Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1985cab4-63f6-3047-968d-2d2ea87b89ad.roa
File:                     1985cab4-63f6-3047-968d-2d2ea87b89ad.roa (raw, json)
Hash identifier:          +le2qAYGqBx5PUcWuINg2ZXTqdsQlA7EevDl4YyuQX8=
Subject key identifier:   74:B6:44:E6:3C:3D:C6:42:A3:3E:DC:BB:53:06:34:5C:2B:27:0D:E2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584AF198514E68A4A9946046E700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1985cab4-63f6-3047-968d-2d2ea87b89ad.roa
Signing time:             Fri 22 Aug 2025 18:37:29 +0000
ROA not before:           Fri 22 Aug 2025 18:37:29 +0000
ROA not after:            Thu 20 Nov 2025 19:37:29 +0000
asID:                     22773
IP address blocks:        184.189.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f1:98:51:4e:68:a4:a9:94:60:46:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug 22 18:37:29 2025 GMT
            Not After : Nov 20 19:37:29 2025 GMT
        Subject: CN=f920817f-e5d4-4c42-a0b9-32b51ff06532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:0e:83:d4:74:c7:35:31:bd:46:66:7e:3e:
                    ba:9e:8b:99:dc:79:47:e7:a5:a4:85:5e:05:63:ab:
                    5e:76:20:6a:47:02:6d:61:1c:d2:c4:ce:f0:00:f4:
                    45:29:39:89:fa:02:b7:5d:48:78:b3:38:69:70:8f:
                    62:e8:ca:f8:72:c0:e9:1b:f2:59:68:e7:af:67:01:
                    1b:fa:2b:5a:7a:3d:a4:af:ce:5f:24:4a:f7:d9:7a:
                    3a:54:a9:68:75:af:14:40:df:54:9d:7a:74:98:e0:
                    1e:28:e2:03:bb:33:4b:c6:76:1e:7b:4d:a3:eb:45:
                    6c:cc:0a:19:db:5a:12:5d:8a:57:c0:6d:ae:9c:14:
                    c0:18:aa:b4:f3:27:60:60:74:0c:81:4a:85:dc:6e:
                    c3:dc:e1:83:56:05:da:31:18:4a:5e:d1:b1:9d:ab:
                    03:ff:ac:ca:bc:80:8a:91:e6:a2:5b:d9:43:ba:5d:
                    1a:3e:b2:2b:92:a7:ec:3b:80:b8:70:4b:77:5f:e1:
                    48:00:1d:e3:8c:6c:ea:1d:bf:8d:60:f7:39:c2:a4:
                    95:ff:ba:49:d5:c1:9d:e9:f5:60:44:64:36:14:28:
                    a1:49:f2:c1:e2:e9:e7:89:38:7e:62:38:4a:3e:47:
                    d4:57:0b:41:6c:40:aa:96:19:1c:25:e3:61:95:11:
                    31:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B6:44:E6:3C:3D:C6:42:A3:3E:DC:BB:53:06:34:5C:2B:27:0D:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1985cab4-63f6-3047-968d-2d2ea87b89ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.189.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:08:39:5f:24:57:36:bd:60:a4:d9:1e:2f:b7:f0:c8:e4:df:
         d5:09:ca:fd:6f:02:42:ff:7c:e0:3c:0d:ab:3b:38:90:4c:d9:
         a5:b2:9d:7e:fa:d8:58:1d:c9:40:01:98:85:e9:f0:6a:ba:4c:
         8e:b9:09:cb:b4:62:88:45:bb:dd:71:f3:50:86:9b:b1:3f:86:
         23:7d:03:96:10:76:7b:2e:a4:c4:af:27:f2:14:6d:60:31:e5:
         e3:36:8b:1e:11:df:1d:78:40:32:24:ef:c3:ef:29:57:96:84:
         5d:26:f4:20:1b:0c:73:d1:61:08:e6:58:73:2b:64:c7:21:a6:
         52:24:ed:f7:32:23:86:fe:23:f1:e9:3e:98:a9:11:c7:ac:cc:
         ea:db:91:16:ad:07:13:f2:6c:99:80:f7:74:73:89:2f:6c:c1:
         24:31:2a:24:71:54:67:a7:06:67:ce:03:8b:64:d3:48:71:b1:
         91:83:de:2b:ae:0c:65:94:1d:4f:b6:20:6f:5e:61:32:ea:5e:
         6f:d8:3b:ea:a1:77:e9:c7:f5:4b:a4:ec:4e:bd:1e:81:e2:02:
         de:ca:d6:e7:1d:09:63:2a:21:9f:d2:11:bd:36:a5:01:fc:85:
         2c:05:fc:ef:a4:b6:d9:1a:26:e1:9e:47:6c:94:69:6b:59:7e:
         a0:80:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:20 2025 by rpki-client