Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f850f69-0911-3b23-b26c-735eaf31d11f.roa
File:                     8f850f69-0911-3b23-b26c-735eaf31d11f.roa (raw, json)
Hash identifier:          AHrxPX2D0r7arkzSjQewvL8WXiU7LZRXTl5w0HemcdA=
Subject key identifier:   30:9E:46:01:72:FF:3D:94:69:81:87:F5:62:15:C6:2A:59:EA:EC:51
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849EBEA877780C581988E00BF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f850f69-0911-3b23-b26c-735eaf31d11f.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        184.50.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:87:77:80:c5:81:98:8e:00:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=bf2c5d3e-9edb-428f-bcfc-90801e93ea27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:12:a0:b2:2f:5f:8e:06:45:7c:08:fc:e6:6d:
                    bf:4d:d0:10:6d:e1:49:d2:1e:bc:77:a6:3e:26:c9:
                    bf:7b:20:a7:1e:13:f9:74:5f:98:ff:a7:58:03:34:
                    f0:b9:6f:c4:9b:da:69:10:f2:12:8c:0b:de:af:40:
                    41:8b:33:2c:ba:35:63:9a:35:43:fc:ec:ea:54:6a:
                    cb:c7:9c:8b:67:2f:55:ca:1b:6c:de:8d:92:5d:1c:
                    99:1c:d0:93:65:ce:1e:be:f2:73:a8:af:9f:6e:3b:
                    d4:09:56:0c:6e:81:31:8b:23:a4:d7:88:94:d6:3c:
                    bb:9b:6f:9f:0a:09:84:a6:2b:2e:2a:46:94:08:d8:
                    a2:ff:1c:60:8a:cc:96:7b:49:21:e8:09:6f:7b:1d:
                    1b:09:b4:30:b7:a1:6e:38:0c:ed:41:0e:06:5f:06:
                    5e:f9:fe:9a:45:e0:78:1f:97:1f:1c:25:3c:d6:b7:
                    24:6e:ed:66:6e:2c:be:27:9f:b4:ec:f3:9d:d3:9a:
                    c9:07:ca:36:1f:90:c6:72:9b:e0:0c:9a:3a:68:b6:
                    69:82:c9:30:13:3c:95:b0:23:92:b1:51:52:e1:f5:
                    e9:76:a0:ff:54:6d:11:83:c6:74:2c:14:28:02:97:
                    16:b3:24:a8:18:51:5b:dc:15:0f:47:e5:bc:72:2c:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9E:46:01:72:FF:3D:94:69:81:87:F5:62:15:C6:2A:59:EA:EC:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f850f69-0911-3b23-b26c-735eaf31d11f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.50.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:07:69:24:7e:2e:1f:c1:e5:85:64:23:64:d6:88:94:56:14:
         e9:5d:16:89:67:72:04:d3:5e:be:22:4b:02:db:15:8d:d3:dc:
         f7:d2:ba:d0:20:69:2e:0a:eb:73:24:d3:74:3d:b2:9c:87:cf:
         4c:7a:d5:66:46:cf:e5:44:99:7c:12:67:a2:56:55:8b:1d:35:
         15:ba:ef:17:eb:28:dd:87:b0:bc:a6:20:c3:e9:a5:f3:36:f6:
         16:90:cb:bc:9e:bd:a6:43:fb:d7:32:64:03:e6:aa:b7:de:89:
         62:69:0b:66:98:1c:15:54:03:c8:d1:bf:7c:96:c2:13:91:e5:
         28:f7:40:4b:25:e5:a2:a3:52:fb:cf:9a:01:4a:40:2c:98:e1:
         91:f9:2b:2a:e9:8a:e5:02:ba:09:61:cb:f3:bb:3d:73:97:a8:
         0e:5b:60:ae:e0:de:cc:ff:04:59:0c:01:89:19:f2:ed:90:b4:
         c0:80:19:32:65:0a:51:d9:b2:ca:2c:6b:87:53:90:3b:2e:d8:
         5c:48:d4:47:99:f1:99:27:14:f8:69:7c:32:fc:7f:3d:1d:9c:
         3f:39:2b:a4:f9:c1:df:5f:06:d8:c1:7c:a4:ef:0e:72:f2:31:
         68:b2:0e:69:28:83:54:88:cc:41:96:22:8c:43:2c:ae:d8:6c:
         a0:f3:50:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:16:19 2025 by rpki-client