Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ef40b79-e98e-3de2-9838-1c7440da7bad.roa
File:                     5ef40b79-e98e-3de2-9838-1c7440da7bad.roa (raw, json)
Hash identifier:          ppwvxBOTvNOAemv48Hna/rJrUVztNBBgCrYyWbTWdwI=
Subject key identifier:   0A:4A:47:F1:21:B6:CE:89:68:8F:2B:7F:BF:24:77:4D:9F:39:72:80
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F7BB308BE472D8C0EB6E0ED80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ef40b79-e98e-3de2-9838-1c7440da7bad.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     36183
IP address blocks:        172.224.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b3:08:be:47:2d:8c:0e:b6:e0:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=44bfecca-2c58-474b-9133-1406ee3ff901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9e:60:54:16:66:99:9f:42:fa:98:be:19:27:
                    a5:be:47:52:e3:a3:7e:34:53:a1:c5:17:e2:1d:ba:
                    95:2e:7b:09:2b:23:fa:3b:87:14:93:a4:cb:ed:56:
                    af:01:d0:5e:74:e9:47:50:89:cb:0e:9d:98:51:6f:
                    02:0e:52:94:aa:a1:2c:b7:c7:d0:1a:a6:e3:70:af:
                    f2:ef:c5:47:d1:f9:97:e4:81:c9:49:b5:ce:71:52:
                    b2:56:c8:c5:fa:64:1a:77:23:7c:ee:95:83:56:25:
                    1b:99:7c:b4:ef:52:7b:e8:4e:7e:36:77:7b:8d:2d:
                    de:7f:06:ec:5b:17:c2:13:08:24:c5:25:b7:e4:f9:
                    b8:cb:fc:c8:a5:5e:c5:08:4d:c4:70:5c:12:bc:71:
                    4c:93:1b:cd:90:8f:44:a3:a0:b5:26:db:6e:a3:ba:
                    5d:fe:c5:3a:a8:79:e4:af:b4:96:d2:49:08:eb:f1:
                    a4:64:04:92:94:24:a6:a5:6f:a2:53:95:6e:4d:96:
                    5b:69:c4:35:67:83:4d:4a:3d:df:62:db:c1:a2:a5:
                    f0:8a:d0:b9:93:8d:4c:ce:a9:74:91:01:5a:f8:e7:
                    0f:cf:ed:75:e4:fb:04:2a:53:9c:cb:11:ce:f0:b7:
                    64:1c:0b:e6:80:e8:49:b0:30:a1:63:df:fd:14:67:
                    9b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4A:47:F1:21:B6:CE:89:68:8F:2B:7F:BF:24:77:4D:9F:39:72:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ef40b79-e98e-3de2-9838-1c7440da7bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:04:07:c3:76:59:56:60:d9:0f:d3:dd:15:02:7b:e9:34:c0:
         ce:5a:08:5a:06:da:a8:c7:d6:90:72:54:41:39:7d:70:8d:bf:
         ab:d0:56:ad:0d:60:97:bb:00:2d:03:f4:58:cc:86:19:3c:43:
         27:fc:3f:d5:0f:e6:64:27:94:63:e3:f8:94:a5:be:ac:ec:88:
         df:51:56:26:ea:cb:5a:a7:14:15:66:c0:18:83:3b:c8:47:24:
         f3:06:a8:f1:2d:f9:e4:e6:cd:05:21:37:29:f1:a3:c7:af:66:
         f5:3a:12:ac:3b:05:43:24:a2:6a:25:30:cd:60:21:c9:5a:8c:
         8e:e3:2c:69:36:4b:ed:c8:5b:23:c0:a8:c5:99:e0:95:2e:3c:
         3f:97:77:d2:72:c5:fc:64:73:31:7c:c1:5d:c1:47:83:01:00:
         f8:0f:d9:dd:ee:78:0e:c4:aa:88:6f:fa:3b:ec:01:6f:e7:be:
         8d:d0:6a:ef:6c:41:91:12:41:2b:39:41:07:12:31:13:34:4f:
         39:37:9c:80:b2:c8:02:b6:e5:ea:a2:f6:b0:9a:af:08:a1:cb:
         94:18:3e:e5:cc:6e:7a:bc:7c:66:d7:a0:3e:85:51:76:a4:a8:
         e4:df:bd:b4:f0:0f:5c:24:93:fc:79:16:64:1b:34:e3:ae:c8:
         c5:b1:65:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:48:56 2026 by rpki-client