Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1e30ccc-47fb-338f-bc50-cb860698ae87.roa
File:                     b1e30ccc-47fb-338f-bc50-cb860698ae87.roa (raw, json)
Hash identifier:          XcQ2cqApBUnmYhy4guGTsPVqI18fNpcUHdrm7d/XIAM=
Subject key identifier:   21:0B:74:33:D2:91:27:1B:62:DD:BF:17:14:19:69:6D:AA:03:FB:1E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC8767A140867EFF8A5F77A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1e30ccc-47fb-338f-bc50-cb860698ae87.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     16625
IP address blocks:        184.28.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:7a:14:08:67:ef:f8:a5:f7:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=b0368bae-5a4d-4425-ad6e-0a6efa3a43d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:f2:16:ea:ac:32:5e:07:aa:d0:d3:5f:3d:
                    8b:5f:40:0b:f3:ff:30:b6:fe:61:5e:79:ab:c3:20:
                    3d:d9:c9:0a:3f:ee:3d:db:11:c1:32:f9:68:93:c5:
                    32:8b:17:0f:8f:dc:6e:ca:98:5f:a9:0d:c7:ca:21:
                    ed:38:2c:f7:74:d7:6e:e9:a5:f7:a1:58:9e:fa:69:
                    9f:72:ed:d3:97:d4:f9:35:2f:fb:cd:39:d6:f6:56:
                    6d:58:04:c4:71:cd:40:83:be:7b:9f:a7:19:42:85:
                    f3:d8:7f:45:1c:ad:62:43:60:94:5b:e8:e4:ad:fc:
                    0a:b7:0e:52:6b:6f:57:b0:3e:7f:7f:f5:f6:30:e9:
                    01:16:38:a5:67:33:9b:13:01:38:64:cb:84:d9:d7:
                    1e:f9:87:02:85:30:d3:85:f1:4e:68:91:6e:cd:b1:
                    73:2f:9b:ae:05:e1:db:e5:9f:c6:8a:f6:6e:08:fd:
                    dc:8d:f8:a7:c6:09:a8:80:b1:df:52:48:bf:50:31:
                    82:4f:23:77:79:0c:d7:8c:3b:4e:c3:e1:1b:15:cc:
                    db:47:7b:06:7a:86:96:0c:cd:e8:0a:04:fe:b3:46:
                    8c:c0:d1:34:8f:40:0b:3e:fd:73:13:81:e2:25:e1:
                    c8:b1:52:52:3b:71:1b:49:27:7b:7d:6a:4c:13:ec:
                    6a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0B:74:33:D2:91:27:1B:62:DD:BF:17:14:19:69:6D:AA:03:FB:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1e30ccc-47fb-338f-bc50-cb860698ae87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e7:0f:48:a5:5a:90:e4:e0:bd:5a:4f:fc:f3:c6:e1:58:02:
         8c:38:39:20:dd:aa:71:87:2e:be:49:d1:33:52:41:e8:fe:72:
         5e:09:8e:f5:6d:b2:e8:d2:b8:84:98:24:36:46:6f:c3:fa:2c:
         dd:21:48:87:cf:cf:5e:e0:8b:6f:45:6a:91:31:13:2f:cc:87:
         bd:2d:81:f5:be:32:68:db:9a:8a:d2:03:bd:30:02:12:db:48:
         3e:91:0e:3f:b1:a5:bc:6e:d2:3e:16:02:81:52:23:8b:1b:01:
         cd:60:f0:4f:a5:1f:4c:2e:b4:5c:8a:ff:ba:f5:bd:09:7a:6f:
         d5:a6:a7:53:4f:c1:9f:3f:ab:92:fa:4a:e1:2d:bf:19:14:ff:
         24:f1:c2:d5:86:b9:97:31:a8:86:81:d6:33:8b:78:28:da:94:
         31:09:67:38:2e:58:8f:fa:1a:3e:fd:58:29:15:6a:e1:72:77:
         b7:2d:40:47:75:d7:d3:5a:fd:e2:ef:6f:cd:da:79:4b:47:0e:
         78:37:a0:f5:29:45:ab:fb:3f:ca:1d:69:e2:f5:df:eb:30:86:
         03:a2:5a:e1:45:19:46:f5:0f:35:f1:fe:37:11:fd:bd:1c:22:
         50:0a:e4:9b:8c:6f:bf:b6:65:f5:3c:f8:1f:8a:76:07:d5:84:
         de:aa:00:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:50:09 2025 by rpki-client