Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8df1f28d-4bb6-3fab-864c-c3570c114166.roa
File:                     8df1f28d-4bb6-3fab-864c-c3570c114166.roa (raw, json)
Hash identifier:          7wxlWMU9aPjILIFaI53upV/YfGuLlhlQ50eT3E7h7xU=
Subject key identifier:   57:33:2E:6D:24:CE:DD:5E:27:D5:7D:48:BF:F0:E0:DA:8C:1B:8A:6A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AD50667DDAD03115F66679E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8df1f28d-4bb6-3fab-864c-c3570c114166.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     20940
IP address blocks:        184.85.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:67:dd:ad:03:11:5f:66:67:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=4e4042ee-2a8b-46d0-a504-7b6c1848231a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:df:50:d2:fd:f0:da:54:a4:b6:ca:0f:dc:20:
                    e0:07:f0:f4:ad:da:c6:82:54:3d:49:38:eb:58:e4:
                    90:46:86:9d:7d:40:12:51:4b:c1:d0:30:3c:a4:ed:
                    a0:41:91:13:1a:e6:fd:ed:bc:c9:63:40:68:25:b8:
                    e3:91:93:aa:cc:2f:69:bb:23:67:a7:47:b9:77:9e:
                    93:94:67:8c:2d:f0:eb:15:ca:7b:23:0f:64:55:3a:
                    6c:7a:81:7d:09:da:2f:0e:0e:53:5a:c2:62:c5:bd:
                    d6:e4:d9:ad:49:6f:80:59:2d:38:2c:bd:67:36:96:
                    b7:33:2d:9d:b9:cf:0c:72:db:ee:cc:75:b6:2c:bd:
                    f7:44:b4:db:8c:70:e5:a9:86:f3:5a:86:01:83:5e:
                    7f:97:c9:ea:a9:45:4e:b5:39:06:82:a2:d1:cf:d1:
                    0c:e2:16:0b:47:58:61:32:79:70:99:14:e2:00:11:
                    c7:39:87:fa:9b:94:82:b6:43:f0:43:63:33:59:f4:
                    43:1b:dd:53:25:d2:fe:31:95:60:a4:83:74:74:d2:
                    c2:b8:36:44:b9:5f:1e:37:a7:d4:98:a4:f0:38:18:
                    d3:65:17:2a:40:71:1d:13:a7:92:de:01:7b:65:3e:
                    ec:06:11:65:eb:bc:5c:55:6d:89:ee:21:d7:87:ce:
                    76:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:33:2E:6D:24:CE:DD:5E:27:D5:7D:48:BF:F0:E0:DA:8C:1B:8A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8df1f28d-4bb6-3fab-864c-c3570c114166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.85.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:9d:80:76:a3:48:90:30:c0:f5:9e:d4:63:0b:07:5f:b6:ab:
         c3:1a:79:bf:75:cf:bd:7d:a4:c0:f7:cd:be:4f:4d:de:1b:38:
         59:3e:89:05:0f:5d:71:ea:0d:6c:9f:1c:c0:de:1c:1b:dc:3b:
         82:2d:af:97:5b:fb:f8:26:a2:32:c0:ec:b6:11:2a:27:7b:c6:
         fc:ce:94:f8:31:c9:c4:47:dd:0e:3e:64:69:b1:28:2d:e5:ef:
         4b:82:9a:a5:ef:5c:b1:34:a8:46:81:b7:ba:f0:6e:36:71:b9:
         9d:0d:dc:df:12:a4:43:6e:67:4d:c1:32:23:4c:07:55:e9:b7:
         67:a7:1f:85:24:45:c3:ff:c4:b3:03:88:0a:e7:b4:f7:e3:07:
         b1:53:ac:c7:47:49:79:98:3e:be:4e:1d:41:e8:2f:2e:4c:3e:
         d4:f5:c7:08:6e:b6:94:7f:ac:18:21:92:0a:bd:07:38:5f:5d:
         a9:3d:80:fd:aa:d1:71:23:38:37:19:83:36:5b:86:8e:3d:34:
         20:11:fd:95:70:db:bc:69:48:7a:3a:b0:88:6e:af:8c:82:26:
         b3:81:d4:89:ff:6d:f9:50:c6:a7:24:6a:7f:4c:cd:bf:74:49:
         f7:c8:e0:f5:84:28:db:9f:2c:de:97:33:81:07:f1:2f:fc:1b:
         15:9f:94:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:47:04 2025 by rpki-client