Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3678d4eb-fb25-3312-a07c-bba8fe69aa1b.roa
File:                     3678d4eb-fb25-3312-a07c-bba8fe69aa1b.roa (raw, json)
Hash identifier:          QBsxPdCg5LCplVtdlM7abeqzzTOELfRDKVUvRRlBMUc=
Subject key identifier:   52:6E:8D:BF:97:CF:A0:E5:CD:B9:CD:D8:C3:77:A2:7D:C9:B2:85:E9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849ED4FD97B33CEBA92CF713200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3678d4eb-fb25-3312-a07c-bba8fe69aa1b.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     24319
IP address blocks:        184.51.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:d9:7b:33:ce:ba:92:cf:71:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=2166d82d-105b-4171-8084-ec9392d03af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d8:8b:e2:37:17:4a:44:71:a3:a4:3d:3c:0b:
                    3b:7c:91:6c:a8:13:c9:76:83:72:06:80:5d:b5:35:
                    cf:5e:ac:22:7a:79:1c:7d:c1:f3:14:8b:6b:38:9e:
                    b0:7b:20:bd:90:d0:64:8d:0c:cb:bd:c8:c0:d3:88:
                    93:6c:5b:3c:fa:47:a8:81:16:13:78:2d:87:4c:96:
                    34:8c:ad:2e:2d:26:ed:a1:ef:ea:4d:3f:66:78:a1:
                    41:75:4a:12:2c:aa:6e:31:53:21:99:b0:f5:fe:35:
                    3a:4b:f6:07:57:32:56:cc:b1:12:6d:d4:3c:9e:53:
                    d8:27:54:7a:73:0d:88:30:f9:78:91:b0:0d:c2:8f:
                    cb:b9:c3:54:54:8b:09:f1:f4:30:58:40:5e:93:2f:
                    9b:b0:c5:4d:5b:9e:c5:b4:17:f8:b2:44:41:fb:3c:
                    1d:ba:ce:0e:86:04:cd:6e:b9:8a:c0:12:ab:62:dd:
                    43:fa:77:ad:9f:d8:df:f8:d6:f7:0d:37:76:da:15:
                    fd:31:2e:f0:7d:c2:77:5f:a9:a3:1d:de:e2:69:8f:
                    ba:05:88:c4:0a:c8:5d:ad:43:50:55:d8:d3:f3:08:
                    1f:86:4a:5e:11:f8:5b:7d:bb:33:a0:a2:2e:c1:61:
                    f9:f4:ed:47:0d:34:88:52:dd:7c:1b:5b:98:99:48:
                    41:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6E:8D:BF:97:CF:A0:E5:CD:B9:CD:D8:C3:77:A2:7D:C9:B2:85:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3678d4eb-fb25-3312-a07c-bba8fe69aa1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.51.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:55:cf:71:d7:d0:31:d7:63:70:fd:8f:cc:a7:8d:6f:9e:b1:
         5e:8e:6c:7f:69:9a:8b:36:d9:82:22:99:5a:0b:c5:9b:9e:38:
         fd:ab:8b:de:94:6e:5f:a5:54:e7:3d:49:26:43:a0:78:bc:0e:
         fb:d0:9c:6e:cf:94:7d:fd:26:c4:f1:73:23:d6:12:41:5b:a3:
         ea:fe:2d:fd:22:36:f8:46:20:db:41:4c:aa:31:1a:42:70:20:
         42:f7:c3:2b:60:81:04:f6:e2:52:bd:57:64:8b:39:78:eb:fb:
         7f:42:80:67:e4:cf:bb:4f:b0:77:cb:d3:dd:9c:b5:f4:19:34:
         85:0a:f0:19:3f:37:a5:00:d1:f6:ef:21:b6:48:75:ae:1d:b4:
         0e:f2:ed:9c:39:e0:30:b9:a0:58:9e:eb:5b:c0:db:67:ee:c0:
         46:b9:eb:38:03:bf:72:88:22:c1:76:de:a1:b5:7f:cb:d6:c6:
         92:d6:18:7f:b0:79:0c:e2:20:7a:48:a6:a7:4f:5b:8a:59:7c:
         43:31:bd:70:7c:50:4c:76:19:72:69:a3:97:90:d4:2e:ef:82:
         25:11:2f:de:bf:e6:c0:54:57:42:de:49:50:47:ed:c0:aa:0c:
         8e:44:82:58:ee:01:a3:5c:67:26:ee:3a:78:a7:5d:96:dc:7c:
         88:48:39:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9l7M866ks9xMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk
MjE2NmQ4MmQtMTA1Yi00MTcxLTgwODQtZWM5MzkyZDAzYWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9iL4jcXSkRxo6Q9PAs7fJFsqBPJdoNyBoBd
tTXPXqwienkcfcHzFItrOJ6weyC9kNBkjQzLvcjA04iTbFs8+keogRYTeC2HTJY0
jK0uLSbtoe/qTT9meKFBdUoSLKpuMVMhmbD1/jU6S/YHVzJWzLESbdQ8nlPYJ1R6
cw2IMPl4kbANwo/LucNUVIsJ8fQwWEBeky+bsMVNW57FtBf4skRB+zwdus4OhgTN
brmKwBKrYt1D+netn9jf+Nb3DTd22hX9MS7wfcJ3X6mjHd7iaY+6BYjECshdrUNQ
VdjT8wgfhkpeEfhbfbszoKIuwWH59O1HDTSIUt18G1uYmUhB2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJujb+Xz6DlzbnN2MN3on3JsoXpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzY3OGQ0ZWItZmIyNS0z
MzEyLWEwN2MtYmJhOGZlNjlhYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuDNbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFVz3HX0DHXY3D9j8ynjW+esV6ObH9pmos22YIimVoLxZueOP2ri96U
bl+lVOc9SSZDoHi8DvvQnG7PlH39JsTxcyPWEkFbo+r+Lf0iNvhGINtBTKoxGkJw
IEL3wytggQT24lK9V2SLOXjr+39CgGfkz7tPsHfL092ctfQZNIUK8Bk/N6UA0fbv
IbZIda4dtA7y7Zw54DC5oFie61vA22fuwEa56zgDv3KIIsF23qG1f8vWxpLWGH+w
eQziIHpIpqdPW4pZfEMxvXB8UEx2GXJpo5eQ1C7vgiURL96/5sBUV0LeSVBH7cCq
DI5EgljuAaNcZybuOninXZbcfIhIOXE=
-----END CERTIFICATE-----
Generated at Fri Jun 6 17:54:50 2025 by rpki-client