Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4306de2d-aabe-3c05-ad65-c19447530fe4.roa
File:                     4306de2d-aabe-3c05-ad65-c19447530fe4.roa (raw, json)
Hash identifier:          OYaWL7DF2wak0iGYiu/uTMZ2Ihp9joWDDfkavpq6A5M=
Subject key identifier:   C2:50:54:D0:F9:66:72:2C:6B:F4:A3:5B:C0:0A:BB:63:F3:5E:E0:96
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848FFCF237E14DB32469EE6C540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4306de2d-aabe-3c05-ad65-c19447530fe4.roa
Signing time:             Tue 25 Feb 2025 11:15:23 +0000
ROA not before:           Tue 25 Feb 2025 11:15:23 +0000
ROA not after:            Mon 26 May 2025 10:15:23 +0000
asID:                     16625
IP address blocks:        184.25.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ff:cf:23:7e:14:db:32:46:9e:e6:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 25 11:15:23 2025 GMT
            Not After : May 26 10:15:23 2025 GMT
        Subject: CN=194a91d7-c7f5-444f-ac1b-27e4404927ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:18:a6:8b:ff:22:7b:11:d1:e3:ac:5c:74:be:
                    32:3c:81:cf:e7:24:5a:67:29:0f:de:e3:d1:12:cf:
                    2a:84:a2:e5:fd:da:a0:35:cc:f2:44:07:67:6e:1b:
                    90:bd:f1:b9:11:55:f2:32:7e:88:ac:a2:07:85:fe:
                    c3:4c:e7:36:55:fc:6f:cc:29:17:c5:9b:3a:89:c2:
                    ad:dd:ad:7c:8d:06:cd:20:c5:8f:de:84:89:8d:06:
                    f4:d1:06:68:13:be:80:14:91:c7:5a:9c:e4:08:4c:
                    22:8d:35:c9:f7:62:62:0e:5a:72:36:0a:2f:46:04:
                    c7:5d:c0:24:f6:30:27:bd:0d:7d:01:37:0d:6c:80:
                    6b:e7:ec:69:9a:ff:cf:3a:aa:30:73:ce:3b:38:94:
                    a6:ac:15:87:c9:0d:6f:3f:42:41:1f:84:c8:88:fc:
                    48:8a:c9:af:6c:67:37:5d:07:da:0d:ba:6a:0f:1a:
                    50:ed:4d:4a:28:67:a1:77:d7:79:18:45:7d:52:c7:
                    a4:70:95:38:b3:6a:75:b1:ca:20:63:df:ac:e2:b0:
                    ac:b5:4f:76:ed:cb:88:aa:d0:85:da:1a:33:3b:20:
                    60:00:e8:25:0c:1d:86:48:16:33:e0:d9:4d:fa:b3:
                    a0:b8:3e:95:ba:55:2e:5e:ee:b1:c7:52:f8:c3:94:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:50:54:D0:F9:66:72:2C:6B:F4:A3:5B:C0:0A:BB:63:F3:5E:E0:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4306de2d-aabe-3c05-ad65-c19447530fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:03:74:6b:97:cd:cc:48:a5:5c:9c:c6:43:cb:f5:8a:03:a8:
         b1:00:80:c5:04:05:c3:ea:61:b0:03:5f:07:b4:0c:f3:43:0e:
         12:f9:e0:4f:a3:21:7d:90:3c:d5:4c:46:70:51:09:23:84:5b:
         f1:1e:4a:0d:44:62:b2:ed:62:cf:1b:d2:f2:fd:ea:61:f3:56:
         d9:f9:49:ac:9b:0e:ba:5a:f2:c5:24:ee:b3:91:88:bd:88:ee:
         ca:fc:7c:84:56:64:1e:b0:32:73:3a:29:fe:c1:d5:b1:77:85:
         48:45:17:93:19:73:8f:0d:f6:aa:65:a3:c1:39:dd:55:4c:05:
         c7:70:73:6b:6e:fa:ad:a6:ef:57:48:b7:81:60:bc:ea:8d:c4:
         70:36:59:af:2f:5d:a3:12:f6:35:ac:29:70:3b:b6:eb:0a:8e:
         90:e8:66:63:60:71:41:34:bf:2e:42:7b:49:ea:9d:ad:1d:7d:
         3c:d7:6f:c9:2a:da:e9:87:58:03:4d:9d:6e:cd:73:50:74:e8:
         bb:72:7d:33:24:e0:bd:21:2c:d6:0c:8c:75:e1:cf:09:33:b3:
         7a:f7:56:de:fd:33:3e:91:1c:92:80:69:40:a3:31:0b:40:20:
         a6:eb:6e:c0:79:0e:58:52:3e:bc:ad:f3:09:57:be:ad:df:ac:
         b0:61:4b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 15:03:40 2025 by rpki-client