Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a49e456-fbd1-3253-aee0-95c748405c65.roa
File:                     5a49e456-fbd1-3253-aee0-95c748405c65.roa (raw, json)
Hash identifier:          iGEQcU5XxiSLNiuvn6Er3SN/FYkJQXqy/FMVjO9xMBc=
Subject key identifier:   D3:AD:8F:98:D1:82:DF:98:B3:FF:10:C4:A1:58:2D:12:E8:EC:01:56
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849FF7584B4D458BE1A01E04E60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a49e456-fbd1-3253-aee0-95c748405c65.roa
Signing time:             Wed 28 May 2025 01:00:49 +0000
ROA not before:           Wed 28 May 2025 01:00:49 +0000
ROA not after:            Tue 26 Aug 2025 01:00:49 +0000
asID:                     16625
IP address blocks:        184.24.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ff:75:84:b4:d4:58:be:1a:01:e0:4e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 28 01:00:49 2025 GMT
            Not After : Aug 26 01:00:49 2025 GMT
        Subject: CN=78036c54-2010-4911-93a1-e7a6969d88b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f3:c7:19:4e:55:ce:68:47:a0:21:f0:fa:c7:
                    43:d6:b5:15:68:e9:e4:28:5e:90:23:f0:56:62:70:
                    9e:47:60:78:f8:4f:8d:d4:e4:6e:20:6f:53:37:af:
                    a9:37:ea:45:e4:7a:c2:d3:5c:cb:d4:a5:f5:e2:c5:
                    27:aa:a6:d5:8b:1b:af:58:c2:39:1b:f8:61:66:30:
                    7e:a7:e9:b9:26:ae:0c:b9:2e:61:e7:e8:ab:80:b7:
                    87:e6:ac:8d:b7:37:53:a5:84:3e:46:a6:ec:71:5b:
                    8b:77:68:7f:ba:eb:1a:55:12:6d:73:c0:e1:4e:24:
                    6a:b8:b4:e2:30:18:1f:fe:6a:93:5c:14:97:ad:86:
                    9f:c8:e9:14:45:ef:45:2a:5e:38:5a:39:dc:c3:77:
                    2e:af:f2:8b:25:3d:76:f8:a8:e0:e4:71:c8:77:8b:
                    8b:ac:43:8f:a3:4a:3a:07:2d:81:1a:b4:6d:33:b9:
                    97:7e:a1:b3:02:cd:89:9f:32:f3:4b:93:d3:92:d0:
                    dd:f8:6e:f0:d9:97:a5:31:8b:eb:6c:f3:2f:b5:08:
                    09:b6:61:b4:44:14:4a:cd:63:cc:60:0a:4b:78:cf:
                    8d:dc:82:29:fe:84:88:ae:a8:20:31:5a:21:3b:1f:
                    84:2b:c1:cf:54:e9:a6:d3:ee:0d:fb:17:7c:f6:c9:
                    52:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AD:8F:98:D1:82:DF:98:B3:FF:10:C4:A1:58:2D:12:E8:EC:01:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a49e456-fbd1-3253-aee0-95c748405c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.24.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:9d:fe:d1:46:77:ee:47:5b:f7:af:c3:db:bf:2c:5c:a6:75:
         05:30:c5:a1:d4:1f:6a:81:76:93:22:42:4e:cb:4e:c2:b5:53:
         03:38:26:5d:81:84:b7:5c:cd:cc:5c:57:38:a4:9e:2d:5d:9f:
         99:2c:99:79:52:e4:b3:eb:c3:f5:d4:d6:58:ee:72:e6:ae:dd:
         31:4e:eb:82:bc:f0:ef:85:b3:f3:7d:84:e2:b3:1e:45:9c:63:
         d1:5d:2d:20:fc:69:3e:df:e6:6c:76:62:c7:8b:9b:28:3c:45:
         fe:84:03:9b:f3:2d:0d:88:b6:d0:5b:d8:8c:2f:c4:42:c2:d4:
         3d:e4:18:b6:c3:4e:ac:95:14:8b:7f:b2:07:98:93:0b:6d:1f:
         0e:dc:07:80:80:53:b5:b8:87:3d:30:b8:eb:89:11:6f:2f:9a:
         03:df:cf:99:04:39:10:70:1f:43:31:27:fc:cd:5f:2b:81:b8:
         a0:b7:b2:0f:9b:45:e8:09:5a:24:1a:b8:ad:78:99:f1:1c:c8:
         07:f8:fc:2e:6d:e5:c3:12:1f:38:7c:bf:2a:0c:1a:d5:5a:e6:
         d6:63:67:01:c2:99:1e:48:70:95:7b:18:b2:5d:af:a1:2d:c7:
         3e:58:e1:99:46:86:bd:33:4d:0d:70:1e:d3:c0:8a:e7:7a:1a:
         91:85:61:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:26:20 2025 by rpki-client