Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08eb82d7-93de-303c-84dd-6095690ff48e.roa
File:                     08eb82d7-93de-303c-84dd-6095690ff48e.roa (raw, json)
Hash identifier:          cKnn2Qp7o7f+78gLhub/x1TvZc1lIhTDdwR/BW2IA6o=
Subject key identifier:   6F:E7:8A:77:A5:DC:F8:BE:9A:15:EE:BD:8A:8F:AD:EC:E4:D4:A3:CC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849F44A6219C238BDF4FBAF9200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08eb82d7-93de-303c-84dd-6095690ff48e.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     55836
IP address blocks:        184.85.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:62:19:c2:38:bd:f4:fb:af:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=85251a1d-0fcf-4191-83f2-4e7e48ed114d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:14:29:c6:80:c0:c5:ae:0c:d1:d9:c2:62:c2:
                    82:17:e7:3d:a1:78:3b:34:b3:f2:b0:b1:ce:07:37:
                    09:b7:8b:62:a3:58:b8:74:df:d3:2d:2f:75:70:7b:
                    d5:28:4d:0b:98:ac:c9:b8:6c:09:f7:ee:45:07:57:
                    db:ac:6c:67:9e:f5:5e:83:b2:4a:9a:16:04:30:16:
                    04:ed:bc:08:33:e0:39:be:be:69:7e:91:fa:50:c6:
                    35:59:5f:f6:e7:90:8f:5f:72:b2:c1:98:9d:f4:17:
                    ed:d1:94:fa:51:0f:41:55:1f:30:08:92:6f:9f:df:
                    3d:c4:cd:9a:bd:53:6a:f5:ad:33:af:0c:3f:88:cf:
                    25:19:ae:32:ed:fc:d9:47:19:52:37:8c:8b:ee:64:
                    60:8d:36:f5:11:9d:6a:a1:42:ae:bb:ab:65:39:75:
                    2c:47:36:5e:39:c6:61:38:b8:53:34:e0:1e:4e:52:
                    ed:36:d0:ad:b3:0e:ae:95:ff:b0:f6:6b:4f:a1:89:
                    e7:71:67:bd:0c:38:28:ff:3f:b0:cd:05:f8:f5:21:
                    25:ed:8d:84:fe:a7:55:7c:5e:bd:40:1d:d0:2a:04:
                    f8:fc:08:05:15:ae:f4:f2:f7:da:1a:f5:bc:4a:f8:
                    5e:95:c0:73:3a:1c:a9:28:4f:1c:ec:d1:60:1d:cd:
                    ee:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E7:8A:77:A5:DC:F8:BE:9A:15:EE:BD:8A:8F:AD:EC:E4:D4:A3:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08eb82d7-93de-303c-84dd-6095690ff48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.85.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:36:d1:a3:79:36:75:e8:57:e8:ba:9d:a9:0f:6a:f3:be:d2:
         cf:42:b9:40:fa:56:d6:f6:b1:8f:bf:c0:e9:3b:55:31:ea:b2:
         c9:a3:e7:5a:c5:63:49:27:cd:40:ac:20:a8:46:6e:97:d4:95:
         8b:81:4b:a4:1c:c3:fd:9b:16:f6:32:72:fe:fa:9a:bc:68:f8:
         80:44:b1:ab:87:76:f0:4e:10:4d:22:c7:d8:02:c7:95:8c:76:
         a4:cf:33:c3:ee:76:c1:b5:3b:02:c1:ed:19:11:5a:fe:c5:90:
         1e:a9:8b:1a:94:7c:98:b0:55:fd:30:48:47:95:51:c0:de:37:
         ab:1c:72:10:f0:7b:71:2d:21:62:e8:6b:cf:55:a7:73:e9:08:
         15:7e:e1:63:b8:84:39:44:4d:bc:4a:05:7e:6c:71:80:f9:d7:
         55:db:45:af:7d:b4:4e:47:ad:f8:46:22:54:7d:e5:d1:f9:f9:
         cb:23:24:54:c1:8e:b2:7f:24:8c:d7:b3:e6:80:4f:6d:da:8a:
         3e:b3:e4:82:6b:dd:5c:fe:6c:ad:8f:5b:fd:29:1a:53:27:47:
         f7:76:51:3a:0d:64:bd:8a:b4:48:02:45:ab:f2:ff:a5:d1:17:
         9f:f6:7a:dc:41:68:24:d6:8c:cc:ed:78:ff:e4:81:0d:d5:f1:
         1c:33:8c:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SmIZwji99PuvkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk
ODUyNTFhMWQtMGZjZi00MTkxLTgzZjItNGU3ZTQ4ZWQxMTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhQpxoDAxa4M0dnCYsKCF+c9oXg7NLPysLHO
BzcJt4tio1i4dN/TLS91cHvVKE0LmKzJuGwJ9+5FB1fbrGxnnvVeg7JKmhYEMBYE
7bwIM+A5vr5pfpH6UMY1WV/255CPX3KywZid9Bft0ZT6UQ9BVR8wCJJvn989xM2a
vVNq9a0zrww/iM8lGa4y7fzZRxlSN4yL7mRgjTb1EZ1qoUKuu6tlOXUsRzZeOcZh
OLhTNOAeTlLtNtCtsw6ulf+w9mtPoYnncWe9DDgo/z+wzQX49SEl7Y2E/qdVfF69
QB3QKgT4/AgFFa708vfaGvW8SvhelcBzOhypKE8c7NFgHc3uswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG/ninel3Pi+mhXuvYqPrezk1KPMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDhlYjgyZDctOTNkZS0z
MDNjLTg0ZGQtNjA5NTY5MGZmNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuFXcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHw20aN5NnXoV+i6nakPavO+0s9CuUD6Vtb2sY+/wOk7VTHqssmj51rF
Y0knzUCsIKhGbpfUlYuBS6Qcw/2bFvYycv76mrxo+IBEsauHdvBOEE0ix9gCx5WM
dqTPM8PudsG1OwLB7RkRWv7FkB6pixqUfJiwVf0wSEeVUcDeN6scchDwe3EtIWLo
a89Vp3PpCBV+4WO4hDlETbxKBX5scYD511XbRa99tE5HrfhGIlR95dH5+csjJFTB
jrJ/JIzXs+aAT23aij6z5IJr3Vz+bK2PW/0pGlMnR/d2UToNZL2KtEgCRavy/6XR
F5/2etxBaCTWjMzteP/kgQ3V8RwzjP8=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:21:47 2025 by rpki-client