Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc257d91-9147-3158-a616-ad54fc86f62d.roa
File:                     fc257d91-9147-3158-a616-ad54fc86f62d.roa (raw, json)
Hash identifier:          nMQExm/l19zp2iFh2F8d/7Xix7A4uvgiYYIi9CoN2hs=
Subject key identifier:   AC:82:FE:F6:A6:FE:54:F3:53:6C:43:AE:EC:23:A2:A4:62:28:9D:BF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AE196A07C0B6DA5F58925D440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc257d91-9147-3158-a616-ad54fc86f62d.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     20940
IP address blocks:        184.31.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:a0:7c:0b:6d:a5:f5:89:25:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=14bf0c8d-25c4-474e-915c-af533c538def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:43:c8:55:9e:f5:5d:3c:a1:0b:38:2b:bc:d6:
                    b1:b0:c4:22:65:21:49:2b:73:3a:84:eb:da:80:e0:
                    e2:9b:24:3e:23:87:b2:81:48:3a:99:39:3b:5d:a5:
                    f4:8f:b7:2b:53:cf:38:f6:7e:88:ee:75:ce:e9:21:
                    eb:9e:11:2b:14:3f:1e:44:92:78:c9:01:f7:cc:d1:
                    eb:0b:85:05:ac:cf:9d:1d:ce:8a:f0:aa:f4:a7:6b:
                    27:d0:ec:ce:18:db:59:c3:e3:97:17:45:0c:15:38:
                    d9:91:5f:7c:13:41:cc:55:07:85:ef:9c:f4:f6:36:
                    94:f1:41:07:ee:dd:7f:21:90:75:61:4b:26:38:96:
                    bb:b7:3f:59:ac:d8:4b:79:e5:7d:b2:50:dc:71:33:
                    e0:a4:1a:95:69:c1:57:8a:0b:e5:64:30:7f:21:d4:
                    14:33:58:8a:98:71:d5:78:bd:78:10:66:19:fd:cc:
                    0d:67:be:b1:93:c8:e4:08:2d:e2:26:7b:96:81:5a:
                    8c:51:37:c3:05:b1:6b:b9:a2:3d:c0:81:d6:c1:e1:
                    19:92:79:00:93:b0:36:fe:0f:9d:a9:30:bd:bb:91:
                    ea:59:d7:c5:1c:29:e9:68:05:cf:79:09:7c:45:a1:
                    8c:ad:2e:54:3f:53:bb:65:bb:4f:2a:05:2d:f9:fb:
                    ca:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:82:FE:F6:A6:FE:54:F3:53:6C:43:AE:EC:23:A2:A4:62:28:9D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc257d91-9147-3158-a616-ad54fc86f62d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.31.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:92:2d:60:f4:b2:2e:eb:91:a7:7f:d8:ee:6d:76:28:08:52:
         71:05:b2:46:e3:75:9b:f6:22:99:69:05:4c:3f:a0:22:38:ed:
         09:c3:eb:e6:ee:31:1f:97:f1:b6:ad:0c:74:6a:0a:87:b4:b0:
         f0:72:cf:82:4d:05:48:47:ee:45:e7:f3:63:87:e2:4f:59:82:
         49:5d:db:52:3a:8e:fd:24:73:1d:66:27:32:57:39:5e:78:83:
         52:a8:f0:cf:73:3e:9e:3e:06:61:09:3d:cc:5b:e0:83:46:69:
         2f:c9:f3:9f:81:e3:f7:4b:c0:01:2d:cf:b5:34:21:bd:71:7c:
         10:e4:70:ab:25:62:d3:b4:02:dd:63:fe:cd:ac:54:d8:e1:4c:
         a1:d8:38:5b:01:d9:76:2f:d3:4c:29:37:3f:7a:db:fd:4b:3c:
         db:7b:f0:cb:a5:a4:27:ac:01:b7:c7:f1:8f:c6:ee:0e:a6:49:
         32:c8:16:6c:03:ba:e3:22:36:03:4a:72:9f:94:75:b0:2e:22:
         09:d1:f6:e9:45:c9:53:fc:eb:6d:d0:2d:8c:a2:a2:4e:75:21:
         21:3f:02:ac:04:61:67:80:be:c4:e7:43:f4:1f:a9:8b:6d:93:
         09:cd:c6:c6:9e:c5:aa:8e:dc:ea:1a:1e:50:88:77:68:c4:ec:
         9e:51:38:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:59:53 2025 by rpki-client