Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14ea2c41-8ed5-3425-ae53-88edc28630b1.roa
File:                     14ea2c41-8ed5-3425-ae53-88edc28630b1.roa (raw, json)
Hash identifier:          olRUWbErEoxJsDi9HShn+tXo8bmbb4x+CXUsN2MIFyM=
Subject key identifier:   2F:8F:40:73:1A:DF:3D:F8:9D:EF:9F:EC:AA:17:87:27:BB:1B:92:66
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B8EAD027B002909F3F6A31100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14ea2c41-8ed5-3425-ae53-88edc28630b1.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     36183
IP address blocks:        172.226.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:02:7b:00:29:09:f3:f6:a3:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=649e851f-d599-4b91-9878-8c784218f0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:ab:e8:00:06:cb:79:22:c2:b9:41:34:0a:
                    bc:fd:cc:99:6c:2c:35:ad:aa:f7:47:35:6a:0f:73:
                    d0:b0:53:02:51:ec:ce:45:75:c2:a2:23:45:fc:d7:
                    11:28:82:fb:80:c0:88:95:6b:d4:09:3a:73:a2:f4:
                    b8:31:e0:e7:d3:36:67:d4:c8:85:fc:c3:f6:54:e8:
                    dc:5f:7e:05:59:bc:75:61:b1:fa:9b:54:d4:3d:ac:
                    93:61:97:67:fa:29:0b:63:31:0e:11:d4:96:82:7b:
                    d3:63:97:1b:31:4a:f8:a9:38:89:58:53:31:63:86:
                    26:30:bd:7a:c9:14:cf:f6:d0:66:ed:4a:39:d1:8f:
                    2c:35:08:f8:64:aa:e0:c6:f8:1e:21:c9:be:10:81:
                    95:48:8f:23:28:de:7d:1f:45:e2:25:c9:df:15:3d:
                    87:2f:83:f7:46:d5:4b:ba:0d:0b:c8:ae:a2:30:6c:
                    10:4e:6e:49:6e:43:3b:e9:9f:a9:56:00:0a:64:4b:
                    00:e4:fd:c0:16:d1:c9:72:96:e0:2c:31:75:cd:a7:
                    b1:11:65:7f:51:3d:ba:4f:60:da:10:18:83:d0:4e:
                    e8:32:7d:bc:dd:64:ad:0b:34:a9:32:09:e4:91:3c:
                    14:15:e2:82:02:ff:18:0f:e5:ae:1d:96:97:60:d0:
                    75:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8F:40:73:1A:DF:3D:F8:9D:EF:9F:EC:AA:17:87:27:BB:1B:92:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14ea2c41-8ed5-3425-ae53-88edc28630b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:6b:a0:ef:ea:55:27:58:a3:04:55:c3:14:28:7f:92:90:
         f4:8b:61:63:b9:9f:5f:2c:1a:5e:89:5e:71:c4:79:10:43:74:
         1b:35:0b:aa:75:f1:63:37:49:e3:0a:49:fa:2b:ff:29:09:27:
         e2:96:55:2f:40:f3:bf:eb:a9:60:08:c8:57:0e:35:97:9b:52:
         60:75:43:80:1f:9a:d0:21:45:f4:b3:25:31:b8:ea:d5:b8:b5:
         d3:72:16:af:c4:99:41:22:5d:f9:55:40:c5:f9:58:10:40:ef:
         46:4d:6c:b9:91:41:7d:58:8d:f6:01:6c:2a:cb:62:81:af:85:
         de:61:c1:df:c3:04:e9:47:8a:f7:3a:c1:5e:b0:a1:83:3e:01:
         97:2c:a0:76:f9:9a:a6:dc:d9:7a:cf:45:41:44:41:f1:c0:66:
         1e:a1:21:6b:8f:e3:3d:28:50:7f:50:7a:9c:81:2e:24:cf:ef:
         71:37:94:d0:79:b1:9c:6b:d7:ac:20:1e:11:13:72:1f:78:55:
         54:4f:ed:a5:fd:12:82:c6:18:61:bd:b2:88:33:8c:60:91:c0:
         43:31:c5:e0:58:16:cb:6e:a2:76:4a:9c:7f:9d:63:6b:00:68:
         37:8f:b2:4c:fc:e2:8c:8e:96:08:69:ca:a3:3c:0f:5f:83:dd:
         bf:56:e8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:23:40 2025 by rpki-client