Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4750a3f-a69b-3117-892f-f095483ce2a3.roa
File:                     e4750a3f-a69b-3117-892f-f095483ce2a3.roa (raw, json)
Hash identifier:          Zda86h72CYtf7xJwtYYP1ZVi512zZpo1uh16IPoEFSo=
Subject key identifier:   41:4F:91:A7:46:A7:22:25:1A:26:C0:18:9E:F5:4F:16:73:05:06:21
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AE0319A24509EE9933E3637C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4750a3f-a69b-3117-892f-f095483ce2a3.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     20940
IP address blocks:        184.24.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:9a:24:50:9e:e9:93:3e:36:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=458b59ce-2a27-4378-a7a0-87a63a7c9122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:8e:05:f5:b3:9d:21:16:a1:0f:13:cb:93:
                    f8:5c:2e:f0:1b:ab:93:03:c3:72:bb:cf:30:6a:67:
                    8d:d9:6a:cc:fd:c2:0b:04:54:34:bd:8e:76:8b:e6:
                    92:b3:d5:c9:c2:15:9c:85:1e:f7:83:d2:62:e1:4e:
                    7f:88:f1:4f:31:e1:0f:c2:ae:b3:5d:be:33:df:bc:
                    ef:0f:9c:52:fa:3f:8d:d7:e3:f8:93:fc:a4:00:ac:
                    d7:ce:b4:38:04:dc:4a:d0:e3:f3:57:db:ae:a8:a8:
                    54:4f:d1:ea:9b:c5:bc:0e:4d:43:30:de:c4:7b:f6:
                    0e:0d:05:df:d4:63:34:86:45:4d:73:da:c6:f9:7a:
                    b1:57:69:c0:c2:ee:4b:98:1c:96:2e:fa:6a:11:2b:
                    95:cc:98:08:79:04:86:6b:ac:f9:a2:c9:7f:5a:58:
                    55:c9:5a:1d:2a:31:13:2b:bf:18:8f:d5:cd:28:64:
                    45:55:04:5a:27:fa:88:d8:97:c5:4e:7f:f1:1e:87:
                    f8:83:d0:b2:90:e9:1b:f2:5c:4f:ce:2b:e1:93:1c:
                    93:e9:c2:1c:72:42:8a:47:eb:4d:3b:04:1c:67:3d:
                    3c:92:5b:6b:21:35:b5:b6:36:c1:c5:66:73:47:10:
                    21:b7:77:fe:db:38:88:5a:d3:26:2d:45:01:d1:f6:
                    15:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4F:91:A7:46:A7:22:25:1A:26:C0:18:9E:F5:4F:16:73:05:06:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4750a3f-a69b-3117-892f-f095483ce2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.24.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:dd:ed:bd:5f:c5:64:27:13:31:78:45:9d:c6:40:e1:be:f0:
         32:6d:b9:d8:78:f9:5e:e8:49:10:e9:0d:4b:97:01:fc:71:4d:
         3f:12:11:05:01:4f:66:7a:ef:8c:d7:66:16:75:1f:c2:57:ea:
         d9:ad:9d:b2:cc:82:a0:9c:ec:87:fe:17:57:5c:33:1b:0d:bc:
         1d:af:61:64:3c:9c:0f:86:7e:72:fa:27:2a:28:5a:27:68:bf:
         f5:62:3a:80:37:f6:6f:90:b1:e6:a9:ba:42:bc:1a:a5:d1:3e:
         8d:43:3a:44:f2:b8:70:d4:63:6f:8f:bf:71:54:f0:19:cc:d4:
         00:0a:46:b4:9c:85:c4:91:3e:e5:6c:00:77:be:cc:75:72:fd:
         66:65:db:91:43:c1:92:c4:a5:55:21:9c:79:b7:a6:07:1f:13:
         f5:13:e0:de:f1:c0:5d:c8:39:d3:30:69:c3:c5:e8:2a:ec:c8:
         63:7c:7e:76:ef:b6:d5:db:fd:2a:1e:bb:71:fc:f9:0c:5e:33:
         db:3a:9b:dd:9b:8d:72:7f:ca:a6:01:fc:02:2b:6b:ae:eb:37:
         9f:00:8f:8e:15:de:a2:d7:f1:d7:10:cd:6a:ff:3b:0e:47:c3:
         20:e3:e9:e7:26:ad:dc:a3:17:e4:dc:14:bd:89:79:12:27:94:
         dc:4b:ac:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:55:26 2025 by rpki-client