Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ee634e0-4175-3dba-98cc-19fd432575ec.roa
File:                     1ee634e0-4175-3dba-98cc-19fd432575ec.roa (raw, json)
Hash identifier:          T2xNU/CfDTg21qJFFcDTPwGFjVyjnIrz8+IqYgsgkSA=
Subject key identifier:   89:47:CE:FE:A2:18:82:31:B4:F1:59:06:09:F8:3E:99:7A:EC:4B:5E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B8EAD03968288C117B74EC0E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ee634e0-4175-3dba-98cc-19fd432575ec.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     36183
IP address blocks:        172.226.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:03:96:82:88:c1:17:b7:4e:c0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=b26b653e-0e57-47c9-9ead-f10986b4e400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6e:9d:df:c5:36:5d:c8:68:7c:78:90:3a:4b:
                    01:9c:b8:5d:b1:ea:9d:80:98:11:bd:7e:7b:ac:b9:
                    26:80:87:22:27:98:36:36:8b:cd:5e:32:80:3f:1c:
                    fa:f4:40:c0:56:2b:ff:b1:ff:d2:dc:3d:4e:f5:73:
                    b4:7c:49:ee:61:88:e1:66:69:aa:4e:87:a5:39:76:
                    0d:b8:58:d7:0b:da:84:a4:dd:aa:c6:44:63:da:8b:
                    4b:5c:b6:0e:a0:f9:96:d8:14:70:df:0d:9f:1f:2a:
                    d1:4d:88:d9:c0:90:43:c0:32:fd:7d:8f:c8:64:74:
                    35:fe:d0:86:78:10:a8:84:68:c2:54:2a:12:53:db:
                    9d:98:72:c0:03:ff:95:15:9f:1f:45:88:0a:d2:f9:
                    d4:88:46:18:2b:28:8b:b0:06:cc:ec:6b:08:00:41:
                    2d:21:4c:bf:cb:8d:26:33:a9:58:d9:19:a5:0e:2a:
                    bb:b3:e2:48:e9:9c:10:c3:8a:db:6c:2f:97:e3:17:
                    18:ff:95:7f:1d:9c:37:e7:2e:0e:60:3a:40:57:89:
                    3d:d7:b7:a3:b5:58:ef:0a:cd:05:54:73:e8:96:60:
                    8e:a7:28:29:fb:aa:53:e5:36:ca:26:8d:6c:94:78:
                    9b:31:b7:d4:95:5c:84:67:8b:35:58:50:a3:a5:1e:
                    93:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:47:CE:FE:A2:18:82:31:B4:F1:59:06:09:F8:3E:99:7A:EC:4B:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ee634e0-4175-3dba-98cc-19fd432575ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:13:f5:96:9c:7b:d8:ac:6c:68:5a:d0:02:11:a9:8f:53:84:
         28:5f:c3:e5:41:98:44:53:eb:5f:8e:7d:26:cb:34:24:86:10:
         7a:5b:43:f2:42:43:14:7e:e0:44:ce:e2:d1:3f:5f:ac:94:dc:
         31:a1:6b:7a:d0:27:52:23:72:4f:ca:2b:a6:55:49:87:0d:57:
         f2:ec:c7:35:e3:93:6f:46:62:de:0a:77:09:20:5a:59:46:a4:
         d6:d0:cd:fd:2a:d9:44:c5:0e:42:40:bc:b6:3e:14:ac:19:a7:
         54:54:0a:d5:40:03:c9:fb:a7:aa:1f:82:7e:66:2c:67:77:f9:
         f5:43:5f:82:7c:1f:35:6c:8f:0b:11:99:60:ec:80:8e:e2:47:
         29:2b:e3:da:71:fd:f2:8f:ff:97:24:67:bb:59:2c:dd:11:c6:
         ec:95:f6:74:14:22:0e:1d:a2:bf:52:0b:c4:c8:36:26:8d:e4:
         a6:f2:1d:0a:95:49:f0:94:78:d3:c5:6e:f0:69:f9:1b:8e:e9:
         7d:a0:6d:35:93:02:30:2f:b2:aa:22:c8:76:1a:ce:36:62:37:
         ee:22:7b:50:b7:40:31:0f:5b:a9:0f:64:41:06:92:e9:41:e4:
         47:49:b5:51:f0:67:dd:36:8a:3a:af:8f:a6:cc:c2:43:b0:92:
         4b:98:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:37 2025 by rpki-client