Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e93b2c5-d960-3f16-9c27-1d57e1e53271.roa
File:                     7e93b2c5-d960-3f16-9c27-1d57e1e53271.roa (raw, json)
Hash identifier:          JADrcq+ncMNb1uuCo/ADZH3x3D8/tkw8qVBExhoqeUo=
Subject key identifier:   BE:2A:8A:96:78:1E:36:82:75:07:A8:F9:19:15:18:C3:7F:2F:7A:15
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849EBEA87C2E055C7A3923D3480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e93b2c5-d960-3f16-9c27-1d57e1e53271.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     16625
IP address blocks:        184.50.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:87:c2:e0:55:c7:a3:92:3d:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=5542d4ca-f0c3-43ad-98dc-83341ab4b059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9a:d2:9f:37:f5:83:03:ea:2d:e9:43:cc:23:
                    6b:08:fc:86:c5:6b:21:30:d3:7f:c5:95:ae:07:72:
                    e4:45:2d:65:b4:81:2b:8a:a5:c1:b2:50:7e:4e:f4:
                    d8:ff:76:49:e7:ec:fa:d1:ef:05:ef:e0:0c:55:97:
                    d5:7f:3e:c9:3a:d8:5a:da:f7:35:d5:4a:c2:00:b7:
                    1a:6c:b9:04:57:a4:2d:7c:b0:7c:b4:0c:5b:2b:ad:
                    fc:e4:c4:71:c2:26:5a:6e:dc:d6:d7:1a:4f:32:0d:
                    f7:a2:78:9a:06:cb:a5:70:b7:53:ce:3d:bf:f6:46:
                    56:36:23:23:f5:0c:2b:f6:19:8b:0a:69:94:c6:82:
                    5b:2a:a6:78:ad:c2:1e:2a:6e:ba:23:44:4d:f6:89:
                    6d:ee:5b:f9:96:1e:a2:74:f9:c4:6f:ab:f3:6a:a3:
                    0c:84:39:67:59:70:ed:16:99:54:54:b8:7c:46:17:
                    78:41:4c:4d:87:09:0a:59:2e:df:e9:e9:6e:b9:46:
                    e7:04:d1:43:c6:ce:af:b5:7d:16:fb:dd:7e:ea:ff:
                    60:2f:8d:40:16:bc:b9:ab:69:21:2b:bd:8d:a3:7b:
                    66:6d:d1:73:f8:59:98:1f:5f:b0:ef:8b:d9:ee:57:
                    28:2b:e6:6f:09:b7:f7:dd:de:93:f0:96:5d:a9:f3:
                    5b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2A:8A:96:78:1E:36:82:75:07:A8:F9:19:15:18:C3:7F:2F:7A:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e93b2c5-d960-3f16-9c27-1d57e1e53271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.50.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:7d:33:9c:51:85:51:1b:3a:e7:af:d3:01:01:5e:b2:ec:ab:
         3f:91:e0:9a:ff:59:36:88:9c:55:4d:37:f0:07:0a:ce:80:26:
         4d:2a:cd:a1:b0:18:55:9d:29:13:55:b6:5f:4d:2e:0c:99:56:
         a6:79:cc:e6:eb:96:e2:ed:6e:64:eb:58:2b:9b:80:e8:60:39:
         0b:cc:64:7e:51:70:1d:59:2a:7c:62:66:02:5d:dc:70:ae:33:
         ff:1e:c0:37:5b:55:74:ad:14:de:a5:a4:e9:89:13:df:a2:c3:
         0f:07:6c:db:19:dc:dd:1a:3f:46:67:c6:a4:77:72:93:70:f7:
         c7:29:29:65:69:0a:ed:26:73:09:6a:bc:5e:bb:15:f2:d6:7c:
         d5:bf:4a:6d:f5:eb:d0:c6:46:d9:26:a5:99:e9:51:2d:34:55:
         70:28:ec:fb:c5:b9:df:7d:1f:90:a3:c2:c5:5c:50:01:08:1f:
         aa:dc:fd:e8:39:61:cf:e1:fb:dd:a0:cc:0a:ed:20:0d:1e:ed:
         4b:71:6e:05:0d:18:c0:3d:c1:c6:12:7d:c5:4b:99:20:cb:91:
         50:88:5d:45:c4:69:7d:4c:11:5e:3a:94:46:78:b9:73:3c:ab:
         f2:63:bb:7d:d6:f4:f1:af:c8:bd:9f:27:86:cd:a9:ae:02:c6:
         4f:aa:b2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:16 2025 by rpki-client