Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74b3a2b5-63e0-365e-805c-d06014c2e3c9.roa
File:                     74b3a2b5-63e0-365e-805c-d06014c2e3c9.roa (raw, json)
Hash identifier:          l33dB93Mjhgrm36ZdFTSc1ls0JRiYpuKRqub0kqXRxA=
Subject key identifier:   43:DE:B1:12:94:6F:38:0C:52:52:55:26:9C:36:89:AB:92:2A:F7:ED
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849F44A5FEB5D5A9C43B4B925E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74b3a2b5-63e0-365e-805c-d06014c2e3c9.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        184.87.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:5f:eb:5d:5a:9c:43:b4:b9:25:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=7d6b27b2-0bc2-4cc7-b056-2e58e1399fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:11:50:87:64:ad:c9:fb:b9:f4:d5:47:a1:c1:
                    bd:cb:d7:9a:2c:fd:a3:f8:91:2e:0f:8c:58:3d:f9:
                    39:7f:54:cd:f5:a0:f7:a0:1b:b7:c2:68:1c:7f:87:
                    0a:80:1b:29:56:73:1c:b4:6e:02:07:17:2a:e6:3b:
                    20:a5:29:5b:92:01:49:38:89:69:cc:b8:14:fa:22:
                    ab:e8:53:73:ff:70:e2:7b:fd:b7:8c:a3:4b:28:a5:
                    9e:82:46:fa:6b:37:87:69:a5:c7:20:ed:dd:ae:ba:
                    25:92:cf:06:3b:c4:26:3e:33:c7:a9:5e:ab:25:6e:
                    d0:82:36:5f:85:22:61:46:11:dc:60:18:99:e9:c3:
                    fe:3b:e3:05:a6:6b:3a:d9:24:37:b9:48:c4:29:28:
                    89:b8:23:27:c6:d8:5b:88:b3:29:c6:92:52:2f:aa:
                    7c:d9:33:75:aa:72:17:67:57:6d:71:e9:2b:6f:57:
                    a5:7e:ab:9f:af:b5:c8:87:c0:0f:66:d3:8c:6d:63:
                    3b:84:46:af:39:2e:a6:a3:f5:f4:a9:b9:c3:50:93:
                    f9:c1:4e:21:e0:cd:f2:f5:1d:02:9f:99:58:ac:29:
                    a2:78:5c:3d:66:0c:31:bc:87:ca:c9:e5:08:0a:ef:
                    6f:92:9d:e4:61:10:ab:00:7e:bb:85:94:e9:71:86:
                    2e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DE:B1:12:94:6F:38:0C:52:52:55:26:9C:36:89:AB:92:2A:F7:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74b3a2b5-63e0-365e-805c-d06014c2e3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.87.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:e4:70:ca:7e:ce:c0:76:de:02:b1:64:7f:96:10:33:ed:d5:
         f6:3a:d4:1f:86:ff:52:98:51:62:4e:0f:a5:72:4f:74:30:1d:
         0b:07:96:f6:89:1f:ff:4b:f0:96:a6:cf:a3:2e:13:08:10:e8:
         df:9c:88:48:5e:50:d1:11:6e:35:58:76:2f:7a:8d:c8:0f:e4:
         7b:b2:f8:a7:84:18:7a:6a:35:14:e8:7e:5b:48:15:44:e3:ca:
         cf:66:bf:35:68:15:f8:98:c5:0d:b4:cb:71:c1:31:7a:f5:c4:
         29:4e:ce:84:10:04:c8:8d:be:ca:d1:1b:7d:36:e6:3d:b6:b9:
         ba:b6:16:4f:58:1c:98:6d:77:1e:91:49:7e:21:95:d8:fb:39:
         4b:26:fa:5d:f6:62:27:b2:d8:c5:ec:9e:b7:c1:19:05:86:9e:
         02:26:43:bf:1b:52:4b:09:a7:e0:a2:05:2b:ac:f2:2e:df:dc:
         6a:6d:d2:8c:db:71:fe:57:f1:94:60:17:30:32:b7:41:00:3d:
         3a:f3:2c:77:3e:40:4f:52:f8:61:30:61:d3:55:9c:9a:bf:64:
         9e:9f:97:d0:ae:55:33:fe:7d:66:6e:cd:42:28:b3:2a:92:ab:
         c7:97:0a:9d:74:d2:2a:15:ce:ff:96:d0:ff:6e:1f:da:00:c1:
         80:db:4d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:36 2025 by rpki-client