Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9588c239-2842-35b6-9be7-a2ee76d384e8.roa
File:                     9588c239-2842-35b6-9be7-a2ee76d384e8.roa (raw, json)
Hash identifier:          XxDTNEjp6F4WPANQFmTx/UuJZgmvZCF/gXSzvEgL+8s=
Subject key identifier:   24:C9:D3:FE:85:1D:7D:F0:1F:29:DC:63:BF:12:9F:3A:37:DD:A3:7B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849194175236B68E4ABBE6AF600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9588c239-2842-35b6-9be7-a2ee76d384e8.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     25019
IP address blocks:        184.26.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:75:23:6b:68:e4:ab:be:6a:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=b2a42412-2231-47f3-a9be-e99691362ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:20:b2:dd:b9:0f:7c:e1:ea:84:85:19:f4:61:
                    5d:2c:68:3b:e1:c1:eb:df:55:35:bc:7e:ee:14:56:
                    fa:5d:88:90:55:22:88:1f:71:3e:80:15:a3:83:f4:
                    a5:0a:f4:d8:b5:13:e2:60:7a:dc:ca:4d:40:75:18:
                    c8:29:c2:31:74:7e:c0:95:8e:f9:72:18:7f:ab:24:
                    2e:23:f9:74:52:f7:03:0b:ce:3c:17:ac:e8:ba:33:
                    83:90:b1:d7:62:61:24:37:be:cf:a4:44:e1:20:ba:
                    17:32:9f:fb:27:0b:06:56:16:f3:d8:0d:ec:1e:c5:
                    30:67:9d:80:1e:0d:df:5e:83:10:ea:69:34:4e:98:
                    2c:8c:56:cb:33:c5:80:c9:fb:47:80:3d:9e:78:e0:
                    22:0b:41:51:01:fa:0b:3a:8f:6a:97:fa:16:6f:e7:
                    1b:fa:50:c4:b4:ed:ed:cb:90:5c:60:8e:53:2b:f3:
                    75:b6:af:c9:46:1c:82:e0:94:cd:2f:9c:40:f7:6a:
                    75:13:79:48:7c:02:49:cf:3e:6f:e5:5e:fe:93:8b:
                    f8:d2:6e:d6:9b:71:ef:60:2c:20:40:bb:e0:9f:c9:
                    14:89:ff:5e:87:3b:54:8f:be:7c:44:fe:ed:4e:dd:
                    66:be:de:d0:a0:dc:7f:42:dc:31:3c:bf:6c:02:a4:
                    f1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C9:D3:FE:85:1D:7D:F0:1F:29:DC:63:BF:12:9F:3A:37:DD:A3:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9588c239-2842-35b6-9be7-a2ee76d384e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.26.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b2:58:d1:4a:28:6d:09:fe:0d:75:fe:c9:c7:9f:05:52:b5:
         bc:a0:9a:b2:60:34:97:57:7b:2a:97:40:0d:da:21:4e:7d:60:
         89:99:49:b1:67:f4:84:4f:87:eb:b5:3f:8a:90:a8:6f:41:38:
         70:9f:f2:24:fa:69:c1:00:a2:82:3f:8f:41:eb:3e:c8:b5:a1:
         c9:82:d4:7b:c2:d6:73:53:1f:3c:4b:c7:fb:8b:87:91:df:d7:
         17:a3:7a:6b:f1:4e:b8:c0:3b:48:85:67:58:68:85:41:ae:45:
         10:d0:31:53:00:43:36:25:f4:58:2b:5e:6a:06:a9:8c:79:cf:
         5e:81:01:fe:01:7e:81:5d:cc:7d:69:51:53:22:f5:5d:42:96:
         1b:93:e2:72:05:21:39:01:a8:cb:ce:75:a8:8a:97:25:a0:92:
         f8:09:ad:df:89:83:0d:fd:ec:ec:ce:50:e2:b1:9a:09:02:36:
         99:b9:77:df:ee:60:b1:b9:38:b6:3c:52:31:5a:4a:e8:87:ff:
         91:c8:39:42:42:bd:5b:74:42:b3:fb:4f:08:14:7c:3a:2c:c8:
         0c:a5:e9:27:b7:06:f4:f2:13:04:ad:43:2e:22:54:05:c4:93:
         82:b3:28:a1:a0:6b:15:aa:d3:cb:91:52:eb:cb:12:fc:72:54:
         23:da:2e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 15:03:31 2025 by rpki-client