Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9651826b-f003-38f3-8de2-d0acf4f2800f.roa
File:                     9651826b-f003-38f3-8de2-d0acf4f2800f.roa (raw, json)
Hash identifier:          2sp02kmnesodnlj6c4u7wpVuKzmC2WQLFEEoS1JaTIc=
Subject key identifier:   D0:6C:DF:B5:CB:98:5B:F2:3B:87:58:BC:2B:EA:BB:B2:1B:09:AD:99
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA97BB30C44E9B8D836484
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9651826b-f003-38f3-8de2-d0acf4f2800f.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        184.147.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:97:bb:30:c4:4e:9b:8d:83:64:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=81069f25-e31f-416c-955f-668eb1bd187a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:7a:19:0c:de:7d:74:83:d2:e9:89:14:60:
                    b0:5a:f9:b1:a7:b9:a1:ef:7b:66:9d:ad:89:2b:7d:
                    9d:35:4a:cd:da:f5:4b:7a:cf:8a:be:82:f4:10:c7:
                    f8:18:42:7c:7d:c2:59:5e:93:2e:ac:da:ab:7b:3c:
                    f2:16:81:38:04:b8:8f:73:3e:0e:16:a9:19:d0:4a:
                    2d:3c:17:1c:dd:a1:fc:83:88:8b:04:1e:e9:00:36:
                    70:ef:76:63:7b:5f:2e:8d:bb:f8:91:7b:a0:8b:ea:
                    26:f3:56:7c:97:ae:e5:25:6a:0b:56:a0:c2:a3:e7:
                    0d:7a:fa:56:7e:19:59:39:8d:7f:66:65:b5:b0:53:
                    c4:90:43:d6:2e:a6:99:fe:7b:46:d8:be:53:f9:14:
                    81:e6:85:c0:cd:ed:cf:d4:ae:f0:e9:24:49:76:b1:
                    e4:63:62:72:60:aa:82:eb:82:68:9a:c3:56:ba:28:
                    e6:ff:ad:ab:14:98:79:09:03:77:57:80:9e:77:4f:
                    9d:75:0b:76:4c:98:00:3b:be:77:1d:0f:6b:0e:13:
                    0f:07:16:df:a2:d7:18:51:62:11:ca:5c:a1:66:ab:
                    ba:41:7f:0f:13:d8:0c:04:06:75:34:d5:4f:f7:31:
                    e5:43:78:5c:b8:75:ff:91:60:17:07:c7:24:34:e3:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6C:DF:B5:CB:98:5B:F2:3B:87:58:BC:2B:EA:BB:B2:1B:09:AD:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9651826b-f003-38f3-8de2-d0acf4f2800f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.147.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d0:73:5c:c7:b5:4b:68:7a:f6:b5:f1:a3:f3:ca:a1:7b:32:
         55:46:95:a4:9e:b3:66:3f:98:f2:f8:ba:74:61:c7:aa:e1:41:
         c0:bd:f4:3b:de:7d:d1:56:24:71:a7:78:78:1d:20:7e:3a:2c:
         51:7a:d7:2d:2a:6f:6d:68:c2:59:dd:fc:cb:c6:eb:4b:b1:e7:
         24:ef:10:e9:c4:26:be:3d:de:34:9e:f2:43:d2:c7:f8:ee:ac:
         c7:60:b1:24:c1:53:c7:66:89:3c:ca:ef:23:5b:04:cf:25:b5:
         42:ff:bd:f1:e3:16:e2:4d:db:2e:59:b7:99:fa:0b:bb:1c:24:
         c3:bd:f5:98:8a:18:d2:a4:dd:30:02:12:dd:84:c1:e1:ff:d3:
         a4:c9:94:0a:ff:30:a1:8c:07:9b:df:b6:69:f1:aa:56:5a:70:
         47:19:41:72:e3:1b:4b:89:c3:f8:63:66:4b:1b:25:8f:84:fe:
         7e:66:66:a5:16:9a:6a:3b:2a:ab:ed:cb:82:a7:65:67:65:69:
         31:97:04:8f:67:e9:b1:4f:8b:c8:06:a1:71:fe:40:08:8a:36:
         03:4a:51:5c:35:33:c9:c7:58:4b:e0:ac:da:66:7a:41:5d:73:
         e7:25:e3:05:99:16:a1:87:14:63:41:39:c6:54:2d:46:e2:9f:
         f1:55:49:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:09:43 2025 by rpki-client