Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dac2c9c-7832-37a8-a55c-3e7fc12ffa0b.roa
File:                     6dac2c9c-7832-37a8-a55c-3e7fc12ffa0b.roa (raw, json)
Hash identifier:          ymnSkTRr5nSPZCgVcEoqnvyH+q5ZpV47Y+tI0wwsPNA=
Subject key identifier:   99:E5:D3:69:00:4F:B8:38:2D:F7:E3:FF:21:6F:DC:DE:DC:99:1A:E5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849E7BA608C2E408C4D38CE7F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dac2c9c-7832-37a8-a55c-3e7fc12ffa0b.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     16625
IP address blocks:        184.27.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:60:8c:2e:40:8c:4d:38:ce:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=af209a85-7818-45c0-aaa1-3436a4bdad66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:96:a4:ce:06:5b:38:0a:d2:f5:c7:fb:e8:
                    0a:c0:38:40:1c:f0:21:3b:ac:67:3e:c3:87:c5:f1:
                    de:c8:ba:dd:78:8e:3e:ed:d0:49:0e:88:46:d2:57:
                    91:3e:a4:f3:3e:ab:76:d6:ba:69:6e:44:cb:72:4d:
                    72:59:9c:07:89:81:e2:36:07:09:f4:36:4f:85:48:
                    f4:6b:41:fb:4e:ee:88:9e:2d:98:80:3b:9e:74:c2:
                    48:91:9f:da:07:fc:a6:0a:b0:d2:19:a2:e2:11:34:
                    83:76:9a:9b:d5:1d:d1:c7:ae:3d:04:80:b0:56:a0:
                    7e:c5:79:3f:ce:92:16:fd:8f:22:4a:06:9a:2c:99:
                    9b:92:57:7f:6d:d4:fa:5d:ce:98:69:61:0e:f0:44:
                    be:8d:6e:15:c8:2f:24:4a:07:99:b5:33:61:6b:33:
                    2f:f5:ef:08:c4:60:ae:8f:fd:f8:6e:46:00:67:0d:
                    1f:e4:40:30:21:c0:5e:55:04:71:f4:0b:13:3b:cb:
                    37:9a:45:7d:68:96:40:60:c6:ff:e8:90:7f:ae:06:
                    bd:48:87:30:74:c9:da:18:33:2c:38:0b:e1:fc:34:
                    43:7d:84:f9:13:67:92:8d:01:87:41:39:ed:6d:d7:
                    24:a5:f1:f7:51:e4:8a:a9:df:85:81:15:d4:1e:35:
                    1e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E5:D3:69:00:4F:B8:38:2D:F7:E3:FF:21:6F:DC:DE:DC:99:1A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6dac2c9c-7832-37a8-a55c-3e7fc12ffa0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.27.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:cf:39:9c:d5:43:86:fb:d6:26:6a:5f:92:42:cd:76:d2:06:
         e4:0c:1f:a8:a8:1f:a4:a1:58:a1:2d:fe:6b:4f:b0:9e:59:ab:
         0a:8f:02:fc:5b:0e:09:07:ec:93:3d:e5:92:15:af:21:a4:68:
         d8:aa:19:42:ac:74:07:c4:c9:cf:29:06:0c:29:75:60:2b:78:
         cb:bc:85:bc:1b:f4:91:6f:04:37:14:79:d5:dd:1e:4c:6a:5e:
         e0:ff:ec:33:7d:7f:f4:d1:ed:51:e2:74:ef:a6:7c:0c:00:a3:
         5e:98:ca:1c:f6:e4:ea:b6:e2:82:f3:f9:a8:fe:86:e4:25:c0:
         cc:b9:75:ae:ee:50:75:dc:bf:ae:46:b9:cd:c5:89:3a:bf:83:
         11:b2:8c:f4:46:53:1f:fc:a8:48:3d:63:5a:62:30:31:a6:39:
         5f:c0:2c:28:bd:38:dd:31:87:d5:6f:ae:64:04:19:66:6b:49:
         9d:c1:69:40:e3:02:89:5e:ae:38:b2:2c:46:b7:f3:e2:d5:78:
         44:2f:07:67:ff:b9:3c:19:0d:d4:9a:ea:4a:c4:65:98:6d:e1:
         ca:29:5e:2e:cc:d3:1f:e4:fc:05:04:f9:89:8f:00:e7:6b:e7:
         d7:6f:49:7d:ce:6c:7f:47:31:e8:9b:13:30:60:94:a4:8f:48:
         52:f4:b1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:43:33 2025 by rpki-client