Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b776fa48-74aa-3439-8520-69c7b8a8d1fc.roa
File:                     b776fa48-74aa-3439-8520-69c7b8a8d1fc.roa (raw, json)
Hash identifier:          O4gE1UCsKOoPfVHfan8L350peyQIriTR3P29XHJOQOM=
Subject key identifier:   EB:82:23:78:C4:7F:84:DB:0E:67:B0:47:80:B0:5B:45:3D:3C:F2:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849E7BA63F68B98274ACDF16850
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b776fa48-74aa-3439-8520-69c7b8a8d1fc.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     16625
IP address blocks:        184.28.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:63:f6:8b:98:27:4a:cd:f1:68:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=cb1bb555-d607-4ee0-b88c-18a5d77d7933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5b:8d:e8:fc:6f:42:35:e3:d7:8d:17:92:45:
                    2d:71:8c:a3:90:05:2b:6e:ae:f9:cd:e8:6f:b5:e0:
                    3a:87:6f:a4:a0:80:0a:08:7e:80:37:4e:f5:43:98:
                    35:fa:aa:f7:b7:f2:82:eb:b1:45:8e:76:7b:cb:98:
                    08:06:29:51:00:ba:53:90:f7:11:12:d5:d0:12:35:
                    39:26:9f:34:e1:2f:6a:57:40:93:e5:d1:80:96:e7:
                    ce:5f:7e:6e:f2:02:5d:a4:d4:66:96:06:1f:b0:97:
                    3d:75:f0:c5:68:bc:79:bf:15:4a:d8:96:57:d9:34:
                    2a:2f:0d:4a:5a:98:0b:dc:17:a1:2f:db:a4:90:dd:
                    cf:8f:8f:fe:c2:78:32:86:73:ce:8f:39:a2:54:94:
                    d4:78:0a:5d:f1:67:21:ac:61:79:d6:a0:14:a9:2d:
                    82:ae:0c:a8:d3:a6:68:0f:53:46:9e:f6:d7:af:50:
                    89:65:c5:8c:3b:33:e1:63:21:e8:74:63:2f:4f:8c:
                    40:2f:cc:6e:14:14:cb:df:f8:fc:81:4f:84:dd:12:
                    a7:13:6b:06:5e:96:ad:49:bd:f8:d2:fd:40:8d:46:
                    44:99:27:8e:28:86:4b:89:45:2d:09:84:26:e4:ed:
                    c8:f8:89:34:38:00:ef:76:89:d7:ab:e3:1a:4e:2c:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:82:23:78:C4:7F:84:DB:0E:67:B0:47:80:B0:5B:45:3D:3C:F2:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b776fa48-74aa-3439-8520-69c7b8a8d1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:39:1b:47:57:dd:92:cf:12:fe:a8:10:cd:2e:68:c2:63:1d:
         fb:a0:74:a5:50:57:f6:31:9f:4f:bb:64:f1:db:d1:d9:ab:aa:
         90:f1:ee:c2:52:4c:71:72:5e:54:2d:d2:92:1d:53:25:c4:b5:
         37:34:5a:8a:4b:aa:e4:9a:f1:d4:98:17:66:e1:bc:18:5b:5b:
         c7:25:e0:77:0b:5b:12:c4:cc:a4:a8:d3:de:72:db:f4:c3:01:
         6e:40:69:64:6b:d5:30:15:ae:43:c6:e2:29:9e:02:6b:3f:18:
         c1:04:cf:67:0e:69:62:45:b3:ae:f9:63:38:ee:50:54:7f:12:
         f7:78:a9:91:39:84:a0:3a:e8:50:fa:9c:da:0e:62:de:2e:13:
         53:97:f2:6b:23:7f:7d:63:2e:6a:c0:d9:d6:62:3d:00:e2:7e:
         91:4c:9c:a3:d2:82:a2:2d:b3:20:bd:d3:f3:99:61:13:53:1c:
         57:4d:1e:e8:57:0a:66:b6:0e:81:be:09:c6:b1:15:0f:99:5e:
         48:c0:12:09:44:40:5c:92:bc:e3:e7:ab:42:04:b1:b6:c3:79:
         84:b7:db:37:2e:16:7f:f0:4b:b3:79:f5:5c:67:17:8b:4f:00:
         ad:d3:32:69:05:72:2d:d7:a7:7f:58:6b:c5:ae:51:89:88:d3:
         d3:9e:28:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:24 2025 by rpki-client