Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5949f14a-ae10-39ae-8c29-73c5858c428b.roa
File:                     5949f14a-ae10-39ae-8c29-73c5858c428b.roa (raw, json)
Hash identifier:          wKNQsVQtg344DePnZc6muWVKko91idPQuMLERKtn8J4=
Subject key identifier:   06:01:68:8C:C5:04:58:CE:C8:92:EF:FB:84:7A:2B:B1:83:4F:93:A9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849F44A5F9874C428EE1963BF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5949f14a-ae10-39ae-8c29-73c5858c428b.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     55836
IP address blocks:        184.86.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:5f:98:74:c4:28:ee:19:63:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=13438e08-b2f5-44fd-8723-bfd8800213cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ef:79:b9:11:36:6d:6b:ad:31:20:54:30:ef:
                    44:e2:7b:02:4e:cb:14:14:f2:84:c7:5e:6c:a0:af:
                    0e:ea:aa:06:11:a5:f2:f7:c8:ba:23:64:72:4c:b6:
                    52:58:09:44:bc:e7:db:20:a0:dd:2f:61:16:66:09:
                    85:f7:d0:60:8e:2d:a2:53:6b:3e:c2:b9:2e:54:3e:
                    8a:8e:b9:db:91:87:c9:13:97:a6:cd:48:e9:b9:42:
                    7a:ed:ae:fd:d8:46:e9:cf:03:df:4e:70:1d:aa:59:
                    90:c6:96:bc:9f:4f:28:2b:02:dd:0a:13:57:e7:fc:
                    75:7e:40:6a:23:92:26:08:f3:51:79:cd:64:e7:7a:
                    ca:ac:c2:e8:55:e7:b9:41:af:28:98:df:8b:09:a3:
                    11:7c:ff:1e:8a:b0:ac:56:14:dd:32:24:23:fd:ef:
                    3e:9c:8b:11:59:2c:b0:9a:4e:a8:64:32:ec:ba:bd:
                    59:34:cd:3a:cc:22:62:e2:e7:43:49:3e:7f:19:51:
                    e7:40:d9:7c:59:2a:16:fb:b5:03:9c:9a:5e:88:57:
                    15:67:0f:9d:cd:56:50:cb:61:74:db:3c:67:8a:f3:
                    3d:ab:cd:61:43:61:92:dc:7a:82:d9:12:c7:97:19:
                    38:a3:34:c5:bb:34:e1:70:dc:90:04:8e:5d:be:84:
                    44:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:01:68:8C:C5:04:58:CE:C8:92:EF:FB:84:7A:2B:B1:83:4F:93:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5949f14a-ae10-39ae-8c29-73c5858c428b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.86.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:6c:cd:44:b6:85:a5:f5:e9:a9:30:16:32:46:b8:0e:71:96:
         7c:ea:e1:e6:e1:84:55:ee:21:c8:bc:2e:8c:47:3b:81:cb:42:
         fe:d1:d7:4c:06:e7:ed:41:eb:2f:f8:20:04:04:8d:1d:98:f0:
         73:1b:b6:b5:d3:52:d9:49:ab:2e:eb:88:07:b0:5d:a3:ce:6c:
         98:1a:dc:34:b5:30:3a:39:27:00:7b:c6:6f:56:f4:8f:df:21:
         45:13:7a:a0:09:57:32:17:55:2c:be:d4:49:24:27:dc:c9:11:
         4a:6b:9b:a9:c9:bc:07:e0:42:ac:45:f1:44:a0:8c:4e:ab:cb:
         87:1a:2d:26:9d:34:f6:c2:df:66:47:46:4c:5f:85:05:9c:ef:
         27:c4:9c:7a:80:64:d8:33:00:de:5f:af:d1:58:b8:21:9e:1c:
         83:d1:7f:51:54:0b:62:60:d6:d5:ff:6e:e0:2c:e1:95:c6:c4:
         d4:13:d4:7a:b8:d8:29:34:c8:09:cc:0a:f3:24:a5:d2:4d:72:
         16:d1:6f:d7:5f:56:94:f8:0c:aa:43:45:f9:de:09:0e:f5:25:
         f2:15:8d:dd:c6:61:2f:62:a0:1e:bb:46:b0:6c:64:e5:3c:0f:
         53:4a:ab:1a:a7:4e:72:91:f3:b5:f5:c7:ab:53:c5:79:23:81:
         be:28:ad:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:35:57 2025 by rpki-client