Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7ad51b-f397-3fbe-ab97-d62635927dd4.roa
File:                     cb7ad51b-f397-3fbe-ab97-d62635927dd4.roa (raw, json)
Hash identifier:          DpQbWmvyH7DZOvhlxqDQMXGL6gEt8sliFgwKBDJNj/0=
Subject key identifier:   11:B7:6E:16:65:CC:BD:04:F6:2D:AB:C6:74:D9:97:29:31:CF:1E:E7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849F44A620C329D8699668B5D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7ad51b-f397-3fbe-ab97-d62635927dd4.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        184.85.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:62:0c:32:9d:86:99:66:8b:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=6e49b3fc-43e5-4855-8214-ad76c7280499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:10:6e:aa:64:08:43:bb:f0:bf:0c:bc:e1:57:
                    9b:9c:a3:4c:84:ff:ca:f3:fd:00:8d:c0:75:28:63:
                    42:d3:ad:5f:fc:5b:22:5f:a7:69:4e:18:f3:0e:45:
                    be:a8:3b:b8:0f:06:7e:ed:e4:79:12:8f:ef:f8:70:
                    93:e4:7e:56:39:4d:c8:d1:be:59:e9:1f:d7:37:fe:
                    0f:ec:a5:08:2b:e3:fe:95:f0:4a:9c:97:09:d9:4e:
                    9c:d6:96:62:77:2a:9b:80:bd:34:9a:9d:4c:92:79:
                    db:5c:82:03:81:94:2b:3c:26:68:1a:c2:86:d2:78:
                    eb:ea:73:62:d7:50:05:1c:76:4b:3e:b5:05:a5:fa:
                    99:12:e7:6c:4d:fb:84:e1:c5:74:45:30:6a:1a:93:
                    1b:9a:ee:a8:25:1c:3a:bc:3e:83:bd:1a:7a:f0:26:
                    0b:f5:74:72:8a:0c:83:45:bc:8a:71:a1:40:14:7b:
                    86:25:3a:2f:52:90:fb:ce:0b:02:6f:26:ac:dd:0b:
                    6e:e3:a8:c9:12:e9:c2:19:16:85:f6:2e:65:89:62:
                    c6:4c:15:20:75:68:db:3f:f1:a3:cc:e8:9b:dd:15:
                    53:92:4a:8d:dc:7d:b3:68:74:d7:8d:e4:dc:62:d3:
                    0a:e3:08:2f:7a:85:8a:22:36:06:d3:c1:c2:4c:a1:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B7:6E:16:65:CC:BD:04:F6:2D:AB:C6:74:D9:97:29:31:CF:1E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7ad51b-f397-3fbe-ab97-d62635927dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.85.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:af:00:85:77:cd:9a:bd:a9:a2:c2:f3:d0:de:a7:5f:0c:2c:
         2a:f4:81:2e:2d:e9:e4:d3:69:38:fe:58:51:c5:2e:0e:61:06:
         cf:f7:06:e2:d6:86:93:97:0d:9c:b4:69:94:88:22:07:80:55:
         f3:82:db:7f:39:d2:97:a4:92:29:dd:47:cd:86:8b:d7:70:00:
         ae:c1:0d:a8:78:6a:6c:16:2b:a6:bc:ca:76:6c:2c:4d:74:f0:
         dd:e2:89:4b:e0:7c:ef:ed:16:f7:d6:29:6c:bb:0d:36:e6:06:
         70:84:42:85:c7:ec:16:00:3f:52:38:1b:30:9d:35:41:d3:c3:
         d2:18:48:63:74:82:00:cb:43:b8:62:5d:0d:32:6e:a6:42:67:
         b5:8f:45:ff:a0:8d:59:81:c5:8f:9c:fe:84:db:f5:37:ee:8c:
         f1:d2:b6:0a:eb:15:04:32:d5:9a:b2:ce:b9:9f:c9:ea:8e:78:
         86:fe:ac:15:6f:73:47:e6:5c:71:bc:19:81:87:1f:14:28:8c:
         ea:46:3c:de:d6:23:0d:a4:2f:df:3c:3a:95:c4:bd:72:fa:00:
         7c:8e:3c:14:2b:fa:6c:82:ae:ad:78:64:12:2e:a0:ba:0d:23:
         7c:4f:9e:87:e7:a5:2b:7b:f1:fc:c9:42:95:76:5f:01:d1:e9:
         10:5d:a9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:35:34 2025 by rpki-client