Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c536b4bb-30d0-3e44-b689-d51fa917309b.roa
File:                     c536b4bb-30d0-3e44-b689-d51fa917309b.roa (raw, json)
Hash identifier:          OK9rmeUrCMJT6r+bBde1wB6IFn5sevIYua0Qa/IlXnY=
Subject key identifier:   AF:30:D1:AB:B8:3C:AB:D1:32:BC:7E:02:19:40:CD:1B:DA:11:82:13
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AD50665DB2FEBBC913EA7E490
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c536b4bb-30d0-3e44-b689-d51fa917309b.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     16625
IP address blocks:        184.84.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:65:db:2f:eb:bc:91:3e:a7:e4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=69f8ca0c-d842-4bf9-942e-4a4b66ae779f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0c:a3:d5:f5:d6:f8:16:f4:5e:21:91:5c:4b:
                    09:b7:50:42:b0:c7:bb:9a:0b:18:b0:31:26:87:24:
                    17:01:4f:c3:38:01:11:8c:08:b4:db:c1:1a:7b:c5:
                    6e:f0:d9:e7:9c:73:7c:fc:dc:87:70:d6:d3:75:90:
                    05:93:d2:50:b9:1a:0d:92:32:ea:d1:af:fd:0f:cd:
                    8f:92:97:68:9b:7e:d1:7a:8e:49:72:0a:bc:8f:83:
                    1c:d8:8f:f0:60:e2:5d:64:57:d3:25:2b:b6:9e:ea:
                    ed:7c:1c:58:95:ac:6d:a9:5a:d7:ba:23:e5:6f:5a:
                    d1:84:a3:dd:e6:c6:2f:54:0b:d3:e1:b1:26:2d:4d:
                    92:7b:99:96:69:7a:3e:f8:44:db:72:16:0e:08:fe:
                    b6:d4:36:6f:76:11:b0:d4:4e:02:a6:38:a3:62:dc:
                    3b:75:99:5c:cc:de:10:71:71:fd:1c:e1:3a:46:1b:
                    c9:36:c2:aa:5d:2a:73:fe:76:4e:7f:0f:29:0c:64:
                    20:76:8b:13:aa:3b:d6:d3:a0:f8:d4:0a:f1:24:45:
                    be:7c:36:f1:52:81:a0:87:25:0a:5f:7d:a7:50:6f:
                    2b:23:a3:02:0f:91:81:3e:b3:a2:25:65:3a:12:16:
                    1b:50:4c:d0:ca:4d:32:27:53:63:12:a8:a2:be:0d:
                    0a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:30:D1:AB:B8:3C:AB:D1:32:BC:7E:02:19:40:CD:1B:DA:11:82:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c536b4bb-30d0-3e44-b689-d51fa917309b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.84.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:18:29:6a:f4:96:78:3c:7f:7f:10:bf:2f:31:1c:4d:42:d1:
         20:50:17:e6:9b:a8:54:05:6f:83:9e:6a:95:45:c4:81:0d:56:
         a4:5d:3e:de:27:33:3f:9a:67:ac:e4:28:7a:3b:e6:02:65:3b:
         d9:65:72:9b:c2:52:61:28:4c:c3:32:04:44:c0:68:64:a4:e9:
         27:73:c8:9e:c1:56:ca:75:ee:50:ed:47:0f:3f:76:e3:4a:b9:
         d4:31:80:b7:19:a6:c9:cd:52:ea:be:9b:da:e0:eb:23:e6:31:
         e7:53:d1:b0:ab:1e:b2:40:2c:b1:ed:23:ca:be:4d:e7:63:31:
         69:b5:d0:e9:ca:05:e3:ea:5d:e5:8d:c1:36:83:aa:2a:da:bd:
         07:a6:aa:94:39:52:de:1b:2a:4f:3e:e6:e7:fe:ce:6e:c3:fd:
         35:9a:e4:24:de:86:62:39:dd:4a:28:4d:12:16:47:7c:9b:15:
         77:da:31:da:5e:8a:db:89:ae:75:15:32:f1:a7:50:96:8c:10:
         53:40:ee:a9:9f:06:a1:4f:06:75:81:fc:70:d5:0c:10:25:61:
         25:62:8e:8d:02:cb:f7:1d:89:2d:7f:c5:9b:6c:c5:e2:6f:dc:
         d1:36:42:e5:d5:ee:1b:c7:45:4f:be:0f:e0:cb:5e:eb:e2:b0:
         db:cf:58:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:58:53 2025 by rpki-client