Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f05f1dbf-fdc0-3caf-a92c-11568ec788ab.roa
File:                     f05f1dbf-fdc0-3caf-a92c-11568ec788ab.roa (raw, json)
Hash identifier:          3MMiP7TFEGFaibZPn9jyyqnvu4BOnx3uOhJmiV1taLE=
Subject key identifier:   D0:B5:D0:52:2B:9A:B3:CE:55:7A:B0:F5:3B:BA:72:1C:FF:DF:4B:4D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849203C1AC4BE146D4C28E4BF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f05f1dbf-fdc0-3caf-a92c-11568ec788ab.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     35204
IP address blocks:        184.26.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:1a:c4:be:14:6d:4c:28:e4:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=c7886bad-8bc2-4ea6-b51d-230e4abb5168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:09:9b:b9:3f:3d:61:b3:97:6f:2d:00:bc:
                    76:cb:b6:85:47:17:47:d3:9c:8e:3c:3b:de:21:fc:
                    72:d6:6f:6d:71:56:13:b6:db:3b:1f:f1:8f:ec:f1:
                    39:8c:21:8f:22:45:bc:6e:67:64:7a:2d:b3:5e:b3:
                    bf:c6:f9:09:d8:81:f4:2c:47:78:2c:51:b3:0c:19:
                    9c:8b:ff:7e:cc:9f:ba:29:bb:53:eb:88:1e:4e:3e:
                    3b:22:6a:f9:62:36:ed:34:b4:c4:29:f5:9e:40:40:
                    15:2d:3d:14:1d:6f:32:6d:7e:ed:19:01:81:db:af:
                    ef:b1:93:ce:da:1a:41:8e:8a:8e:ed:f7:38:6a:a5:
                    ed:40:3b:44:d6:a5:7c:06:1f:d5:0f:d0:a0:0b:05:
                    bd:59:fb:f0:83:4e:15:7e:a2:74:b5:52:b9:99:8f:
                    c4:c8:5a:39:d6:95:09:87:92:c8:c4:e8:0e:ad:9e:
                    c5:8d:c8:3f:fb:13:18:03:95:13:b9:e6:19:bd:01:
                    07:cc:88:19:79:ae:a4:f1:de:7b:52:8b:dc:ea:b7:
                    26:9c:9a:24:80:fe:c2:1b:d5:5f:70:0b:1f:98:f9:
                    e2:64:ef:4d:9a:ce:ae:cc:be:87:5c:64:83:81:3d:
                    3c:01:f9:ba:67:03:45:40:96:62:12:f1:59:03:2c:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B5:D0:52:2B:9A:B3:CE:55:7A:B0:F5:3B:BA:72:1C:FF:DF:4B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f05f1dbf-fdc0-3caf-a92c-11568ec788ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.26.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f9:21:82:9c:c8:b7:cf:4b:1d:8d:ab:6e:69:10:4e:05:83:
         e5:f4:c5:49:a6:7a:5e:07:16:bb:bf:33:34:d1:e5:81:13:3f:
         3d:8d:5a:0c:77:e8:82:8e:e4:bf:10:70:65:dc:7b:c1:da:f7:
         c7:87:27:f1:3c:17:4f:ba:c1:10:47:15:90:61:25:4c:4c:bb:
         c1:1a:a4:34:bd:b3:0c:a6:d1:b9:17:1a:47:59:93:75:3e:32:
         42:82:af:4c:70:99:ce:41:00:79:6b:ab:c9:47:68:4b:00:2c:
         60:58:7a:98:de:96:13:c8:88:a2:1f:50:f1:cb:94:49:90:da:
         8b:9f:09:12:50:30:14:49:95:09:2d:c0:10:90:72:78:92:80:
         36:b6:d0:7a:94:22:e5:2a:dc:05:c5:c5:d0:ac:f9:ab:8b:b5:
         12:6e:e9:c6:92:ed:e7:fa:43:66:50:86:34:3c:21:17:d0:58:
         41:de:6b:ea:08:77:bd:29:43:25:5a:af:b5:36:29:ed:78:6b:
         b2:85:b3:59:a0:e5:33:2f:44:1c:61:d0:14:8e:44:38:98:9f:
         d3:4f:03:4e:6d:8b:93:10:34:31:92:31:f9:ce:a2:76:60:7c:
         d0:30:f4:96:0c:ac:2f:bf:ee:16:4b:5e:93:3a:4d:55:09:4b:
         7d:1e:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 15:03:47 2025 by rpki-client