Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/851266c0-0dd2-365a-aa8e-ab5cdc6ad5b2.roa
File:                     851266c0-0dd2-365a-aa8e-ab5cdc6ad5b2.roa (raw, json)
Hash identifier:          Y3yu0u/VzJLSi/uJ+hm1kxNb5fOlgBMzOcW+E5y8uOM=
Subject key identifier:   9C:6E:3F:1B:7F:A1:B0:77:0D:C0:9C:04:A4:FD:5A:C3:C9:C0:11:A7
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFC9A1CE77E1B917C66AC0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/851266c0-0dd2-365a-aa8e-ab5cdc6ad5b2.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        184.94.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c9:a1:ce:77:e1:b9:17:c6:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=b887b33c-ccad-4653-bfa7-b5ecc79b3f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fc:57:ab:92:c8:0b:ce:d4:37:a9:d1:9a:c5:
                    02:a7:47:50:ae:93:f8:a3:13:9c:3d:15:5a:2b:53:
                    bc:24:a3:92:2e:54:24:b0:fe:1b:b0:50:a0:ae:2b:
                    f7:e4:3b:38:00:f5:a8:95:d5:06:20:62:d7:44:d7:
                    ab:21:d9:ad:3b:24:40:71:9c:0c:f2:69:82:9c:c3:
                    ce:31:1e:06:c7:2f:c0:8e:1d:47:22:87:be:38:28:
                    e6:60:76:ac:a5:7e:e8:fa:de:36:ca:17:e6:44:79:
                    11:17:c1:5d:f1:03:db:85:64:c7:ab:59:2f:8f:7e:
                    2d:ae:8b:64:5a:dc:d1:06:f9:1d:fe:b8:35:58:f6:
                    06:f7:47:f4:34:24:3a:52:c8:28:a6:1d:d9:9d:44:
                    18:d0:8d:16:c5:5c:27:eb:04:9c:71:65:3c:b8:0b:
                    e8:47:31:89:c6:90:25:3f:56:6f:67:64:73:c2:cb:
                    fc:3e:00:8d:41:8c:dd:2a:32:7e:93:c1:0a:e3:03:
                    5b:bf:64:ae:0f:f3:9e:78:8a:af:36:fb:15:17:71:
                    8b:f7:55:55:6b:bc:f8:3a:af:b4:d9:f7:58:2f:8e:
                    96:08:4f:75:25:e6:ea:16:2d:90:f7:ed:39:ad:42:
                    d6:27:39:b1:ad:01:b6:2a:3c:b1:96:c1:81:0e:d6:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6E:3F:1B:7F:A1:B0:77:0D:C0:9C:04:A4:FD:5A:C3:C9:C0:11:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/851266c0-0dd2-365a-aa8e-ab5cdc6ad5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c2:b2:f4:34:e9:be:af:5c:4d:11:94:68:94:71:62:36:9b:
         c5:90:69:5d:95:aa:14:8e:ae:4c:52:d4:c2:a9:12:8c:4b:de:
         8f:5f:9d:46:29:48:b7:da:8b:dd:0e:8a:e2:e4:a3:0f:0d:4e:
         59:f7:36:75:67:d4:ee:86:c9:5c:82:b9:0d:f0:0c:60:6e:aa:
         7a:95:ef:6f:09:15:7d:e7:ee:0e:43:d1:cd:a4:bc:86:45:d9:
         7f:75:9a:46:48:dc:6e:e2:c2:f8:04:83:14:b5:49:1b:46:37:
         16:4a:02:95:d9:57:d4:ef:2b:47:c5:40:08:20:cd:82:ad:c6:
         49:a3:92:b5:3b:c4:4a:f2:f3:88:ab:ae:87:06:08:9e:a0:a5:
         72:53:0e:0f:e0:b8:ce:ff:c3:d5:ae:66:9b:cb:4f:27:e3:af:
         4a:98:64:bb:cb:77:75:3a:5c:8e:b7:e0:0e:40:4c:03:b0:de:
         21:e5:bb:6a:88:90:3e:38:58:e5:8b:77:44:1a:c4:23:c5:f7:
         61:10:5f:b1:26:c3:c1:9c:85:bd:c7:33:72:fd:12:6f:27:18:
         8a:b9:65:ba:6f:07:7d:26:11:5c:79:b1:f1:c9:d0:21:7b:80:
         d1:7b:32:71:d7:a6:ef:c0:22:ad:32:0b:d7:75:e3:ca:65:4e:
         bc:48:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:59 2025 by rpki-client