Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ada90d2-c411-3757-bd53-36e68557ad9c.roa
File:                     2ada90d2-c411-3757-bd53-36e68557ad9c.roa (raw, json)
Hash identifier:          mPwdHL2NN+BfWWZzO8Nt/oWQ2058ngRgsYacfjHEXYU=
Subject key identifier:   43:EC:A3:03:88:FB:89:37:1B:9C:37:B9:A1:AF:FA:53:70:21:FB:32
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584921841E8F22C35E63C8C02BC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ada90d2-c411-3757-bd53-36e68557ad9c.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        184.30.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:1e:8f:22:c3:5e:63:c8:c0:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=5f0da723-49eb-4f8e-8f97-63ac04aaee5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:96:fa:fc:a3:a6:87:c7:bb:f3:c7:61:2c:fb:
                    e7:8f:50:a8:b0:34:e2:3f:a9:8c:6c:a2:05:44:9c:
                    2c:cd:6b:b6:09:b1:2c:c6:00:88:e5:04:07:75:37:
                    8f:1e:bf:dc:aa:7d:e5:19:73:df:72:63:19:d2:58:
                    f0:7f:ac:57:d1:44:f3:dd:9c:7c:ec:77:0e:36:ad:
                    dc:98:10:d0:d0:ac:ce:f9:85:3f:33:55:d4:9c:a0:
                    da:fd:13:e0:c5:1f:3c:82:61:71:b8:df:6e:74:c8:
                    7e:f1:c0:10:11:54:68:2f:cb:86:b8:94:79:8f:3d:
                    93:93:16:95:16:35:a0:24:fc:8c:c8:2e:4f:35:ce:
                    9a:ac:5a:e7:64:0b:53:8b:b0:2f:ee:aa:c8:ac:20:
                    25:e3:97:79:2b:b9:4c:e0:12:1c:b5:ed:64:7d:dd:
                    76:e2:f9:3f:e2:4d:0a:77:6d:62:91:4a:fb:be:3e:
                    d8:5c:ff:53:ee:93:93:bc:1c:85:07:b2:1f:96:1b:
                    90:6f:e9:dd:29:32:04:8d:0e:07:ab:ce:83:fe:a0:
                    5f:e3:89:49:33:55:c7:0a:3c:d7:0b:98:34:8c:60:
                    24:eb:9a:1a:8f:8b:aa:86:11:a5:69:3a:e0:90:59:
                    1b:3a:dc:40:8e:be:49:86:83:70:e4:14:79:f4:ed:
                    b7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EC:A3:03:88:FB:89:37:1B:9C:37:B9:A1:AF:FA:53:70:21:FB:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ada90d2-c411-3757-bd53-36e68557ad9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.30.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:26:55:83:c8:f5:58:c4:40:64:9d:4c:47:81:04:a2:37:21:
         4f:21:0e:9f:38:87:94:d8:7b:34:54:41:02:58:ba:0f:44:af:
         f2:84:a9:87:78:9b:be:89:7a:33:30:2f:b3:6c:ef:66:e8:bc:
         3a:f2:72:37:a1:86:a6:b0:75:df:23:e9:ed:74:5c:a8:ae:a4:
         7c:1c:87:38:74:8d:6c:61:eb:d4:16:52:02:ab:59:c5:e8:45:
         fc:d6:2f:da:00:a1:a8:7d:c2:7b:6a:ef:b5:a6:ab:d9:63:49:
         92:6c:81:b8:b3:b5:3f:90:49:9a:7f:12:a8:b6:20:c0:a6:58:
         17:e2:c3:db:95:c1:ee:20:84:25:3f:25:a0:f6:5d:d3:92:17:
         67:55:bb:a3:50:5d:22:68:e4:16:8f:58:35:f9:64:5b:4e:f6:
         72:c8:b9:a4:9f:87:40:66:53:c4:d0:f9:98:3e:fe:ef:95:76:
         2c:f7:d1:c2:ce:56:0d:e2:58:21:d5:5c:80:46:2b:f4:d7:b2:
         a5:36:53:9c:4f:c4:3c:1e:12:3b:95:52:2c:e8:cd:d0:c5:64:
         06:ba:b7:34:aa:98:f9:8c:c3:85:82:22:af:e3:d0:e0:c7:c8:
         49:6d:2a:e8:e2:4b:18:eb:3f:dc:9d:a9:23:62:93:41:33:8d:
         d5:0b:6b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:13 2025 by rpki-client