Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5d657dea-294c-3c37-aa26-b1da992a1345.roa
File:                     5d657dea-294c-3c37-aa26-b1da992a1345.roa (raw, json)
Hash identifier:          y8R3KnAD4ZRjf8GX3c8NEars85RZrmlXvuTCw01Z3go=
Subject key identifier:   5D:7E:2E:BA:D8:7F:4A:DB:3B:96:C2:FB:DF:8B:1B:C0:16:56:1D:21
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA99032DD7461F297572C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5d657dea-294c-3c37-aa26-b1da992a1345.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        184.151.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:99:03:2d:d7:46:1f:29:75:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=3634fcc7-9e30-42d3-b6ee-1798c8fce373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:86:1e:ae:23:e0:8c:b2:88:e0:5a:38:98:90:
                    9c:b8:55:49:9b:cb:0a:95:2e:2c:bf:31:1e:cc:24:
                    41:c7:ee:d5:f7:e6:95:6d:87:45:0e:80:16:1a:4d:
                    94:b4:98:84:43:3d:76:3a:94:6f:2b:c0:7b:99:c1:
                    cd:20:23:4a:ee:52:53:ca:8f:58:63:d9:52:eb:92:
                    34:16:75:bc:5f:ad:43:f3:0b:5c:f3:86:e3:8e:77:
                    28:77:75:e7:bd:3d:e4:42:0a:46:71:4b:e0:69:72:
                    75:fb:72:a8:24:41:16:21:3f:51:83:b8:ea:a8:b8:
                    70:de:6b:ce:9e:2e:3d:f5:30:26:14:a6:f5:05:dc:
                    78:bf:13:5e:fd:da:0c:ec:85:ce:fb:0e:19:12:b8:
                    40:33:01:be:1e:b3:97:cc:b4:63:31:b8:2f:ae:a3:
                    33:2d:24:62:ea:83:b3:87:51:26:b5:9e:8e:e2:7b:
                    35:3e:ab:d1:57:5e:1a:8b:ea:61:d4:a4:fa:3e:7c:
                    2b:42:43:f8:35:8c:2e:63:91:fa:bb:12:f9:a1:6b:
                    26:13:ba:aa:02:56:9e:ed:aa:d3:48:0f:c6:02:32:
                    32:c3:d0:01:ad:02:02:78:e5:51:26:ef:fe:2f:e9:
                    70:17:05:d0:56:a0:5b:6e:1f:82:71:ea:13:ab:f1:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7E:2E:BA:D8:7F:4A:DB:3B:96:C2:FB:DF:8B:1B:C0:16:56:1D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5d657dea-294c-3c37-aa26-b1da992a1345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ea:eb:7f:63:64:03:41:76:cc:eb:d7:f6:ce:4a:80:b0:fc:
         09:df:8c:73:34:6c:22:dd:0c:9a:14:7b:63:df:b9:48:9d:4c:
         7b:d1:b5:76:35:e8:23:ed:1c:7a:6a:d6:43:0a:c3:14:c0:e1:
         11:84:22:da:d5:c7:6d:b2:64:b3:ed:20:7b:dd:b1:ac:55:47:
         e7:a1:f0:2b:70:86:78:ac:1f:cd:07:63:d3:af:19:90:4f:3f:
         8d:05:67:90:34:f8:65:ad:ec:3b:a7:2d:c6:db:19:60:ce:f9:
         86:6b:8b:53:5c:58:c2:ff:b0:d8:71:fb:30:02:c5:ec:5b:3e:
         d2:ae:d9:34:79:bd:4e:2d:a6:a3:54:9e:95:a9:62:e7:3e:ee:
         e5:d3:e2:91:2f:e1:d1:4b:d4:34:c5:4a:a7:6e:29:a2:1e:db:
         39:68:5d:ff:e4:9c:9f:ec:82:6c:c9:e0:0f:29:17:c5:69:4b:
         f9:6b:eb:bb:93:a4:fa:56:b2:4c:e0:e6:01:ec:b4:e8:8a:f1:
         33:02:3d:88:42:cd:7a:cd:50:16:05:23:0e:b5:3a:ca:7d:d9:
         74:06:56:85:f2:8f:d0:e7:d7:85:42:a3:31:07:f9:ad:30:67:
         77:af:a4:91:9f:e4:74:2f:6d:f4:87:d1:d2:b7:28:4e:d1:51:
         ff:dd:9d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:42:57 2025 by rpki-client