Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0da5e841-7310-3a09-9482-1c10911b12cf.roa
File:                     0da5e841-7310-3a09-9482-1c10911b12cf.roa (raw, json)
Hash identifier:          qbOZvWHjdMslbpmz4ya2ClGoIjqD11KWnoK9ym6zfAk=
Subject key identifier:   B9:C1:93:30:05:01:69:DC:59:D4:6D:DE:2B:56:1A:1C:DE:A1:B6:75
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849ED4FD99CD053A994ABB8A2C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0da5e841-7310-3a09-9482-1c10911b12cf.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        184.51.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:d9:9c:d0:53:a9:94:ab:b8:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=1dbd0dca-82d4-41ae-aade-dc35c4c1ac17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:44:aa:1b:eb:c3:d8:39:a7:7b:db:35:9d:fb:
                    bb:09:35:3c:26:80:fd:02:54:19:f9:b7:88:8e:7d:
                    e5:ad:c1:4d:8f:82:50:d7:74:36:a8:0a:b0:91:83:
                    28:af:f2:02:72:bd:9e:1d:19:5d:57:32:e9:70:9e:
                    1f:2e:44:6e:0e:3a:e8:0f:ff:e2:4a:5a:68:33:d8:
                    fa:e5:55:3a:47:b0:c1:3b:fc:73:e9:ef:ae:8a:ba:
                    59:3d:49:1a:a9:a5:4f:43:de:88:cf:44:90:c3:d5:
                    08:8f:64:c6:b5:ab:c6:ae:b6:28:2a:36:a8:bf:c5:
                    d9:f9:98:a2:b2:8b:9c:9f:bd:a0:ae:38:61:f4:9b:
                    4f:4a:28:f3:ae:50:01:cf:d7:6b:e3:64:e3:e6:06:
                    51:13:0f:ed:2d:21:15:2c:0e:2d:b5:c6:e9:75:b9:
                    48:d2:78:0b:ef:20:e0:95:05:d9:ba:09:44:8b:39:
                    15:91:62:26:a9:c8:8e:74:9c:44:79:33:82:16:df:
                    8b:e6:ff:db:3f:e8:67:ae:60:ec:6d:57:78:ea:f7:
                    31:98:59:a3:f2:f9:56:f1:49:a5:dc:76:ad:23:b8:
                    9b:2d:f6:86:02:d9:80:30:59:3b:a3:01:2f:a9:3e:
                    7e:1e:99:e4:3e:38:80:11:9d:2d:63:71:07:94:f1:
                    5f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C1:93:30:05:01:69:DC:59:D4:6D:DE:2B:56:1A:1C:DE:A1:B6:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0da5e841-7310-3a09-9482-1c10911b12cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.51.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3c:ca:b5:7b:b3:f2:2a:8c:e7:38:70:04:e7:19:23:e8:19:
         8a:b9:97:a1:36:c2:12:f7:49:61:03:d6:f2:33:1f:76:ba:09:
         6c:71:1d:14:b4:5a:88:6a:dd:94:65:bf:1a:3e:ea:aa:ea:f4:
         aa:45:35:13:32:77:08:90:95:21:61:b0:a4:ff:50:1b:1d:dc:
         6f:e8:9b:49:78:0b:0c:78:c5:97:f0:72:83:23:99:bd:a4:7b:
         17:39:6b:87:7b:3c:43:51:46:61:2d:9d:2f:be:b6:f5:e5:df:
         65:ac:3a:26:6e:a9:11:e3:36:5e:94:dd:b2:5b:b2:3b:15:5a:
         d1:fd:c5:65:d8:5e:0c:4a:20:40:f6:36:a8:b8:51:7c:3a:13:
         32:89:72:ed:70:59:c8:94:a7:65:36:70:98:6d:c6:a0:2b:fe:
         90:08:b3:ad:8d:73:d6:af:5c:c6:5b:92:44:71:da:e1:d9:af:
         ae:11:40:0b:8a:33:52:c8:4c:1f:66:e6:0e:6b:9f:aa:42:af:
         a1:cf:43:16:5f:98:51:47:98:03:cd:3a:f8:65:e1:ea:19:80:
         06:1c:ab:83:26:78:25:0c:4b:33:e5:49:18:4c:d6:5e:a0:1b:
         87:e5:a0:b1:70:0e:fc:de:91:82:29:74:dc:96:3d:a8:eb:43:
         ae:e5:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:33:31 2025 by rpki-client