Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/396448c4-ef70-362b-8801-46eb4b67c187.roa
File:                     396448c4-ef70-362b-8801-46eb4b67c187.roa (raw, json)
Hash identifier:          uPEQcZZ8c0zYlGCMlb2Mr+cvceDVZpaO+/WyiFeM/Vg=
Subject key identifier:   73:B6:2B:2F:D4:C7:D2:FE:80:54:FF:A9:57:6B:0C:5E:BA:70:DB:3D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849C20AB7D8B73D18583CCD3A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/396448c4-ef70-362b-8801-46eb4b67c187.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     36183
IP address blocks:        172.225.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:b7:d8:b7:3d:18:58:3c:cd:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=e002b115-6659-4ab5-910f-552f85a55b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:a0:e7:af:98:8c:a2:9c:95:77:7b:26:6b:
                    1a:5e:16:a9:85:b8:16:69:5f:0d:f1:f6:e1:e0:25:
                    74:24:45:a3:32:06:95:29:65:b7:b2:1c:c4:aa:b4:
                    b8:88:6d:3d:e6:61:a1:1a:ad:4b:ee:b4:ca:98:c6:
                    29:3a:60:f7:da:83:ac:2a:cb:9d:07:05:d5:79:a7:
                    af:b4:81:cd:cf:6b:48:93:ac:b0:31:60:f8:40:6f:
                    82:4f:b4:d4:7c:4e:ff:71:6e:c1:fe:9e:f3:ba:1d:
                    af:3a:29:f6:06:16:b8:14:a2:d7:4f:38:85:44:8b:
                    b1:6b:c4:eb:52:7b:33:45:85:d0:60:97:43:5b:e9:
                    e6:50:7f:67:87:81:5d:56:78:f1:d3:a6:2f:76:cf:
                    d1:81:9f:54:f3:a4:19:0b:42:5d:31:99:d8:1b:9f:
                    a0:e7:85:6d:5d:a7:67:39:cb:49:cb:3b:4b:ee:55:
                    68:31:9d:50:e8:af:8c:51:03:38:84:1e:5e:0f:7c:
                    ac:33:77:50:88:8d:60:b9:43:c0:ff:19:13:2b:97:
                    0b:1d:e2:d7:8c:d2:31:03:92:b7:d6:67:c2:28:f0:
                    60:04:ee:1e:d9:b6:08:7d:d2:69:72:71:14:b5:2b:
                    70:da:de:84:38:32:0e:cd:04:af:9a:54:c2:52:55:
                    12:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B6:2B:2F:D4:C7:D2:FE:80:54:FF:A9:57:6B:0C:5E:BA:70:DB:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/396448c4-ef70-362b-8801-46eb4b67c187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:df:81:c3:32:23:c1:3e:64:16:07:c6:7c:9b:84:b6:3c:2f:
         a0:37:d1:0d:31:30:63:cc:5f:b7:99:1f:29:c2:89:c2:23:f8:
         68:e5:54:ff:f7:d2:ba:af:c1:f3:e0:00:31:dc:99:2e:ec:a8:
         99:74:65:4c:8b:fe:17:a9:e9:cf:6e:cc:b8:f2:f2:1e:2e:db:
         51:f9:55:8f:c9:7c:77:63:c2:d0:da:0d:c3:17:41:2a:18:aa:
         0c:73:f6:3d:5d:43:e3:dc:26:3d:bc:2e:73:35:38:c7:37:91:
         1d:0a:ea:8d:1a:12:c2:48:58:87:78:04:25:f1:3a:cc:c3:df:
         ec:f7:c9:03:96:20:82:bc:1a:b8:54:6a:d9:b0:e8:4e:df:e8:
         c4:bd:ce:b1:ef:f4:87:39:45:c0:f9:76:a3:6a:04:06:0d:34:
         33:3b:16:c8:bb:58:2f:92:93:aa:e8:64:7a:f1:62:de:a3:99:
         59:be:da:63:02:ca:15:f0:95:be:69:d4:a7:9a:83:02:db:1a:
         74:51:14:08:ed:b2:9b:9f:82:82:e7:51:ee:2b:03:7a:64:a1:
         ad:93:2e:43:71:e3:cf:36:b7:d4:ad:e7:0b:5e:a9:d5:35:5f:
         32:9e:3c:51:c7:d7:f9:07:8b:cf:10:17:0d:d6:46:f7:a4:3d:
         2a:63:35:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:17:33 2025 by rpki-client