Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18283967-7ffd-3736-b25e-22ff20042b10.roa
File:                     18283967-7ffd-3736-b25e-22ff20042b10.roa (raw, json)
Hash identifier:          3CGseybQEwC4hxw5Rx3LqfGD/vd7Y7FrTokQYJBnZAo=
Subject key identifier:   D8:8B:85:3F:8B:1E:7C:DC:F7:CD:7C:23:F8:D2:5E:E2:77:0E:4B:C1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ACF71091364A67F8F48A39800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18283967-7ffd-3736-b25e-22ff20042b10.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     34164
IP address blocks:        173.223.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:09:13:64:a6:7f:8f:48:a3:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=5d3c9d3e-0ec1-4659-9ee6-316b32a1ff3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:48:b2:c3:51:b6:d9:22:5c:c6:6b:0d:2b:
                    4f:64:3a:17:10:62:6e:64:35:e8:6e:5f:66:d9:98:
                    0d:e4:31:9a:87:09:83:65:76:8b:d3:1a:76:09:46:
                    05:10:ba:73:44:c4:3b:4c:4b:5f:f3:48:29:aa:f8:
                    a2:4b:60:96:41:78:6c:9b:b5:d1:83:87:ad:fc:b4:
                    5d:db:0d:8d:ed:6c:21:c1:06:c9:02:23:7f:e7:0f:
                    b7:9d:b7:1f:1a:65:90:3c:cf:7f:9c:dd:86:8d:0e:
                    ea:15:43:04:db:0f:3f:d8:30:a9:44:6a:ea:be:5f:
                    bd:e9:8a:28:92:05:aa:6b:6c:d9:83:5e:4b:5d:d3:
                    16:52:97:44:c4:95:e5:a2:9a:c2:39:06:0f:ef:fb:
                    ba:73:f6:e1:ce:13:07:84:9a:1f:18:ea:9a:27:61:
                    73:ef:12:ac:de:04:89:e7:9a:e9:16:04:ab:42:3a:
                    69:34:20:b4:a8:01:9b:16:4e:48:99:c0:0b:3b:74:
                    b0:18:b5:7e:c9:62:d4:1f:47:5f:6e:97:69:f2:2f:
                    69:d4:a4:96:78:35:86:d8:4f:32:10:94:2e:d3:cd:
                    f1:d2:61:ac:bd:5d:15:76:28:43:bc:1c:53:af:ed:
                    9d:46:29:d1:dd:13:8b:99:12:05:c7:f3:fa:40:0a:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8B:85:3F:8B:1E:7C:DC:F7:CD:7C:23:F8:D2:5E:E2:77:0E:4B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18283967-7ffd-3736-b25e-22ff20042b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.223.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c5:9c:7f:fe:2c:44:32:63:d8:72:8a:5a:04:01:6b:a5:c0:
         d3:78:c0:0f:45:74:14:d9:df:d8:21:48:34:23:27:83:ba:fa:
         cd:d5:37:9a:f8:ba:c2:cd:45:38:b5:6b:ec:6b:cc:05:96:c2:
         5c:33:e6:29:04:d8:2e:4d:b6:5f:9e:a4:29:ff:f0:bd:33:88:
         e4:cd:22:ca:b8:15:24:7d:22:6f:93:3c:e1:52:6c:da:9d:3c:
         12:fa:49:b9:a9:ff:52:ea:a8:7e:2f:91:8a:30:dd:31:a3:df:
         9e:42:0e:60:d2:89:f2:85:7f:08:fa:be:aa:6e:aa:12:94:90:
         92:51:88:f4:2e:49:20:99:3e:51:b1:d3:f7:43:0c:04:33:c2:
         a0:98:57:bf:ee:9f:e1:49:fa:fc:a1:c6:6b:be:67:4f:f6:aa:
         8e:b5:4c:c9:4d:e1:7c:4a:a6:8c:5a:61:09:50:27:b9:7c:5f:
         b2:58:ae:ef:44:97:00:8d:99:19:10:fc:0d:ed:00:26:8b:9a:
         cf:79:e1:15:0b:b4:14:42:ab:8c:ab:ea:91:13:04:04:2b:e4:
         da:4c:b8:7d:55:d0:65:37:25:5e:96:ba:6c:18:53:7c:c1:68:
         0c:98:79:43:fa:b2:c3:46:94:1d:80:85:1e:75:28:33:25:fa:
         13:67:8d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:07:50 2025 by rpki-client