Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/549d7b24-8199-35cb-b1fc-be0c2978cfc4.roa
File:                     549d7b24-8199-35cb-b1fc-be0c2978cfc4.roa (raw, json)
Hash identifier:          3v0MW1/eoDqfNQrQC8mmXOlO4zkmlNOs2JSUOkpqqZs=
Subject key identifier:   D3:7E:C0:35:68:09:DC:57:CB:D4:95:C7:38:B9:59:BD:67:62:58:88
Certificate issuer:       /CN=50554af3-8108-491d-84e4-240f4874833a
Certificate serial:       010D0C9F43285849C0A4CEFFAE0CFDD9927A3100
Authority key identifier: 62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/549d7b24-8199-35cb-b1fc-be0c2978cfc4.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     6282
IP address blocks:        185.186.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:ce:ff:ae:0c:fd:d9:92:7a:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50554af3-8108-491d-84e4-240f4874833a
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=2ea3fa9e-bd81-4ba8-a079-52daa6f3b7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:86:59:56:59:92:4f:57:af:70:88:a7:d8:56:
                    cb:ea:19:39:10:46:02:d8:c9:34:18:c6:7e:bd:06:
                    2d:4a:f9:36:12:35:f4:85:da:ef:7d:83:8a:f8:60:
                    37:cc:f2:ae:e6:31:31:97:05:0b:52:ff:90:d1:b1:
                    c4:19:ab:2a:16:15:e0:6a:71:7c:6a:01:7a:41:0e:
                    fd:1e:f7:99:83:d1:aa:5b:f0:16:29:9c:e4:c4:94:
                    ee:c2:f2:f3:84:97:56:65:84:d1:7d:5f:60:f3:f6:
                    2a:24:74:a3:38:0c:a8:1f:88:65:69:70:53:2a:94:
                    1e:ed:a0:20:03:9a:c1:a2:e9:df:f0:a0:8d:ca:43:
                    e3:97:b8:17:9d:b1:fd:96:f8:ab:1f:63:49:36:15:
                    17:e3:dc:d8:6f:8c:c2:f2:0d:06:25:b5:62:12:76:
                    0b:6d:80:46:6e:1b:96:39:a1:ac:78:9b:7e:ca:8a:
                    7b:ed:5c:ed:bf:a2:d8:15:dc:47:c6:b3:3e:f8:42:
                    06:08:27:1a:de:f4:dd:2f:2e:fe:fc:b4:ce:0f:3e:
                    9c:82:6d:22:15:40:e9:5f:ca:1e:92:16:1d:49:8a:
                    3f:af:2a:91:32:e8:45:68:de:ae:85:8a:54:96:e8:
                    8b:d8:7c:ec:df:78:f5:20:ab:be:5f:cd:cb:f2:56:
                    22:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7E:C0:35:68:09:DC:57:CB:D4:95:C7:38:B9:59:BD:67:62:58:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/549d7b24-8199-35cb-b1fc-be0c2978cfc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl

            X509v3 Authority Key Identifier:
                keyid:62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.186.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:de:de:58:1d:f9:4f:07:c8:14:bb:18:49:90:6f:ed:25:a9:
         3c:da:4b:6c:08:c9:81:e5:99:4c:75:f4:dc:e4:d7:80:eb:cd:
         44:1e:21:b4:73:71:50:6a:73:29:c1:2d:23:28:8b:c5:70:f7:
         a4:bc:3a:83:c4:ab:d6:21:ed:17:e1:2b:8c:43:60:01:89:ab:
         2e:21:2e:0a:7d:27:47:4a:6e:36:f5:a9:f1:98:51:ce:67:bc:
         0c:6c:5d:bf:8c:5d:e3:d4:ce:bd:11:9b:8c:c3:88:fb:ed:4c:
         11:83:36:7c:ad:df:21:d4:09:f4:d3:37:72:d2:5f:e5:a4:71:
         26:a4:98:91:76:c5:31:f6:1c:28:7c:5f:53:e5:e4:46:f5:20:
         5f:95:6d:e6:74:36:f0:3a:7b:00:11:1b:bd:a9:f6:d7:f0:28:
         57:7a:4b:36:07:2e:1a:b9:2a:06:e4:ec:a7:8d:42:07:a2:b3:
         df:d4:fe:a1:11:b6:a4:44:6b:b9:72:7a:c8:f8:42:67:be:8c:
         10:56:f8:70:d6:e9:53:e2:c8:2a:ef:53:0a:20:ef:9c:34:2f:
         8c:da:0f:8a:8c:6d:3e:65:ea:80:6b:18:7c:2d:44:e2:c3:54:
         54:0c:44:02:b2:72:60:05:f8:2e:92:73:3c:69:a7:a7:8d:b4:
         12:3e:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:14:00 2025 by rpki-client