Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7ea229d-48c1-39e7-a418-11cbdad51b69.roa
File:                     e7ea229d-48c1-39e7-a418-11cbdad51b69.roa (raw, json)
Hash identifier:          iwImDQFn6SpQwtmS7ju6gGlePLPxd4mL+oRti4kfHtA=
Subject key identifier:   63:82:2C:26:D5:DB:51:D9:68:E6:44:F2:10:DC:33:4A:79:E4:6E:AB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AFD812E1AD48D423A08D3F4E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7ea229d-48c1-39e7-a418-11cbdad51b69.roa
Signing time:             Wed 27 Aug 2025 01:00:32 +0000
ROA not before:           Wed 27 Aug 2025 01:00:32 +0000
ROA not after:            Tue 25 Nov 2025 02:00:32 +0000
asID:                     16625
IP address blocks:        184.31.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fd:81:2e:1a:d4:8d:42:3a:08:d3:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 27 01:00:32 2025 GMT
            Not After : Nov 25 02:00:32 2025 GMT
        Subject: CN=4f1c15b8-7769-43a7-bdd9-0c5825dce965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bb:ba:ee:ab:bb:45:7c:2f:c6:15:0f:eb:ba:
                    02:cc:3d:37:8b:16:ca:0b:46:b9:a0:50:28:91:6c:
                    b5:e6:97:6a:da:1c:94:18:4d:0b:69:e3:e7:41:1a:
                    ca:30:75:14:ee:78:82:a4:d6:4a:75:4a:e0:d5:62:
                    51:f9:6c:4b:03:08:d3:61:fa:52:ab:77:65:70:47:
                    c3:32:2e:bb:5d:b2:de:81:56:5c:b2:95:14:96:be:
                    0c:28:93:86:e6:e6:c5:a8:36:a6:c9:0b:b2:4d:93:
                    0b:ee:be:72:66:7e:59:40:ad:b1:09:1b:0d:e3:56:
                    11:0b:9f:50:9f:03:ac:3e:90:c7:f3:4a:66:19:84:
                    43:6c:fd:0d:5a:54:af:a4:ff:14:a2:5c:68:98:4d:
                    f8:e0:17:f4:46:17:f8:7e:7c:bc:bd:ef:b7:98:27:
                    bb:63:5d:2a:5f:52:f9:bd:d7:cb:77:50:68:17:14:
                    94:95:7e:e2:3d:dc:97:71:b0:e8:29:d3:ad:de:55:
                    ca:8e:af:52:8c:78:ff:bd:74:97:bb:cf:c9:f8:7a:
                    12:dc:b4:62:f6:bd:18:0d:2d:68:43:41:e7:51:a9:
                    38:e4:86:3c:cc:a5:36:5c:23:b6:f1:ce:23:3c:fe:
                    7a:f0:b4:d4:2a:0c:35:52:c0:94:f7:8c:0f:62:e1:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:82:2C:26:D5:DB:51:D9:68:E6:44:F2:10:DC:33:4A:79:E4:6E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7ea229d-48c1-39e7-a418-11cbdad51b69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.31.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a2:02:bc:90:0f:b0:28:da:1a:72:4a:d7:18:05:f1:1d:ce:
         59:06:4b:4d:f4:1d:8e:95:8e:ba:41:9e:73:6d:df:9a:3e:ad:
         be:d6:01:eb:42:dd:3b:83:f8:90:4e:fa:45:62:eb:5d:95:ca:
         71:c9:9d:28:72:fc:85:98:6d:a2:b4:b4:80:ac:53:89:a4:87:
         cc:78:3d:11:9e:f5:84:cc:ad:b7:a2:ca:8c:b9:80:1b:a9:73:
         19:91:95:3f:3f:fc:59:0f:4f:f0:15:95:c9:8a:7a:58:03:55:
         00:5b:b6:1e:cb:18:2f:98:11:46:d4:76:47:06:1d:4f:1e:20:
         23:a1:72:e7:8d:0e:bf:ce:86:be:2a:49:2e:96:1f:40:22:68:
         d2:d1:20:7e:29:45:9c:c3:b0:5b:19:55:ad:da:eb:0d:1b:e3:
         08:0a:32:fb:cb:5a:fa:07:ea:29:c3:4b:12:c8:6a:b9:62:2b:
         ba:6c:b0:ab:69:ba:e6:4a:70:37:3c:4a:98:b6:a2:59:78:83:
         eb:16:43:2a:9f:de:45:87:87:65:f3:1d:06:c5:22:7a:e8:ff:
         c6:4b:61:33:b3:5f:f3:4e:98:54:22:cc:b5:01:7a:17:1c:8e:
         fa:04:4c:ad:a8:d1:36:58:b5:22:c8:d7:20:98:21:7a:10:cf:
         f7:f5:30:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:19:06 2025 by rpki-client