Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d2815551-00f7-37da-9df8-7aa74dcacbe9.roa
File:                     d2815551-00f7-37da-9df8-7aa74dcacbe9.roa (raw, json)
Hash identifier:          tjuNf/Y4n4Rl9Dq8m9sK/4Ykkkg2zmet0Ls6r6Ju7eo=
Subject key identifier:   6D:33:25:B8:CF:E1:A0:FB:0C:E4:86:BA:74:C3:12:BA:76:C7:FF:3F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B89175DA7CDBC9011996A21C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d2815551-00f7-37da-9df8-7aa74dcacbe9.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     46872
IP address blocks:        184.104.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:5d:a7:cd:bc:90:11:99:6a:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=2701d921-83cb-414e-b931-916be4af3c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:07:a6:ed:1e:81:c7:b9:86:92:87:bb:54:7f:
                    1b:db:15:11:04:df:2a:d9:e1:52:65:d3:58:12:59:
                    b0:af:6d:20:8a:4e:77:f1:23:8f:c5:9a:7b:1a:32:
                    cf:67:eb:3e:e6:81:bf:21:23:28:e3:34:d9:15:8a:
                    6d:97:52:8d:27:c4:12:99:5c:2f:cf:bf:b4:b0:e2:
                    4b:62:18:c7:e1:4a:52:ee:a0:78:30:b3:3c:79:0d:
                    80:56:c7:b1:16:2c:fe:c2:6d:26:bc:65:cc:f5:d4:
                    fd:93:dc:16:b0:5a:cf:37:7a:b8:66:3d:7f:db:65:
                    24:58:16:ee:c8:16:3d:15:3b:4c:41:59:ea:7a:63:
                    96:67:f9:48:2f:10:89:4a:0e:88:1d:17:76:a7:5c:
                    a2:0a:e3:04:0c:a5:85:04:0b:4d:2e:a9:86:52:b3:
                    95:2f:b5:65:94:4d:5d:8a:e3:75:f1:38:9c:03:9d:
                    4b:94:f8:b4:81:15:2d:af:98:01:f5:b6:9f:d1:1f:
                    98:40:f0:ed:21:8f:e7:df:cd:d3:a7:2a:ed:5d:ab:
                    dc:78:61:25:5b:89:ff:ad:78:ab:be:3c:32:f1:5c:
                    9f:f7:01:74:78:a1:d3:df:76:0f:08:c8:08:2f:c5:
                    2b:2b:c9:96:73:77:44:b5:98:b9:1e:03:7b:3d:89:
                    61:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:33:25:B8:CF:E1:A0:FB:0C:E4:86:BA:74:C3:12:BA:76:C7:FF:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d2815551-00f7-37da-9df8-7aa74dcacbe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.104.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:1e:ab:04:1f:a1:99:71:a7:5a:bd:0e:7e:e9:ad:f1:15:aa:
         31:b3:c6:0e:ba:9b:ca:53:61:3c:a7:b5:8c:f0:24:fd:3e:7f:
         d4:e3:05:f8:cb:7e:53:5a:ab:cf:2b:1f:ee:d9:c6:9f:4b:66:
         2b:83:62:eb:5b:f8:d2:d0:53:72:25:b7:42:99:e5:46:9a:ab:
         00:5d:03:d8:b6:11:8b:b2:72:8a:c0:8d:9f:e4:20:9a:de:fb:
         5b:f8:44:21:46:2e:3b:54:50:91:60:fe:3e:aa:c6:4a:2c:24:
         19:06:da:34:b9:14:67:17:ad:ec:3b:fb:42:8b:c5:8a:f6:33:
         d0:08:80:04:f1:d8:c3:a7:9f:2f:ea:7a:71:86:a5:f9:ff:0b:
         94:5a:c9:84:99:22:9a:44:9d:d6:10:3c:ce:92:b1:77:09:83:
         31:62:45:51:5f:64:35:c8:bb:d4:eb:ad:23:b2:ea:67:91:0c:
         15:fd:69:dc:e5:f8:a4:e2:dc:2f:87:38:81:78:d9:1b:00:66:
         66:3b:3d:a2:ee:be:6f:84:79:dc:12:f7:d9:1b:9d:b6:bc:0d:
         c7:d9:e1:4a:48:86:c6:21:5a:2e:0d:0a:93:21:1e:61:cf:6f:
         88:95:6d:81:3e:de:3f:eb:66:4e:9a:6d:ec:74:02:8f:27:cd:
         49:85:16:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:05:46 2025 by rpki-client