Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa
File:                     d6fed470-07a0-3210-99f9-cb0d4504744a.roa (raw, json)
Hash identifier:          9C7Ru6zNDSyv19vgjZr9SYDWsJI9zrbmvZxyLx6NheM=
Subject key identifier:   21:F8:37:15:38:6A:6A:4A:DD:61:92:F3:D5:7C:B5:E3:53:AC:3B:28
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584A41105E13CC6176199B246170
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     40676
IP address blocks:        172.84.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:5e:13:cc:61:76:19:9b:24:61:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=3eb539a9-2811-44bc-9bfe-3013d606682f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:e5:f6:dc:d6:41:67:c6:27:39:72:cd:86:
                    7c:ef:13:2c:4e:e2:cf:f0:aa:dc:ee:dd:67:c2:13:
                    cf:04:1c:cd:b2:f3:0e:53:2a:9c:1e:bc:ba:b7:d8:
                    c9:ac:91:f8:58:b2:23:d4:54:25:ac:b5:c6:3a:3f:
                    7e:8f:17:30:42:66:53:3a:9d:c8:5d:1e:bb:1d:02:
                    43:1d:d4:0d:b9:d5:1d:29:05:a7:c0:fb:85:03:01:
                    47:e1:9f:4b:c9:60:90:33:c6:a5:47:b9:b4:aa:bc:
                    13:bf:05:62:6a:93:60:05:3c:bb:67:72:63:97:cd:
                    ee:f1:33:82:d0:91:97:28:02:94:e9:eb:8f:bf:64:
                    86:2a:e1:67:e7:e0:aa:c1:0e:25:d9:71:e5:11:8d:
                    cc:a5:03:de:94:d3:21:b8:c3:bf:4d:72:c3:e1:de:
                    62:52:64:2a:9c:d9:7d:e1:a0:ab:6a:3d:6b:63:8c:
                    04:cb:16:59:0b:02:d7:06:34:6e:80:08:23:40:f8:
                    53:9b:d4:ce:cc:80:bb:32:90:02:81:4e:d9:2e:f5:
                    57:79:63:54:07:5d:9f:3b:3e:2e:98:fe:0a:d4:75:
                    32:ff:5a:5c:d1:ab:b9:6e:31:b2:98:0e:81:91:42:
                    72:f2:59:6a:ce:4a:43:5a:7a:9a:c3:3d:a5:2d:c9:
                    b5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F8:37:15:38:6A:6A:4A:DD:61:92:F3:D5:7C:B5:E3:53:AC:3B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d6fed470-07a0-3210-99f9-cb0d4504744a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ea:b7:9f:af:fa:d1:4e:d6:e5:5b:0c:f2:b3:2b:2d:78:8d:
         00:cb:49:52:c0:41:03:99:cd:94:0b:42:73:bf:ea:7d:93:b8:
         08:e8:c3:06:7e:da:53:ba:1d:11:64:53:18:63:ad:34:ff:cf:
         b5:b8:aa:8a:cc:f0:fc:31:5c:15:96:8a:87:95:00:84:a6:61:
         e0:c2:ea:60:e5:83:2c:de:49:c7:38:f8:ae:17:40:7d:6f:cf:
         98:2e:d9:8a:3d:2e:f5:7d:eb:5a:79:d2:3d:32:90:a8:f7:9b:
         38:b8:6f:09:02:bd:a5:4e:85:64:5e:4f:1b:16:c2:81:63:57:
         42:a1:a5:8d:37:80:d6:84:27:ed:08:d1:ae:3e:c5:69:5c:fa:
         24:05:57:fb:45:40:bb:5f:57:ec:4c:08:b8:1e:14:a0:2a:f2:
         08:8b:d8:5f:9d:e3:a7:f2:d0:d1:23:a1:83:8e:74:aa:29:1d:
         9c:22:84:c4:e8:32:e2:4b:53:b6:1d:7d:5c:f9:8f:74:2d:b8:
         8d:92:16:c3:05:46:e9:ac:aa:7a:56:00:a7:77:72:21:05:9f:
         83:04:e5:08:0a:3c:84:6b:a5:84:0c:12:35:59:ba:ac:bf:88:
         7b:ac:01:01:f3:45:80:2f:16:36:c5:69:80:f0:a0:fc:49:e4:
         46:6c:4c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 08:26:16 2025 by rpki-client