Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/367a78f4-5791-32e4-b7a6-c685f7ad4a57.roa
File:                     367a78f4-5791-32e4-b7a6-c685f7ad4a57.roa (raw, json)
Hash identifier:          3S2drTJHo3I3LOf4MjBQkfXUi+tSxqR67uCUPnw7mG8=
Subject key identifier:   13:DA:FE:77:46:96:AE:A7:34:AD:C8:9C:BA:D5:FB:F4:71:FA:DA:3A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849EBEA6350C83ABDFC0AF50280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/367a78f4-5791-32e4-b7a6-c685f7ad4a57.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        184.50.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:63:50:c8:3a:bd:fc:0a:f5:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=ed566d59-735b-4f9f-9e01-38d81a49f733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:ec:bc:e6:7e:23:cb:34:84:84:9b:06:f0:
                    af:82:5a:e5:f3:b8:61:2c:4a:4e:9c:a4:82:e7:41:
                    e4:72:e5:91:6e:53:49:d8:ff:ea:4c:01:90:be:58:
                    e6:81:0e:d3:09:9e:a7:23:9f:22:06:84:d9:9c:7b:
                    03:35:bf:6c:c4:cd:75:58:48:a3:1e:47:b6:38:54:
                    0f:00:25:66:5a:72:c5:22:b4:ac:0c:c5:65:15:74:
                    2a:a4:d9:17:db:96:0e:a4:7c:bf:df:12:27:72:81:
                    73:80:f3:9c:a7:d5:c8:20:c4:6d:a3:4b:63:0c:8b:
                    5a:b4:35:20:0c:7f:12:ab:49:b0:59:96:e0:4f:85:
                    7b:d6:65:c9:e7:bd:0f:b3:d3:1d:a9:6f:ff:4e:3e:
                    9a:5e:4d:cf:59:e7:d1:98:23:47:9c:a5:de:a9:fc:
                    d3:9c:4a:5a:14:ee:1a:04:7c:63:b8:7e:fd:25:47:
                    0a:78:80:7e:91:9d:e5:f0:4c:0e:74:47:36:a1:82:
                    a7:67:79:b7:f4:19:15:dc:19:59:c8:65:08:69:33:
                    ad:05:71:21:68:39:2b:50:1d:cf:70:8b:b5:b0:49:
                    e4:d2:17:a6:e9:1b:8a:cb:64:7b:99:f3:3a:89:ca:
                    64:ed:32:92:4b:42:2a:10:12:3a:f0:7d:0b:11:92:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DA:FE:77:46:96:AE:A7:34:AD:C8:9C:BA:D5:FB:F4:71:FA:DA:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/367a78f4-5791-32e4-b7a6-c685f7ad4a57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.50.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:6a:e8:2b:d4:3e:d4:f3:b7:4b:ef:8c:63:38:ce:2c:31:4a:
         27:9f:0f:35:25:7c:85:d2:09:50:6c:87:67:6b:4d:84:10:17:
         1c:c5:e7:af:ab:b5:07:ff:d0:b7:48:e8:3d:85:fd:0b:4c:00:
         cf:47:8d:90:26:a3:2c:66:ac:d8:2d:e4:ed:ff:5f:0e:6f:51:
         9c:c2:a2:7b:e4:2c:6b:65:b8:79:a3:3f:3d:cd:1c:33:87:27:
         7e:92:a3:99:1f:18:f7:80:dd:b4:ff:f6:f0:82:3d:f2:10:4e:
         f5:c7:6a:89:e6:bd:f6:80:bb:ad:d6:42:44:cf:65:d5:9a:3d:
         78:1f:ce:95:7f:93:db:9b:f2:f0:e7:43:26:14:c9:57:48:c4:
         86:b7:1e:40:27:3c:36:34:5f:c0:b5:81:ca:e3:c3:87:b1:0e:
         48:88:55:e6:22:be:d5:96:e6:b7:c1:7c:bd:a2:cf:89:b2:a6:
         ae:7e:4b:e5:f9:4e:0a:92:fa:aa:b3:9f:a3:06:34:ee:71:38:
         0b:41:a7:e0:c7:cd:f6:7f:9c:4a:66:92:64:b8:20:c4:d3:7e:
         b5:6a:7c:77:07:bc:40:25:84:21:f2:a6:75:e4:c1:0a:9e:b2:
         56:97:72:84:e7:61:78:91:41:48:91:e8:50:e1:a3:ff:1f:90:
         6c:4a:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:23:20 2025 by rpki-client