Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/549d7b24-8199-35cb-b1fc-be0c2978cfc4.roa
File:                     549d7b24-8199-35cb-b1fc-be0c2978cfc4.roa (raw, json)
Hash identifier:          IIJYBxKymGBA3lUGeuau878BI85yFezygpM38qk5/Sk=
Subject key identifier:   B2:33:88:5D:31:80:6E:B6:3B:85:AF:BB:D7:E3:43:EB:BF:C6:A8:0F
Certificate issuer:       /CN=50554af3-8108-491d-84e4-240f4874833a
Certificate serial:       010D0C9F4328584A9FFB89A46D8BA50759A8E480
Authority key identifier: 62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/549d7b24-8199-35cb-b1fc-be0c2978cfc4.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     6282
IP address blocks:        185.186.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:89:a4:6d:8b:a5:07:59:a8:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50554af3-8108-491d-84e4-240f4874833a
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=a23f370a-fd11-4658-b0fc-58558626ce2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:59:7d:e7:60:25:d8:b9:9a:19:7d:b6:05:
                    30:4a:de:ab:f6:93:15:2c:52:cd:ab:7f:69:2d:b7:
                    0b:5f:43:00:14:e9:83:30:40:5b:8a:0f:8d:a1:86:
                    4d:91:be:7e:fd:c7:6d:b4:5a:83:1b:ef:7e:0d:8b:
                    a6:91:93:bc:e4:69:a1:a6:72:aa:d5:37:30:d5:f1:
                    c0:27:5c:b6:1f:cd:89:3d:d4:63:77:81:1a:3d:1a:
                    0d:8b:0c:60:0b:8f:83:87:5f:5a:3b:b6:f9:28:dd:
                    7f:b1:56:e8:68:89:d2:73:de:62:ce:fd:4e:12:5d:
                    e0:33:85:61:d4:10:14:43:c0:7d:81:7c:cf:fe:e1:
                    a2:d4:22:93:e4:84:d0:c1:07:93:8b:78:21:cf:7e:
                    02:66:c2:a8:f5:5a:d2:a2:2a:ea:6c:b7:f4:3c:1f:
                    f5:56:89:9c:58:59:b4:09:bf:c2:ce:ef:15:f2:72:
                    57:69:a8:11:98:84:d7:86:82:3e:bb:73:e6:5c:bb:
                    97:eb:07:18:b0:6e:66:ea:91:f6:b5:ec:99:f1:93:
                    e3:7b:0b:bb:e0:be:b5:68:fc:6d:bf:37:cb:91:cb:
                    3a:d5:b6:ab:9e:a7:0a:a3:6a:0b:04:90:72:bb:73:
                    19:19:e1:66:5d:78:b6:60:3a:78:d1:e4:23:3d:3c:
                    f3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:33:88:5D:31:80:6E:B6:3B:85:AF:BB:D7:E3:43:EB:BF:C6:A8:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/549d7b24-8199-35cb-b1fc-be0c2978cfc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl

            X509v3 Authority Key Identifier:
                keyid:62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.186.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e4:d4:22:cb:8a:97:99:df:08:a1:dd:c0:35:5f:8f:f7:d9:
         e8:fd:9e:0a:ba:06:21:66:d9:99:94:76:aa:56:ba:c3:e4:e7:
         43:a9:a0:d9:bd:9e:b0:eb:83:3c:ae:58:f7:80:48:b2:dc:82:
         f3:ba:fe:c0:a5:f3:d0:62:6d:0d:84:e3:4d:86:b0:1a:b4:fb:
         2b:ee:15:c8:87:f9:d2:52:81:0e:f3:16:96:7e:f0:35:14:20:
         e7:d2:9c:2f:79:9b:8c:6f:e2:5b:1f:67:94:39:85:0a:43:bf:
         0c:7a:f9:a5:d3:aa:c4:91:b6:bc:f8:5b:d6:f5:18:df:94:0b:
         75:ea:f3:64:e3:e5:3a:19:71:f8:e3:70:7d:58:e0:38:cf:7a:
         25:d4:9f:13:34:3c:ca:be:d1:e3:48:60:ff:67:d7:a2:a3:d7:
         41:24:b7:ae:d8:eb:77:b8:2e:73:a5:ee:75:34:8b:fd:37:96:
         b4:26:17:ec:d5:7b:84:a9:3d:55:75:3a:82:d3:18:04:72:92:
         20:23:2e:ef:8c:28:b9:f1:87:68:5e:e8:b2:7e:60:b5:1f:41:
         16:35:d1:a3:36:24:d9:f9:3a:63:ed:fe:56:e8:b0:1f:c7:16:
         b7:4b:fa:d4:08:6e:c6:94:c1:15:98:9f:4b:32:1a:2c:ba:9f:
         54:9e:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:47:06 2025 by rpki-client