Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b02894d5-195a-39df-a511-30005c8c6e75.roa
File:                     b02894d5-195a-39df-a511-30005c8c6e75.roa (raw, json)
Hash identifier:          cYZUMwoCCiBxhlsxuzjR1BePqIE+osxTOkcmE240iRI=
Subject key identifier:   E1:A1:BC:93:B2:C2:6A:5C:9C:FD:5F:71:06:61:B2:F7:7E:DF:00:CE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858490E16D1720A0BDB25E800E7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b02894d5-195a-39df-a511-30005c8c6e75.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        184.51.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:d1:72:0a:0b:db:25:e8:00:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=6f94b4fe-3d1c-457f-a433-b0f438e45402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:e2:19:be:31:9d:5e:f6:d5:fb:57:fb:5d:
                    af:d7:11:d8:48:d1:7b:7b:e0:ae:3e:28:89:54:b2:
                    44:71:ee:d0:5b:37:49:e2:d2:43:50:72:89:ad:eb:
                    ca:87:e5:d0:cb:be:47:ca:b7:34:04:17:86:9e:87:
                    a1:2b:93:25:86:75:80:b1:81:7f:96:00:a1:71:1d:
                    63:08:8e:51:28:56:fb:c5:eb:0a:d8:84:15:bc:70:
                    5d:2e:1f:2b:61:50:c9:80:5c:90:82:99:27:84:ff:
                    da:85:68:ac:09:e5:fc:34:bd:08:eb:45:0d:48:71:
                    34:c6:b8:fc:97:d5:28:8a:e8:dc:1e:f2:cd:bb:49:
                    59:76:1a:7b:c4:13:64:63:7e:3c:3c:83:ba:83:b8:
                    53:e5:64:4e:b2:c4:a2:5d:0f:ec:47:b2:c2:b1:d0:
                    a0:90:78:9a:64:5f:df:2a:94:fc:04:f6:aa:93:0a:
                    d4:16:5e:bd:40:0d:4e:d7:9d:3a:2a:f1:1a:9a:47:
                    05:56:9c:02:eb:12:da:14:93:21:e5:7d:25:85:f0:
                    03:0b:69:fe:de:93:53:68:2b:e8:d8:63:1f:3d:d1:
                    94:0a:1a:7b:bc:e5:e0:b5:8e:7b:23:b9:c4:0e:09:
                    c2:86:13:e5:09:43:42:39:17:03:47:ec:57:f6:74:
                    f1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A1:BC:93:B2:C2:6A:5C:9C:FD:5F:71:06:61:B2:F7:7E:DF:00:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b02894d5-195a-39df-a511-30005c8c6e75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.51.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:07:8c:7e:b0:1e:a1:16:3a:90:06:7f:d7:bb:b4:9c:2c:76:
         34:e2:c1:93:d0:58:62:28:f1:d3:44:28:f5:7b:84:eb:1e:4e:
         a2:36:b8:31:14:cf:ff:12:a3:9c:ca:6e:56:42:0c:2f:9d:e7:
         15:96:cc:cd:36:b5:5b:66:7f:e7:05:22:91:5c:b1:a4:50:ea:
         a0:ab:94:ec:33:42:2a:27:da:4b:57:6b:0a:30:e1:c6:fa:5c:
         9e:a7:f8:d7:3d:5b:53:91:1f:86:90:c2:7c:f8:aa:81:7c:6e:
         90:c4:25:b7:d0:a4:62:91:38:79:52:09:de:a8:bb:d5:5d:c2:
         d7:0f:ab:d1:ff:df:7a:0a:60:c5:73:e6:8e:5d:e5:6d:e1:32:
         1a:f9:29:57:24:23:fc:01:de:0a:f0:fa:2a:74:9e:33:14:90:
         62:05:0a:f4:c1:42:d5:2f:1b:fb:89:a0:cb:df:fa:60:9a:43:
         8e:d4:71:88:2c:e6:35:fc:99:28:e5:cc:e7:f2:dd:7b:8f:72:
         26:e9:1a:71:21:fa:2b:6c:48:13:bf:5a:95:89:ef:c2:c1:01:
         d7:54:1b:23:67:78:c3:40:8f:e8:a2:0a:8a:71:32:1d:a3:44:
         f7:ff:f8:47:a6:5b:a4:fc:de:63:e5:06:c1:e9:d1:51:02:11:
         53:d8:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:04 2025 by rpki-client