Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eb8b41b-e5d0-3769-8f11-0d84e80c7640.roa
File:                     5eb8b41b-e5d0-3769-8f11-0d84e80c7640.roa (raw, json)
Hash identifier:          k6E9RDGSJgssl9g1B5hxhvfXqs8Yzkfu6cJaQrIVNAY=
Subject key identifier:   3D:72:89:AF:06:A4:E4:13:51:B5:51:80:AB:28:BC:F0:6F:67:58:EC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ACB411F1ACB6176E002BD6680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eb8b41b-e5d0-3769-8f11-0d84e80c7640.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     36183
IP address blocks:        172.225.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:1f:1a:cb:61:76:e0:02:bd:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=348d2d29-c194-46f4-a6ac-1b252eb63e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:19:96:c3:3a:d6:3a:48:6f:90:08:2f:c2:2c:
                    b3:c2:7c:62:28:5e:6b:b7:be:88:31:dc:2e:fb:20:
                    07:6a:04:94:1f:93:02:3c:e1:16:f9:d7:e3:fa:ea:
                    3e:aa:51:2c:c3:ad:d5:78:e2:70:01:ab:79:e2:fb:
                    27:33:5c:a4:13:ff:d9:8a:f6:a4:ea:9e:67:c9:29:
                    a6:94:ef:21:bf:63:ea:ae:ba:1c:c7:35:c2:22:61:
                    b1:c3:54:0c:e4:e1:b3:5b:6b:11:67:45:b1:12:a6:
                    e1:75:fb:d7:7f:c6:e2:62:b1:ac:06:ea:db:78:8f:
                    6f:f5:9f:88:5b:9f:e8:20:79:dd:cc:09:76:6a:4b:
                    2f:df:65:84:9b:8c:fd:4f:c1:4e:e3:50:6a:e7:b7:
                    ef:31:f9:76:90:b3:82:63:1d:b2:bf:b8:31:79:03:
                    92:91:47:26:e3:02:af:76:f7:89:ce:44:63:a8:d5:
                    54:09:e6:ca:28:c7:61:64:5c:b4:a4:f4:f0:6f:d5:
                    b9:7c:9d:31:4f:5b:fd:2f:4a:01:c9:fb:5d:fc:77:
                    f2:6f:38:18:df:25:a3:0c:8d:fd:fa:54:3c:31:0b:
                    16:85:b1:64:0b:95:78:f1:9a:e2:8b:ad:07:b4:a6:
                    0a:48:17:54:2e:72:9b:28:9d:b6:39:53:39:fb:7d:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:72:89:AF:06:A4:E4:13:51:B5:51:80:AB:28:BC:F0:6F:67:58:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eb8b41b-e5d0-3769-8f11-0d84e80c7640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:1f:77:cd:9a:fe:af:f1:bb:53:00:79:a0:b7:93:f7:00:28:
         26:a6:95:34:d0:cb:90:e6:5b:60:7c:6f:26:60:76:d3:03:3a:
         0b:04:3d:9c:c8:31:e9:96:f3:e2:37:4f:d7:b9:62:ee:c0:b0:
         ee:3c:05:6d:c1:3d:b7:49:74:43:fa:a7:98:f4:a5:f2:7b:37:
         5d:67:fc:7b:2c:2c:71:c0:09:c1:c6:e8:ac:a4:8c:ad:76:cf:
         83:73:39:7f:f2:e6:49:60:0c:8c:1b:12:3e:4f:07:2b:b9:f9:
         b9:07:39:e4:a6:b6:87:98:72:fb:8a:2f:34:f5:fb:ee:05:2e:
         a7:75:a8:d3:02:bf:02:05:f5:91:4a:d5:10:fa:31:ba:37:fe:
         38:47:e4:42:9a:61:53:93:6c:99:8a:1f:38:f2:3f:af:10:de:
         7f:39:2f:8e:c1:4b:22:67:dd:5d:51:21:6f:1c:bd:4d:b9:5b:
         7a:c6:f9:55:9e:a0:45:67:e4:49:07:6f:4e:e0:f2:f4:26:63:
         ed:49:5e:f3:1b:bc:cd:5c:52:01:e9:d2:c3:f3:5a:94:50:e1:
         89:08:7b:78:cd:c1:4b:b9:19:4d:07:93:8d:3d:77:56:6a:58:
         83:ba:57:d5:21:b6:6b:bb:cd:b1:fc:67:9f:bb:47:01:48:48:
         b7:bf:2d:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQR8ay2F24AK9ZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
MzQ4ZDJkMjktYzE5NC00NmY0LWE2YWMtMWIyNTJlYjYzZThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BmWwzrWOkhvkAgvwiyzwnxiKF5rt76IMdwu
+yAHagSUH5MCPOEW+dfj+uo+qlEsw63VeOJwAat54vsnM1ykE//Zivak6p5nySmm
lO8hv2PqrrocxzXCImGxw1QM5OGzW2sRZ0WxEqbhdfvXf8biYrGsBurbeI9v9Z+I
W5/oIHndzAl2aksv32WEm4z9T8FO41Bq57fvMfl2kLOCYx2yv7gxeQOSkUcm4wKv
dveJzkRjqNVUCebKKMdhZFy0pPTwb9W5fJ0xT1v9L0oByftd/HfybzgY3yWjDI39
+lQ8MQsWhbFkC5V48Zrii60HtKYKSBdULnKbKJ22OVM5+325PQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD1yia8GpOQTUbVRgKsovPBvZ1jsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWViOGI0MWItZTVkMC0z
NzY5LThmMTEtMGQ4NGU4MGM3NjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUfd82a/q/xu1MAeaC3k/cAKCamlTTQy5DmW2B8byZgdtMDOgsEPZzI
MemW8+I3T9e5Yu7AsO48BW3BPbdJdEP6p5j0pfJ7N11n/HssLHHACcHG6KykjK12
z4NzOX/y5klgDIwbEj5PByu5+bkHOeSmtoeYcvuKLzT1++4FLqd1qNMCvwIF9ZFK
1RD6Mbo3/jhH5EKaYVOTbJmKHzjyP68Q3n85L47BSyJn3V1RIW8cvU25W3rG+VWe
oEVn5EkHb07g8vQmY+1JXvMbvM1cUgHp0sPzWpRQ4YkIe3jNwUu5GU0Hk409d1Zq
WIO6V9Uhtmu7zbH8Z5+7RwFISLe/LdE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:53:59 2025 by rpki-client