Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/102d876f-dcb7-3acc-a23b-f6316509d488.roa
File:                     102d876f-dcb7-3acc-a23b-f6316509d488.roa (raw, json)
Hash identifier:          Qpx3kFJqrArQZaG48uIfn7OnnCowljfz75S4Nns/Iuw=
Subject key identifier:   2C:29:08:B0:D7:2A:91:83:00:64:37:E4:73:69:50:EE:59:2E:BC:70
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A00DAD5F5EA106F2D260DCD0D
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/102d876f-dcb7-3acc-a23b-f6316509d488.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        184.27.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:d5:f5:ea:10:6f:2d:26:0d:cd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=0a6272ce-e332-452a-ad18-dba7d8fb0809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:84:20:f9:49:46:5e:73:f0:70:5c:82:3d:
                    e5:c3:41:72:44:86:e2:69:51:d7:40:84:2e:07:21:
                    71:7a:62:f0:f5:a0:68:7c:8e:e7:7d:c4:47:0a:41:
                    25:06:50:03:0d:9b:d9:61:ad:48:2c:a3:42:f3:15:
                    b1:4e:75:77:d4:3a:be:8c:78:25:27:64:73:7e:90:
                    78:a5:6c:99:78:89:bc:22:ed:d1:36:d0:a0:da:18:
                    de:e3:88:74:bb:7a:22:74:a3:63:b2:06:9e:a4:57:
                    35:6f:e8:fc:f5:b0:aa:03:3d:fe:65:38:77:e0:d5:
                    65:34:87:49:fe:db:6b:55:4c:54:8d:4c:4e:e5:dd:
                    f3:47:0f:aa:c4:03:cc:e9:a6:d3:6b:76:e1:88:a9:
                    99:fb:2f:ae:1f:55:6c:29:67:78:96:a8:87:fc:f0:
                    78:f8:dd:07:23:56:d7:27:16:e7:85:ad:4a:f4:9f:
                    b4:0e:34:9e:48:ac:ad:bc:56:90:c9:c3:b4:58:ec:
                    62:4a:73:6d:7e:99:04:4f:19:fa:7f:2f:70:f3:ca:
                    ac:fd:c7:23:22:61:7e:0f:da:e4:54:bf:72:ee:10:
                    59:6b:b1:aa:55:4c:46:c7:8e:e9:8c:bf:9e:43:5e:
                    ff:e7:2c:21:e6:d4:c1:57:3e:7d:dc:0d:09:bb:ba:
                    14:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:29:08:B0:D7:2A:91:83:00:64:37:E4:73:69:50:EE:59:2E:BC:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/102d876f-dcb7-3acc-a23b-f6316509d488.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.27.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:43:8a:60:02:00:8c:3f:28:37:0e:fa:07:83:9d:a9:66:d1:
         ed:34:a2:8e:d7:dc:a8:70:53:74:89:bc:0a:f7:87:6f:43:21:
         1c:67:3e:46:95:a6:fb:af:51:f2:8d:ae:f6:93:7a:88:a9:12:
         6b:cb:a5:4a:7b:eb:4d:f8:51:1c:47:ce:ae:1c:e9:af:c8:34:
         ae:b9:e0:a7:36:af:a1:13:3a:7a:bf:20:cd:14:84:ce:cc:ae:
         1b:ea:4a:42:86:9b:b3:38:24:a2:2e:df:3d:81:10:a4:4f:f2:
         fb:32:f1:2f:f2:4d:36:58:d1:f1:a0:af:44:82:2e:06:3a:ef:
         c3:37:0c:99:b7:89:43:73:2c:ab:5e:d6:b1:c6:d5:29:0d:94:
         03:f6:af:b1:78:d1:f1:84:08:e5:b5:6e:56:62:cc:5c:4d:52:
         6e:d4:bb:b0:9e:59:9c:a0:6f:d4:a4:86:12:97:f1:0e:42:b4:
         96:ea:ac:23:9c:8e:9d:ff:d7:12:b8:81:c6:39:e2:d5:a0:a7:
         62:e5:0a:86:5c:c5:d0:e8:14:a3:70:f9:41:af:36:64:35:19:
         33:c3:4b:6d:c2:98:ed:69:15:1f:01:83:fc:ec:40:88:94:94:
         ce:b9:99:4e:00:27:4b:78:5f:94:2e:0d:75:26:2f:6c:45:1b:
         81:ab:61:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:35:04 2025 by rpki-client