Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46948483-f023-326f-bd10-cc0efb79ac14.roa
File:                     46948483-f023-326f-bd10-cc0efb79ac14.roa (raw, json)
Hash identifier:          QRhlca7loYcdV+eKlJcuO7/2ntHih2sr/a8r8pLHOWc=
Subject key identifier:   73:ED:33:C2:03:20:4D:41:6E:AF:98:72:31:D2:6C:32:5C:37:F4:CB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849C20AB6F25195269134C23C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46948483-f023-326f-bd10-cc0efb79ac14.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     36183
IP address blocks:        172.225.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:b6:f2:51:95:26:91:34:c2:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=fcc25951-ad07-4fab-b586-9295397ffbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:62:25:74:91:0b:07:7a:33:71:8c:61:5e:
                    4e:d9:ea:9f:e1:47:8f:f2:f2:cd:88:41:c9:94:72:
                    43:73:14:b7:f1:59:66:6b:60:18:57:6f:38:cf:6b:
                    53:36:58:d1:58:4a:5f:5a:af:1c:3b:02:77:7c:c7:
                    f0:be:03:4a:93:16:b5:19:7c:40:12:6c:21:04:3f:
                    3f:89:51:d4:26:4b:b1:16:24:b9:12:3a:37:b1:58:
                    a8:1a:9c:d7:0e:d5:a8:61:87:ac:7b:07:63:74:14:
                    80:85:68:01:01:e5:85:b2:d4:1c:ac:0c:18:8d:10:
                    60:19:ff:19:8a:e9:d6:bc:29:c0:6f:17:34:14:b2:
                    8a:e8:50:e9:72:27:bb:f1:91:1a:b6:88:83:c4:00:
                    3f:7a:93:6a:fe:5b:5a:ff:b2:6c:51:e1:a8:8f:b1:
                    6b:43:90:52:78:de:42:29:02:db:d6:9e:40:ce:3b:
                    45:37:3b:2b:4d:6c:ac:96:de:0d:06:a4:c0:ab:c1:
                    5b:c7:e6:24:86:81:71:fe:1e:1c:a7:41:17:54:df:
                    83:42:88:d5:82:93:be:b8:db:94:cd:d6:07:c1:af:
                    1a:1d:cb:16:9c:92:c0:a4:b2:23:ba:0f:8c:7c:2a:
                    46:dd:6d:23:90:fe:a1:be:5c:51:4a:9e:9c:e4:9b:
                    81:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:ED:33:C2:03:20:4D:41:6E:AF:98:72:31:D2:6C:32:5C:37:F4:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46948483-f023-326f-bd10-cc0efb79ac14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:15:17:fe:fd:7b:f2:a3:96:a5:9a:44:2f:0f:3e:01:66:af:
         62:17:51:e9:8f:5a:67:94:cf:20:ad:8a:96:c8:54:b0:47:95:
         54:1e:3a:67:04:93:aa:22:6a:6c:9f:14:5f:18:4b:3f:67:4c:
         d0:42:57:d1:94:3a:e3:36:6c:0c:b1:72:43:22:f3:7b:5f:e7:
         b9:cf:81:c8:a5:a9:d4:f9:b9:8f:f5:ba:a8:c5:25:82:79:7f:
         8a:fd:0d:d0:d0:6f:5d:24:08:06:43:e2:26:cb:aa:28:26:64:
         b3:67:82:11:81:93:7f:cb:c3:86:0b:9e:f6:85:9c:2a:5e:be:
         28:26:61:78:56:9d:04:ac:49:5a:29:d3:d6:e4:30:24:3d:39:
         d8:0c:cb:07:32:c3:7f:2a:e3:29:81:d9:8a:41:6d:0b:b8:cb:
         bb:5e:7a:64:32:c0:a8:4d:fd:a5:37:14:09:18:12:fe:3e:82:
         6b:21:58:45:b0:75:6d:73:8d:47:59:e3:42:56:39:b0:f7:1b:
         8d:81:2c:ee:b8:90:c8:48:6a:1c:24:cb:cf:29:c7:f1:52:6d:
         a2:1b:6a:46:4d:99:67:2f:af:d5:c4:43:59:34:75:fc:fa:cc:
         6a:58:79:91:06:2f:60:78:31:f8:aa:2a:17:17:03:b8:f4:18:
         cf:1a:42:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:09 2025 by rpki-client