Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/48728101-a6a3-3601-9b30-7779ff6331fd.roa
File:                     48728101-a6a3-3601-9b30-7779ff6331fd.roa (raw, json)
Hash identifier:          lkjRE2Ciyvi9uRRLd4+ELfgpDNK9IIc1B4XYHWEpZLk=
Subject key identifier:   94:AD:FC:D8:81:C1:70:4A:DA:8D:BD:10:3C:A4:72:8A:6A:CD:C5:63
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFC95E0D81F37FF5181880
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/48728101-a6a3-3601-9b30-7779ff6331fd.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        184.94.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c9:5e:0d:81:f3:7f:f5:18:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=2e174054-e19d-48bc-9f49-09306f1b3c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:65:b9:75:03:35:f0:89:69:24:be:04:33:f9:
                    77:d8:f7:fe:51:e9:78:32:93:bc:0f:44:f4:f9:b2:
                    de:53:95:77:21:00:25:d3:7c:ee:8c:fa:f6:22:e6:
                    7b:56:19:d6:5a:fe:4e:f3:1e:8f:a4:e1:45:55:47:
                    14:f6:56:ed:ff:3e:cd:cf:bb:f3:49:f6:2d:55:9d:
                    9f:b2:b6:6b:d1:78:a6:14:b0:76:3a:56:1f:28:67:
                    c5:14:34:95:31:f1:0e:70:32:f9:02:d8:5f:cd:bf:
                    df:68:13:45:d0:a4:07:f0:30:46:11:e1:98:20:74:
                    ae:0b:b7:7c:af:58:a4:5c:84:36:72:5c:aa:ef:f5:
                    30:7c:1d:d3:02:90:7d:ce:1c:aa:53:91:bc:57:82:
                    a4:48:ff:03:5f:48:18:62:2d:c8:3d:16:49:d9:17:
                    e6:43:a5:e0:7e:7b:7d:bb:63:33:48:ec:90:9d:2f:
                    46:8b:5d:42:a9:3c:4d:98:a1:54:75:f2:a1:ff:61:
                    09:2e:e1:28:0a:35:6d:60:6c:f6:3c:13:c8:89:53:
                    1e:78:83:36:8c:ea:5f:05:f8:d5:5d:d1:fc:ed:77:
                    d7:7f:3e:7a:d5:9b:65:bf:8e:0f:03:cd:25:ce:d9:
                    bc:37:65:a2:db:cb:76:f1:d7:f6:18:32:5e:3a:ce:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AD:FC:D8:81:C1:70:4A:DA:8D:BD:10:3C:A4:72:8A:6A:CD:C5:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/48728101-a6a3-3601-9b30-7779ff6331fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:9a:33:8f:78:7b:c2:95:9e:66:a4:f2:c3:a0:f9:86:2a:52:
         92:b3:fa:e3:ce:ca:35:78:0b:4c:f8:f8:06:24:f1:83:cc:cd:
         85:9b:b8:75:f4:a5:28:66:67:55:07:c9:f8:fa:88:58:c6:6a:
         38:36:f2:cc:c9:66:81:8d:3e:03:36:f5:c1:86:11:82:bb:93:
         f7:97:d2:25:fa:11:ce:dd:af:d6:01:71:2b:65:e2:70:d8:d7:
         7f:0e:cb:f3:bc:27:7b:f0:aa:47:87:01:26:63:9d:18:39:65:
         3b:59:56:34:e0:90:ab:22:33:81:1c:bb:ec:95:c0:16:1a:63:
         04:15:bd:44:ca:77:84:b7:98:d4:00:4e:7a:2a:25:12:39:12:
         40:01:fc:48:db:0e:86:5c:53:23:d8:47:d4:2b:0c:56:33:a4:
         ea:5b:35:46:04:48:10:e7:46:f0:a8:7c:6e:dd:48:c0:91:6a:
         e1:ee:dd:6d:64:2b:51:7d:f6:04:44:6f:61:ae:a3:6c:aa:4f:
         73:cc:22:20:37:1a:53:8a:84:14:a1:cd:53:67:55:f0:d7:8f:
         ab:87:fc:0b:d4:02:b5:e9:8d:9b:9a:d0:0f:e8:fa:bf:3c:bf:
         8e:3e:82:61:29:b2:d9:5b:c0:42:0c:7c:29:ad:d7:36:4d:52:
         6c:57:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:14:11 2025 by rpki-client