Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/dd7860a5-c349-33bd-9ee2-4a269bcc3599.roa
File:                     dd7860a5-c349-33bd-9ee2-4a269bcc3599.roa (raw, json)
Hash identifier:          nWgkIkUgvQdW6LW/KYfuEJ/NjdfUYTzsL2BdeyA0rV8=
Subject key identifier:   DD:C0:5E:96:DD:98:4E:D5:CB:B4:19:95:88:9A:18:13:6B:D5:16:75
Certificate issuer:       /CN=b18324da-6458-413f-b067-6f50e625e3dd
Certificate serial:       010D0C9F4328584B031695E508272A8DD250F3A0
Authority key identifier: 1A:D5:92:D7:6C:36:43:33:6A:21:77:20:51:87:03:06:4F:C1:E4:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/dd7860a5-c349-33bd-9ee2-4a269bcc3599.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     25715
IP address blocks:        184.94.224.0/20 maxlen: 24
                          192.40.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:95:e5:08:27:2a:8d:d2:50:f3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b18324da-6458-413f-b067-6f50e625e3dd
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=1f0a62e5-9512-41b7-b5d4-0bde87eb0116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:06:06:fb:00:6f:c7:cf:51:31:99:4a:aa:20:
                    39:96:55:96:c2:cc:a6:78:57:57:2c:fc:c7:e6:11:
                    d1:2a:16:ed:c2:be:f1:c3:99:66:32:30:3d:c0:f6:
                    a3:d4:27:af:af:be:73:6c:c7:c9:74:78:fc:16:7f:
                    01:c9:35:7d:6a:69:fc:e1:20:68:cd:f9:17:17:bb:
                    e7:e3:a1:9d:60:08:bd:a5:f8:1d:8b:06:e9:66:7a:
                    b1:eb:ca:09:e6:3c:28:bf:3b:02:58:1c:aa:50:24:
                    32:80:1d:a2:42:dd:82:ce:54:d6:2c:cf:d4:87:d0:
                    50:38:be:3e:06:81:fa:04:b6:21:eb:8b:9e:8f:07:
                    3c:1a:a3:8d:ef:ec:30:a9:bc:94:8c:7a:5d:6b:4f:
                    3d:9d:9f:07:1c:58:26:57:24:07:cd:3a:c7:a1:08:
                    d6:c0:9c:57:ac:e4:74:a3:f0:82:17:ec:24:9c:3f:
                    a9:d0:52:7e:f5:36:fd:3c:6d:89:d5:93:1c:cf:82:
                    d8:df:13:5b:9f:04:e0:6d:ea:b2:81:f7:c4:e0:cf:
                    58:b3:5c:7a:aa:ef:6e:22:de:89:b4:55:ba:5a:23:
                    fa:6c:56:c0:91:d6:7d:0a:5a:ea:5c:cd:03:e8:2c:
                    f2:8f:a0:fe:78:4c:3d:cb:e8:49:ce:f1:39:2e:3a:
                    1e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C0:5E:96:DD:98:4E:D5:CB:B4:19:95:88:9A:18:13:6B:D5:16:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/dd7860a5-c349-33bd-9ee2-4a269bcc3599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D5:92:D7:6C:36:43:33:6A:21:77:20:51:87:03:06:4F:C1:E4:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.224.0/20
                  192.40.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:7a:8e:7f:da:6e:5c:3c:27:3d:38:b5:0e:fb:98:dd:48:4b:
         6d:0a:fe:a7:2d:9f:5d:04:89:02:63:85:1b:19:ff:ff:ab:d7:
         85:d3:12:23:66:a5:b4:56:fa:52:e8:5f:00:2f:fa:3c:a4:37:
         64:4b:83:44:68:b0:b3:32:c4:58:b2:2c:04:1a:92:e9:78:61:
         8f:a7:58:54:3b:f4:f8:ff:45:d4:db:8c:37:6c:6f:1b:81:64:
         a9:41:fe:54:f4:8c:5a:61:18:2b:aa:5c:a1:85:a2:b6:b7:61:
         89:f0:23:1f:52:86:8a:24:f1:33:d2:72:94:c9:22:8f:ab:e9:
         5f:ea:65:e4:42:6c:77:5d:62:dc:fe:69:76:88:aa:48:78:3e:
         cd:1b:d4:65:00:8f:ae:49:0d:2a:85:6d:12:24:c9:a9:f0:5c:
         ed:7c:58:1a:59:95:78:54:bf:01:a0:39:d6:30:d7:22:ed:ec:
         68:c5:1f:56:18:81:a3:4c:5c:c9:6b:9d:ea:11:88:fa:3b:32:
         91:56:15:93:76:e8:c9:5b:4d:62:1c:5f:f3:d2:30:ce:5d:ad:
         82:a2:f1:e5:30:77:c0:d8:96:bd:04:49:b2:8d:c8:92:50:97:
         10:bf:f6:1d:06:f6:e5:c7:89:80:75:88:06:75:88:6b:30:22:
         83:ee:10:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 12:23:18 2025 by rpki-client