Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d99ab0a-98f3-38a7-a940-86d3e27e8e44.roa
File:                     1d99ab0a-98f3-38a7-a940-86d3e27e8e44.roa (raw, json)
Hash identifier:          6rN9GpG6n3HVfatqwOncnUi7B/zud3spvAYbKP/6qRc=
Subject key identifier:   8F:CF:13:A0:59:EF:EA:9A:71:6D:C2:28:AB:BC:77:46:0A:EB:93:7C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849FF758765DC08DE28D96E98C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d99ab0a-98f3-38a7-a940-86d3e27e8e44.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        184.26.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:87:65:dc:08:de:28:d9:6e:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=d311b63e-8ab9-40e0-a7d2-0fd262f0d7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:89:c8:50:50:e7:cd:19:65:d9:67:ee:b3:6c:
                    23:fb:e8:3d:e6:0e:bb:de:06:09:88:75:5e:61:0d:
                    c2:18:76:19:29:8f:90:c5:45:f6:15:55:40:04:60:
                    a6:b4:d8:53:6f:5f:6d:84:82:5d:0b:2f:62:d6:54:
                    56:ec:45:a4:26:7e:05:c1:49:e3:c3:25:82:8c:10:
                    8e:1a:23:30:b3:0f:69:83:e6:f8:12:7e:50:dd:bf:
                    44:40:ea:ea:00:ba:a1:bc:ff:ac:be:d5:d8:67:48:
                    ed:c3:25:ac:ed:30:93:5e:7c:1f:0c:2a:4f:4c:1d:
                    a1:c0:7c:b0:90:9b:1e:5f:6c:92:f1:c8:cf:f6:2f:
                    04:a3:6f:9f:48:bc:8d:99:bb:bb:d5:14:6a:2f:84:
                    61:ee:63:99:a5:9c:aa:30:c7:5c:42:09:d2:0e:f4:
                    49:be:3d:67:8f:32:cb:8c:0b:db:b7:4e:bd:87:20:
                    2f:a6:2c:8e:a7:76:ac:14:35:4f:97:b2:db:83:09:
                    f7:2f:29:b8:1b:6d:2b:a9:9b:96:16:b6:3f:0a:59:
                    b2:86:4d:99:31:60:bf:cb:09:25:ee:a1:77:da:4c:
                    24:8d:2f:83:8d:10:eb:e6:b6:de:64:0e:14:4b:7c:
                    2a:2d:33:dd:a4:39:f7:ec:02:79:b1:14:47:e3:b5:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CF:13:A0:59:EF:EA:9A:71:6D:C2:28:AB:BC:77:46:0A:EB:93:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d99ab0a-98f3-38a7-a940-86d3e27e8e44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.26.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:9f:98:ae:ab:1b:96:63:c7:da:57:cb:4a:38:46:1d:10:f9:
         ae:3b:f2:89:99:11:0c:b0:99:76:fa:81:01:5c:2b:30:16:a1:
         23:83:07:5e:58:db:dc:d7:21:eb:cb:cb:91:37:c2:56:a8:0c:
         cf:14:f8:b0:d5:fa:dc:fa:71:9a:c8:2b:40:50:09:69:8b:53:
         ee:ee:3f:d3:e9:af:56:c9:eb:d7:be:e1:06:d0:8a:5f:58:48:
         04:b4:5e:44:e8:77:fc:29:a4:26:df:45:a4:57:eb:52:7e:95:
         74:a3:78:8f:db:86:07:ac:c1:80:a4:e6:f9:00:c8:81:46:ab:
         58:cb:5d:7a:08:04:19:83:07:bd:f6:a8:29:aa:40:31:2f:ea:
         b7:df:e9:05:ea:47:f6:80:e3:52:2e:a1:63:fb:96:c8:fc:50:
         aa:ad:09:b4:9c:b7:78:af:9d:80:b7:56:a2:17:1d:7d:7d:0c:
         a1:67:b4:31:75:e2:7d:5f:9b:2b:89:a6:1f:92:b9:a3:0f:53:
         f8:81:3e:58:52:c9:5f:b2:f3:9a:80:44:c5:74:aa:b6:19:0c:
         01:97:39:05:50:de:8e:3b:63:f5:8d:a2:96:b6:4c:95:3c:d9:
         25:61:bb:a0:d6:78:25:1a:90:92:7a:15:0b:aa:de:13:4a:20:
         72:ad:df:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:18:50 2025 by rpki-client