Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b86a657-9bdf-3dc7-819f-f8fb4d178323.roa
File:                     2b86a657-9bdf-3dc7-819f-f8fb4d178323.roa (raw, json)
Hash identifier:          lUhzquNkH5YWNEe0wyeOU/asKa4CuRidWjlK+jh1P5c=
Subject key identifier:   9E:23:73:DD:B0:2A:72:21:E8:3E:EE:5A:96:4A:57:7E:B8:24:71:FB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A963631A632AA37D6A59874A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b86a657-9bdf-3dc7-819f-f8fb4d178323.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        184.183.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:31:a6:32:aa:37:d6:a5:98:74:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=4ede3976-8946-4ef1-b57e-5dc418461053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:2f:83:f5:99:51:2e:a7:d7:3b:21:4e:74:
                    3c:30:e1:7a:76:5c:10:4d:bd:39:50:c4:c6:2f:ec:
                    70:f1:0c:b1:ac:00:95:e3:ba:1c:22:f7:cf:e9:6f:
                    00:c3:cc:ef:33:2d:9b:47:e9:fd:01:de:14:47:f9:
                    f3:05:c2:76:1c:42:a5:07:9a:2b:08:b6:9c:35:4e:
                    85:40:8b:b6:6d:0d:32:c6:7d:7e:41:3f:03:ea:67:
                    31:b3:66:e1:04:f4:fe:8f:d0:a9:2c:b5:b1:58:c3:
                    45:f5:7e:99:19:64:7e:0f:22:80:b8:3f:26:c1:86:
                    4b:12:e3:a4:de:b1:8d:fa:84:7f:d3:70:80:3d:76:
                    67:94:bf:ca:e4:d0:81:ee:7b:10:2f:ab:b1:a3:f8:
                    f6:5b:72:07:d5:91:1f:4d:ad:90:7f:cd:72:f0:9e:
                    70:83:55:10:73:97:be:43:53:31:0f:ff:8d:ea:2b:
                    ce:26:12:47:2b:c5:97:f9:72:61:d1:7e:49:5d:d9:
                    c5:f4:f0:db:cc:f2:10:70:95:fd:c2:34:27:68:87:
                    1c:91:65:81:24:69:80:0b:6d:b5:85:3e:cd:ec:7f:
                    90:57:b0:18:f4:f8:4e:4e:9e:41:02:67:81:5b:d3:
                    51:39:a5:a3:cf:c2:4e:df:cd:db:b3:a2:1d:40:5a:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:23:73:DD:B0:2A:72:21:E8:3E:EE:5A:96:4A:57:7E:B8:24:71:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b86a657-9bdf-3dc7-819f-f8fb4d178323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.183.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:22:c4:72:05:5e:37:25:02:b9:d6:d7:13:b8:be:f6:ab:2a:
         b4:c3:b4:c4:8a:ce:73:64:09:79:35:e4:ff:28:0d:f0:87:eb:
         5f:21:71:4e:84:2c:b3:5a:45:2f:27:93:8e:46:ac:00:a5:99:
         ab:48:8a:ae:ea:e0:e8:3c:3f:3d:6b:f5:8b:57:57:d3:0c:b0:
         57:44:f6:7d:b5:7f:1b:a0:6c:ba:6f:ac:f4:ed:29:ed:67:68:
         e1:37:4b:e5:2e:d2:fa:f2:b2:42:29:7d:70:b4:40:73:e2:8f:
         34:f1:c0:74:d9:94:b8:0e:18:fd:e5:69:c1:9e:f8:4c:aa:fa:
         e6:c2:74:83:20:77:9f:66:cb:d9:09:b6:17:f6:e1:11:27:cd:
         14:c4:76:e1:c1:ac:3f:b8:ff:8e:a8:b2:77:d8:ed:16:e6:9d:
         c8:c4:49:0f:fb:92:09:e7:d4:e8:8e:55:5c:c8:e9:75:3b:eb:
         9f:1d:e3:ea:a2:2e:2c:6d:d0:59:53:6b:da:02:84:9c:b0:85:
         db:59:1b:7a:58:5f:26:1a:b0:11:dd:5c:1c:3b:a7:21:0f:15:
         d1:af:db:e8:bf:11:09:cf:e7:e3:03:e9:5d:42:4b:e3:41:e0:
         e0:43:e9:f7:b9:87:e9:f0:95:33:69:b5:c3:ae:7e:dd:d8:ba:
         21:0a:ce:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:58:11 2025 by rpki-client