:74:c8:11:3b:f1:84:66:f2:9b:16:dd:31:
         ac:4f:6b:bd:e1:3c:eb:5d:80:8d:21:1f:89:b3:5d:9c:12:81:
         4e:0b:19:70:79:19:18:1e:3c:de:28:97:43:6e:e4:da:a8:87:
         f9:ac:02:ae:64:e3:e2:ec:7a:d2:b0:31:6d:d2:43:8a:e9:8d:
         9c:9a:17:51:84:1c:b7:4f:b2:fa:b1:9b:84:66:ba:86:2b:80:
         b0:ed:78:c4:1e:2e:57:ee:e3:9f:0c:fc:64:cd:57:48:89:fe:
         72:6d:1b:b0:a0:e3:b8:9b:31:1e:7f:5c:19:9f:6a:90:20:ac:
         46:3f:a5:60:fa:69:2c:53:b7:a5:09:ab:1f:3c:6c:bf:da:25:
         49:e0:f4:6e:ea:aa:fc:97:9b:3b:d2:53:2b:af:c4:f0:01:6a:
         0a:4b:e6:10:31:fa:5c:7e:47:b3:63:d4:68:9e:3f:af:ad:6f:
         be:e6:c4:fa:36:0d:6a:e7:3d:94:e8:00:b5:b5:83:37:c8:69:
         bc:84:96:e8:2c:dc:ca:76:eb:4b:bd:c8:0e:71:57:e4:d5:b5:
         80:b7:c5:b6:be:e5:28:a7:66:ba:7d:18:1f:24:ce:58:2f:c0:
         45:e2:e9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:23:29 2026 by rpki-client