Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1429b5f-e249-38ca-a98a-7de6c3812869.roa
File:                     a1429b5f-e249-38ca-a98a-7de6c3812869.roa (raw, json)
Hash identifier:          LLs3MOllKP8iBYqfhzdLSoenPYKWMFphoF1O+LMoFXw=
Subject key identifier:   38:C0:BE:A0:1F:AB:16:19:FA:D1:44:4E:6E:9F:26:23:4A:DB:7F:61
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849EBEA63632D8E57F6F4992EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1429b5f-e249-38ca-a98a-7de6c3812869.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        184.50.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:63:63:2d:8e:57:f6:f4:99:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=50752208-28e0-4dd1-b2bb-f7a77453d9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:91:1e:ef:06:48:3e:be:ab:7c:7f:67:d2:61:
                    2c:91:03:27:a5:27:6f:89:40:4b:47:bd:1f:15:8a:
                    18:6f:ce:13:e5:c2:d6:18:31:5e:b1:7f:37:de:bb:
                    01:ed:74:b6:6d:26:1e:09:aa:31:19:75:ae:31:fd:
                    39:3d:65:d7:78:39:14:34:d3:e8:c3:f0:9b:e9:f4:
                    eb:52:ae:73:85:db:c9:7e:59:75:9e:25:5a:f5:5a:
                    96:b9:52:fd:27:f1:6b:69:dd:21:6e:58:72:d8:d6:
                    f0:10:50:b3:64:66:7f:86:38:a5:98:42:fa:e7:3f:
                    77:94:16:d4:f0:41:16:c7:10:6f:bc:80:83:74:15:
                    e6:df:1f:1d:79:30:9b:8c:78:21:e0:45:eb:68:b6:
                    61:62:b7:23:1a:29:b6:98:af:81:e7:93:d6:97:fc:
                    a3:9c:28:bc:dd:d7:36:ea:1b:2b:52:c1:9a:86:87:
                    6f:82:4d:55:82:46:c1:08:99:40:e2:62:bd:4f:9c:
                    35:ba:a5:b8:23:21:42:03:e4:03:58:d0:94:ea:3f:
                    73:7c:c3:48:a9:53:2b:a4:0e:1f:5e:6e:fd:b6:89:
                    61:a2:fa:89:e3:7b:90:46:ed:f3:59:4e:ec:c3:b6:
                    6e:32:50:15:6e:3a:40:ea:39:1d:ff:dd:28:86:04:
                    1c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C0:BE:A0:1F:AB:16:19:FA:D1:44:4E:6E:9F:26:23:4A:DB:7F:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1429b5f-e249-38ca-a98a-7de6c3812869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.50.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:47:ac:16:dd:62:f8:d3:2f:a2:06:d2:85:14:7c:bd:89:e7:
         cf:d4:0f:f5:73:13:c0:f2:f0:a2:8d:89:cb:30:15:90:8c:c1:
         97:88:0e:52:62:43:e6:ad:9b:64:97:31:a1:25:6d:71:1e:2b:
         7b:ea:65:7a:12:af:fc:73:37:82:0e:7d:db:59:c1:57:2b:33:
         85:be:4a:bf:66:f0:d9:26:76:35:19:24:9b:28:e7:6c:2e:4c:
         1d:a2:76:5d:cd:4e:22:9f:75:00:e5:0c:5a:7f:79:2f:0a:24:
         d7:8a:d2:15:01:91:22:c4:df:cf:53:91:6f:68:cb:90:86:e6:
         31:3c:11:60:45:61:a6:22:8f:ee:73:1a:9f:e5:5c:44:06:70:
         56:eb:0e:32:83:44:0d:f1:28:ea:5b:62:e3:2c:52:c6:01:49:
         c1:aa:d3:5d:1c:55:3b:6f:68:31:fd:6e:e4:00:ce:09:e2:d9:
         b6:e7:e2:ad:97:9f:b4:69:a7:cf:77:a1:62:e4:49:54:14:d8:
         c3:4e:4b:0e:1a:4e:25:30:ff:24:f2:1b:7f:92:0b:35:80:ee:
         05:a4:27:3e:d3:58:0f:c8:7b:fa:11:0d:85:e0:78:b4:4c:ab:
         48:1b:e9:dc:2a:7e:b3:54:0e:ef:cc:cb:c7:ef:1d:4d:87:47:
         08:b9:94:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:24 2025 by rpki-client