Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72f56fc3-abde-31e8-96cb-c81903ec0818.roa
File:                     72f56fc3-abde-31e8-96cb-c81903ec0818.roa (raw, json)
Hash identifier:          tsUtCnu1E1iHmqY9CEqVSEF2KoQ4ut00sXuucaAH7GM=
Subject key identifier:   EA:46:B6:09:50:09:08:47:AA:98:A6:E0:8E:44:F9:99:D3:51:84:1B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AE0319B6E78DC7709A1DA0D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72f56fc3-abde-31e8-96cb-c81903ec0818.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     20940
IP address blocks:        184.25.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:9b:6e:78:dc:77:09:a1:da:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=81a30057-e1b8-44c7-9ed1-dca62c564287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f6:d1:db:76:88:e5:5a:73:9a:7f:9f:84:14:
                    fc:ce:a5:1c:1e:34:68:81:14:c0:5c:2a:da:96:80:
                    84:b6:ca:d6:f4:bd:59:36:62:a0:d2:1e:de:01:05:
                    0d:97:41:21:00:6a:61:82:21:ae:5d:eb:b4:23:ec:
                    e6:2c:9b:ef:a0:9e:3c:11:90:a1:66:35:9f:6e:e4:
                    a3:fc:82:b6:64:e2:2d:a0:96:44:a1:b3:17:87:02:
                    7a:6b:73:f4:9d:ca:f4:4f:e2:55:84:bb:a2:ca:0a:
                    a7:0b:2e:86:cf:43:1c:a6:ab:40:9c:eb:27:5f:3a:
                    a2:c2:32:7a:09:19:3f:59:f7:5e:03:ad:48:9c:38:
                    d3:bd:fd:b6:56:88:44:56:ce:c4:ad:08:d9:eb:4d:
                    99:6c:39:4a:cb:a8:a7:79:b4:27:af:2f:4d:aa:5a:
                    de:ed:16:0d:8a:f6:fc:8c:2a:f9:b8:a7:1c:a7:bf:
                    7b:dc:82:a4:b4:92:ef:99:46:d2:f7:3f:fb:13:de:
                    c6:72:f7:81:ac:06:1f:49:68:7e:c7:08:5b:4d:12:
                    af:df:54:2f:06:08:39:65:cd:99:71:23:08:8d:cb:
                    a9:99:1a:78:4e:a8:c6:6d:48:b8:b7:ab:f9:3d:a1:
                    e9:47:94:fc:b1:3d:eb:ea:c3:c2:70:81:a1:b3:59:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:46:B6:09:50:09:08:47:AA:98:A6:E0:8E:44:F9:99:D3:51:84:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72f56fc3-abde-31e8-96cb-c81903ec0818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:2c:08:9b:ab:e0:ca:70:5b:4c:e9:41:f3:cc:7e:61:d1:59:
         64:01:76:c4:e9:fd:36:f9:7c:2c:57:a1:e4:1d:3f:54:e2:3c:
         ab:76:2e:c9:9c:dc:4d:11:b3:e8:12:49:6e:91:c6:94:d1:83:
         be:a8:13:e7:ef:c3:ca:94:7b:12:bf:fd:a0:f2:ec:53:ac:49:
         d3:60:17:76:4f:ef:f7:cd:1f:90:d2:53:30:0d:d5:3b:f5:ca:
         3f:c3:c1:28:10:f0:3a:df:24:c5:cb:15:47:fe:cf:cc:cc:a6:
         c0:a6:97:b2:37:bc:6e:ee:77:5b:0d:1b:77:30:09:21:86:a3:
         49:86:d2:1c:49:1e:cb:80:e4:d0:e2:ea:ac:97:8c:00:4a:45:
         7e:81:62:32:b7:b1:7a:33:b2:71:7f:90:59:01:97:cc:1a:a1:
         7a:05:f3:c2:74:f0:81:73:20:d7:b2:d8:aa:f2:59:43:15:12:
         c3:d3:46:e7:f9:b1:5d:4c:46:2c:6c:24:71:82:8e:72:19:fa:
         34:1b:ea:e0:c4:44:46:5c:a3:08:72:48:87:2f:2d:2c:a4:11:
         60:0d:47:47:63:f0:2a:e0:3b:d5:a8:2d:98:b8:22:10:79:84:
         72:48:09:ab:51:11:08:03:80:05:56:4e:cb:6f:3d:6d:6c:72:
         a5:aa:96:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:10:23 2025 by rpki-client