Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6b9b5c0-549d-3e8f-91fa-5fb0e0e4cc3b.roa
File:                     b6b9b5c0-549d-3e8f-91fa-5fb0e0e4cc3b.roa (raw, json)
Hash identifier:          HA/cSrZstZF6TC3WpUpTKT6R5FfXVSZWjMTNJ0fhNa8=
Subject key identifier:   19:4B:0C:D6:67:7B:6E:13:66:18:6B:A7:50:3E:01:02:45:05:28:83
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584B8EACF88AEA9394BFDACC8200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6b9b5c0-549d-3e8f-91fa-5fb0e0e4cc3b.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     36183
IP address blocks:        172.226.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:f8:8a:ea:93:94:bf:da:cc:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=38eafa14-2fbe-4573-b0c7-6b10d6ca4e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:de:72:a5:85:05:18:8f:17:d3:37:69:3f:
                    51:ec:90:7e:bc:43:17:e6:a6:18:19:6d:c8:f8:c1:
                    87:91:68:9a:a7:5f:78:87:f8:19:2c:f7:38:90:37:
                    45:1b:12:75:85:21:f3:a0:b8:5d:6e:35:fd:dd:28:
                    9c:d3:a9:2a:1d:2a:fb:57:e6:8f:8e:84:e6:97:b9:
                    ce:c3:8e:7a:b7:6f:9b:bf:14:71:bb:de:95:89:7b:
                    61:95:21:f5:60:c7:25:ec:6d:59:49:2c:fc:93:60:
                    be:b7:c0:66:3c:b9:60:69:0f:2c:2f:5e:52:2a:33:
                    e0:5b:df:a3:50:38:ac:4f:34:62:bf:ad:e8:32:fe:
                    03:a0:8a:5a:96:82:44:4c:4b:16:2b:b9:0a:57:ec:
                    4d:30:fb:fd:f3:35:2d:b9:75:41:a3:19:ec:c6:27:
                    2e:0f:50:fa:e5:49:fd:8a:f8:de:04:17:27:b6:34:
                    e1:f1:ac:f0:44:85:77:73:e7:9b:7f:2f:5a:eb:5f:
                    1d:e6:cb:ea:e5:2c:ba:63:30:f9:9a:80:b6:ab:5f:
                    c9:ca:eb:d9:f9:64:50:19:2b:66:c3:13:26:ca:7b:
                    39:21:3f:70:f0:31:74:0f:22:83:82:77:3a:6f:3a:
                    ba:59:72:42:ef:0c:10:69:f8:09:94:26:a4:b6:ab:
                    07:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4B:0C:D6:67:7B:6E:13:66:18:6B:A7:50:3E:01:02:45:05:28:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6b9b5c0-549d-3e8f-91fa-5fb0e0e4cc3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:95:78:f2:a9:12:dc:e7:17:dd:5b:9d:5c:87:fa:fa:e5:b6:
         ef:79:e0:13:0f:f4:fc:cc:52:d3:1b:8e:bd:95:a5:2a:11:63:
         63:c6:81:3f:a5:f1:64:56:01:18:7d:d5:00:d2:ce:9a:b9:1f:
         bb:1f:1f:49:2b:01:eb:43:4d:e2:42:70:02:51:01:1a:94:1e:
         aa:9e:9e:b3:6f:6a:ea:e4:38:e0:8e:12:f2:d2:d4:26:90:ca:
         e6:ec:d5:25:80:6e:56:55:b8:1f:d0:f7:62:64:fb:5c:8d:64:
         14:d8:ce:5d:09:d4:a4:6b:56:3e:7c:a9:cd:54:23:f7:1c:27:
         db:19:9a:d6:ac:54:0d:f3:8e:e0:7f:0f:67:50:e8:d9:e6:ee:
         03:7c:19:58:35:7c:6c:db:65:8b:1c:03:1c:3a:1f:e2:f8:59:
         74:78:e3:4e:2a:b9:12:52:cd:84:83:b1:65:88:4f:43:f4:90:
         f1:3c:be:b1:00:78:cd:19:09:f5:70:d0:a2:67:1b:4e:d5:ca:
         7a:43:2f:b9:a3:4b:c7:22:a1:ea:7a:10:09:3a:97:8f:8f:71:
         32:ea:26:fa:8a:ee:fa:dd:26:8a:02:84:f6:35:4d:69:e1:65:
         36:ce:2f:78:bd:2b:5c:2e:dd:c6:26:17:5d:bb:30:f6:71:bf:
         ad:52:3f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:28:57 2025 by rpki-client