Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80b8be17-af71-3954-97ef-28c870217af7.roa
File:                     80b8be17-af71-3954-97ef-28c870217af7.roa (raw, json)
Hash identifier:          LQnkl0FrOlDqm2noYZvTUPM0axR2RzUT/A46YvYyPO0=
Subject key identifier:   11:D8:2C:13:C1:BA:B6:A4:6C:BA:C5:58:01:B5:D7:C3:54:4E:95:E6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849D85FCEF8F500929AE7FFAC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80b8be17-af71-3954-97ef-28c870217af7.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     36183
IP address blocks:        172.224.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:ce:f8:f5:00:92:9a:e7:ff:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=7ddc2b48-c008-4ba4-aa5b-359a10c10f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:bf:cf:ec:b0:42:fb:96:1c:96:01:bc:48:
                    af:c7:f5:8b:05:3d:ed:e2:09:f9:9c:c4:b3:ed:c4:
                    ca:93:66:ed:39:d1:bb:53:7a:b1:9f:4b:ac:9c:f9:
                    1f:81:41:8b:90:02:fb:be:8d:48:50:96:2e:d1:23:
                    27:72:43:0f:ab:ce:79:40:08:8a:09:8e:91:e8:f4:
                    47:49:34:d4:6f:b8:e9:52:c1:83:ee:f5:4a:bc:56:
                    db:c2:7b:58:3d:3c:36:fa:49:bd:a7:d5:4a:ff:92:
                    54:09:bf:d1:a2:ea:fe:eb:94:c4:1d:e6:96:8a:7d:
                    71:02:27:14:b7:9d:a3:12:a4:3d:7a:44:fb:52:15:
                    8b:af:b3:2a:7f:6d:5e:39:29:1a:71:ba:63:50:87:
                    dd:07:20:ab:e8:70:31:35:ad:88:ea:b5:c2:4e:ca:
                    49:f5:6a:99:a0:22:d1:18:f3:29:4c:3e:83:00:72:
                    4f:69:ae:88:5c:db:46:5b:d4:8e:bf:94:ab:9b:42:
                    31:b2:e2:37:7c:bc:67:c1:b7:a7:48:36:3b:ab:85:
                    48:55:fe:97:89:d5:30:bb:1b:a7:c4:5b:1a:39:a6:
                    9a:27:1a:a5:b8:b9:0a:42:9f:28:9e:c2:86:ba:77:
                    d4:03:ae:17:00:8e:2f:e1:d2:2a:a2:6f:bf:9e:e0:
                    ea:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D8:2C:13:C1:BA:B6:A4:6C:BA:C5:58:01:B5:D7:C3:54:4E:95:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/80b8be17-af71-3954-97ef-28c870217af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1d:2d:94:88:b9:72:03:49:ef:98:00:81:83:51:9f:6c:32:
         b8:46:56:f6:96:60:4f:67:eb:01:5d:48:20:a4:d5:88:4a:5a:
         f3:22:ee:52:f9:bb:53:00:1c:40:cf:c7:36:e9:65:ec:7f:cb:
         c2:62:17:33:dc:47:d4:55:6c:64:32:4b:ed:44:00:7a:24:ac:
         51:d9:13:ba:45:5e:fe:dc:0d:42:32:56:12:9b:5d:8f:20:f2:
         41:0f:d0:45:52:53:0a:e2:01:24:f1:6a:84:0d:87:33:ea:e7:
         70:66:1b:c2:af:65:e2:40:ac:90:8f:53:d4:55:b2:58:08:e6:
         be:dc:86:69:8a:a0:15:af:9c:75:db:7f:26:99:4f:31:c0:4e:
         13:02:cc:bf:a8:f9:a9:1f:91:d9:fc:ab:51:75:3b:94:c1:e9:
         7b:0d:29:0d:a0:7a:94:d8:2c:ba:3c:44:94:a3:56:ea:ec:e1:
         99:e3:35:3c:c5:a7:57:cf:97:50:68:08:e6:fe:54:94:b4:f0:
         0a:89:d0:28:16:fa:bb:07:8b:c2:47:df:bc:ab:07:99:cd:ee:
         0a:29:db:09:48:16:1c:c3:62:19:62:12:50:e4:17:92:19:46:
         9c:20:31:0c:b6:2b:4f:f7:3c:bb:f4:93:1f:07:7b:19:f2:e8:
         49:dc:5a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:51 2025 by rpki-client