Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24d71b-ced4-3f51-a082-304deea19fab.roa
File:                     1e24d71b-ced4-3f51-a082-304deea19fab.roa (raw, json)
Hash identifier:          Ob0opgPpMo6iInyJwrd3b0lbsNJj694fTXKLjs3UcpE=
Subject key identifier:   BB:04:A2:98:11:AD:75:5B:3F:82:45:CE:09:2C:51:B7:71:45:B4:B7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584921841D9DE6F008BE46DFF6C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24d71b-ced4-3f51-a082-304deea19fab.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     35994
IP address blocks:        184.28.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:1d:9d:e6:f0:08:be:46:df:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=5e4f793d-35aa-44c2-83ab-39ca7b9ed886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5d:97:50:38:56:75:b5:82:c1:e3:5d:d7:6c:
                    4b:c5:66:6c:29:95:14:e2:a8:07:a0:c6:85:96:ec:
                    54:73:b7:3a:41:c3:10:62:89:b0:3c:a0:0e:20:21:
                    eb:ab:8a:bd:66:8a:c0:fd:9d:10:6b:07:80:a5:0a:
                    b6:8f:cb:4e:3e:ee:a9:bb:f9:85:ba:86:db:8c:d0:
                    58:8b:06:6a:c8:22:0b:21:be:38:99:40:cd:9c:32:
                    31:24:65:26:f3:b8:6e:f7:46:3e:80:27:f6:ee:d9:
                    2e:79:bf:d2:fc:90:eb:17:7f:9d:7a:8f:d0:c9:59:
                    93:d4:14:24:15:6f:5b:56:8a:e1:cf:4c:5d:14:47:
                    d5:77:8b:08:4e:d1:90:52:c0:76:f7:a4:2a:51:cb:
                    a5:e5:bf:0d:e8:14:9d:34:f2:7c:fa:65:db:6d:67:
                    9d:e2:a9:ad:3e:39:e6:b2:1c:e6:a2:fd:14:26:52:
                    44:7c:23:b1:98:8c:23:44:4b:2e:3b:d9:5a:2e:2a:
                    5c:a0:53:2a:b7:de:43:e7:42:7e:cc:ac:20:f3:73:
                    a5:63:16:72:c4:63:80:b8:7c:31:44:27:27:2c:51:
                    24:77:37:cc:37:f1:6e:96:2f:40:4f:e4:98:26:0c:
                    35:31:40:e9:f5:9a:d9:bc:cf:83:94:57:1a:d8:bf:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:04:A2:98:11:AD:75:5B:3F:82:45:CE:09:2C:51:B7:71:45:B4:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24d71b-ced4-3f51-a082-304deea19fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:06:d3:72:99:78:94:35:ce:a9:d2:1c:70:d8:c0:23:b4:28:
         00:fb:02:9f:b1:fb:92:f6:b4:c6:46:27:51:35:81:80:5e:d0:
         1a:5b:ec:d3:18:3a:06:84:fe:5f:81:5e:04:b8:1c:66:9e:bd:
         00:f6:a0:d6:71:24:f8:0a:cf:a3:30:a7:90:3a:4f:23:d8:cb:
         8d:00:3e:2a:9d:68:be:7c:d9:f4:ec:a1:8d:9b:e1:c4:73:7d:
         b9:a4:87:b2:79:40:c2:de:e5:47:e8:65:51:cb:fb:94:ff:a9:
         fc:9a:e5:36:ff:bc:c4:03:0b:da:5e:1f:6c:e6:77:72:d8:66:
         34:7e:bd:11:fa:17:f3:d4:8c:5f:93:f4:83:bb:c7:69:2c:74:
         3c:4f:d5:fd:89:fc:70:ef:3c:92:53:94:c6:ea:44:3b:e2:97:
         0d:c1:88:a5:c2:85:61:42:f4:ff:35:53:bd:e9:37:41:86:83:
         08:9b:34:bd:60:87:a3:e4:f8:df:8c:e2:f2:1a:f4:e8:d9:30:
         f4:ad:32:ab:80:72:c6:75:1b:b3:1e:45:09:79:a4:2d:4d:51:
         a3:3d:8f:b0:40:62:67:7c:03:e5:3e:14:00:4b:31:8e:0c:05:
         e2:82:c8:61:50:ee:9f:8a:b9:0f:d4:b6:8b:a0:2b:cd:87:73:
         8a:e0:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:31 2025 by rpki-client