Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/84e996f0-ed2b-3b52-a485-7da64d83f07c.roa
File:                     84e996f0-ed2b-3b52-a485-7da64d83f07c.roa (raw, json)
Hash identifier:          yVoSM7uWXt7wsfTEYJL5djhUZlNKp9KMiJzkk9ncsyw=
Subject key identifier:   59:7E:94:A2:4B:20:7C:CF:FC:A3:92:C2:86:57:DD:71:D0:E1:CB:B5
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584B8BE2111F200409B6859AA07B
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/84e996f0-ed2b-3b52-a485-7da64d83f07c.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     53931
IP address blocks:        184.60.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:11:1f:20:04:09:b6:85:9a:a0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=dac0bf32-b267-42ab-b88f-d6e75374caa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:79:a6:33:22:7c:16:81:85:18:66:6f:eb:5b:
                    e0:37:cb:3c:cf:97:4a:ec:b3:d5:ca:92:1c:01:27:
                    40:b8:55:c7:3e:1e:3a:2e:0d:7b:6d:a2:09:17:e2:
                    99:9e:8c:4a:5c:3e:70:a4:69:c0:1f:e8:ae:13:49:
                    7d:98:1e:8b:d7:95:17:73:01:45:bb:9d:2e:a9:b2:
                    52:c8:5f:42:f6:7b:b4:48:ef:1d:61:ca:c0:fc:f2:
                    07:76:d3:6a:46:57:f6:f2:94:89:45:d4:c4:fc:e9:
                    c2:ba:85:84:06:ee:e3:88:54:49:80:be:1c:51:3a:
                    35:9b:82:77:68:21:1c:b9:b9:55:88:8f:35:69:6d:
                    c6:ba:06:d7:d6:f0:3a:2c:8e:fc:55:33:86:ae:ec:
                    fe:7d:cb:c9:66:b4:c2:17:ed:19:ba:26:1d:01:67:
                    0f:64:0b:a4:53:dd:cc:ca:a2:c7:86:a6:09:28:fc:
                    20:24:de:d5:95:54:e5:bb:12:ab:bb:ec:9b:ce:fc:
                    9a:92:1f:18:a4:c1:27:51:d1:be:02:4d:b0:4b:35:
                    b6:e5:93:84:3c:0b:b6:db:ab:8b:86:90:c6:5a:1b:
                    0d:a9:8f:1d:f6:aa:1a:e3:1b:8a:e1:59:28:03:fb:
                    2e:31:82:64:ee:41:5a:ff:6c:8e:86:55:92:29:db:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7E:94:A2:4B:20:7C:CF:FC:A3:92:C2:86:57:DD:71:D0:E1:CB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/84e996f0-ed2b-3b52-a485-7da64d83f07c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.60.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ba:88:13:d6:06:da:cf:ae:d2:28:cc:1a:ec:51:77:bd:1e:
         06:e0:92:a1:7d:15:70:c6:2e:08:47:c3:7a:e0:35:2f:40:4a:
         f1:46:44:21:b2:be:2c:7b:f7:27:f7:61:0b:ef:60:e5:d1:37:
         0a:7b:83:18:24:ee:a1:ae:0a:87:4c:c0:f8:dd:3e:8f:4e:2b:
         a3:f0:ae:2c:35:7f:e0:28:d5:a7:ef:35:5b:4f:48:8d:fe:c4:
         0c:8a:f9:eb:d6:5d:f8:08:e2:59:b1:5c:da:9a:49:b0:93:c5:
         05:be:03:ad:c9:4c:46:7f:83:79:4a:e4:18:45:f6:58:02:1b:
         38:af:0d:a7:c4:96:52:63:2c:98:61:12:82:84:ce:be:c2:1f:
         45:77:0c:a4:01:9a:df:10:3c:e2:c2:4a:2d:ab:e6:f5:f5:13:
         76:6d:c6:d1:b1:9c:d9:d2:87:e8:b7:94:70:52:4f:f4:24:b5:
         20:1c:b4:e7:06:14:24:ee:29:16:3b:5d:ff:c2:57:4a:0f:8e:
         c8:b2:1f:a9:41:6a:e2:28:c3:2e:90:ac:b5:20:c3:90:a9:4f:
         b8:d7:06:07:f0:ef:4f:8a:cd:84:99:7d:c6:e8:81:0f:89:e4:
         b9:d1:54:19:0e:48:50:8a:2c:33:7e:6a:ec:e2:7a:86:80:55:
         7c:bb:fd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:23 2025 by rpki-client