Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be2acd43-4afb-3116-b6e9-a124549dd77b.roa
File:                     be2acd43-4afb-3116-b6e9-a124549dd77b.roa (raw, json)
Hash identifier:          kn6cM6hrSAHLP+I8oFrL7cHDNR9f3nGbllum02NRK0s=
Subject key identifier:   0D:C7:A1:05:B6:FC:70:DF:BA:EF:3A:E6:A8:8B:3C:B2:75:DB:38:E9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848FFAD2A830D3EE568E6914840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be2acd43-4afb-3116-b6e9-a124549dd77b.roa
Signing time:             Tue 25 Feb 2025 10:06:55 +0000
ROA not before:           Tue 25 Feb 2025 10:06:55 +0000
ROA not after:            Mon 26 May 2025 09:06:55 +0000
asID:                     20940
IP address blocks:        184.25.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ff:ad:2a:83:0d:3e:e5:68:e6:91:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 25 10:06:55 2025 GMT
            Not After : May 26 09:06:55 2025 GMT
        Subject: CN=cb285748-3724-4a35-b9f4-a8acd7883594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b2:b1:10:bc:9a:1c:0b:76:2f:1c:94:85:03:
                    03:1d:5b:0a:d4:69:d6:07:51:f7:a2:4a:04:f8:21:
                    fe:a9:f5:5b:31:65:f4:f3:38:e3:b4:dc:f4:91:ac:
                    77:56:41:bc:05:af:d3:f7:bf:a8:fe:ac:29:69:58:
                    cc:6a:21:3f:28:9c:7d:e5:df:15:1d:4b:23:31:51:
                    36:e9:6f:25:8a:51:bb:f9:27:4c:9b:70:a5:2d:c4:
                    0e:eb:d1:47:97:35:8e:56:9d:cd:96:ac:07:3c:5e:
                    93:e4:74:b2:aa:21:87:b3:49:c1:97:4a:3a:4a:80:
                    5c:4d:02:8d:8d:f0:af:25:74:91:3b:a6:a2:ff:7f:
                    23:8b:c3:c4:2f:cb:2a:36:b9:0d:d5:80:9c:24:db:
                    fe:61:66:82:b6:2b:3f:79:a7:d5:6a:26:86:fc:62:
                    a6:90:d4:95:b5:0d:fa:4c:fd:72:ca:7a:8c:75:fc:
                    0b:38:ac:5a:39:12:d6:f1:ee:ed:43:a4:74:1b:38:
                    17:91:47:08:9f:1d:9f:8c:6b:91:b0:6f:62:e7:ea:
                    5b:46:89:7e:72:7e:b1:aa:16:b7:79:23:a3:32:8f:
                    2c:13:5a:79:68:43:7c:a8:fa:9f:4b:53:7a:8b:90:
                    0b:31:a9:53:0b:54:bb:77:cf:b5:cf:dc:9b:d9:e7:
                    a2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C7:A1:05:B6:FC:70:DF:BA:EF:3A:E6:A8:8B:3C:B2:75:DB:38:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be2acd43-4afb-3116-b6e9-a124549dd77b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b8:eb:23:a7:25:53:82:99:dd:a2:c1:d5:62:a7:cf:a0:c8:
         ef:e5:74:c9:8c:a8:c3:f4:73:a1:a6:21:4f:3f:fc:7b:ed:77:
         51:4e:ca:02:13:0a:4b:ee:c7:6c:95:8b:f3:bb:22:b2:ec:eb:
         7b:91:6b:90:12:df:e0:6c:5d:21:1e:b8:bd:63:53:1c:de:fa:
         33:c8:e5:ff:b2:d7:02:30:e9:3a:c7:7f:e8:49:a7:18:85:92:
         e0:07:37:2c:66:ae:9d:de:d3:0d:b7:2d:5f:55:59:95:a2:c1:
         5b:7a:2b:ba:04:91:12:a2:22:ad:fe:78:d2:47:0e:19:2f:e3:
         3f:31:68:74:10:3a:d8:28:5e:7d:6a:08:31:d7:1a:45:0e:91:
         f6:7f:28:ae:84:1c:75:81:20:8f:4e:2d:e6:3a:29:d4:3d:5d:
         04:d7:c6:69:8f:06:8f:98:dc:59:54:6a:9f:61:cb:2d:ca:21:
         40:de:da:fb:a0:c7:c7:6e:5c:0b:c4:af:e8:b9:55:f0:82:34:
         cc:9f:1f:d7:01:96:26:87:6c:b6:64:38:c7:25:db:db:94:bb:
         65:4f:cc:07:94:59:d1:6a:5a:22:87:45:d1:90:48:5c:3e:3a:
         1c:e4:b0:28:92:0d:92:6d:8a:69:11:cb:ff:f8:72:72:f4:8d:
         3b:98:cd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 15:00:52 2025 by rpki-client