Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/eb45dc83-d338-3cf2-ad31-602fdd36b7fd.roa
File:                     eb45dc83-d338-3cf2-ad31-602fdd36b7fd.roa (raw, json)
Hash identifier:          hji+xCLarHzxDB9zeRCqya0QeQZ00zlzgFpiZavtYKA=
Subject key identifier:   A2:94:D8:D4:E1:1D:D4:8D:C5:47:07:D4:E2:1F:B0:C6:CE:77:32:44
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F4328584A8575F90C1B52253659F43E00
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/eb45dc83-d338-3cf2-ad31-602fdd36b7fd.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     3356
IP address blocks:        199.0.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f9:0c:1b:52:25:36:59:f4:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=d96d1894-4751-49c0-9c47-1b81fedc00ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:03:e5:1b:01:e3:2f:7b:88:8b:32:8e:3f:33:
                    3a:6f:fa:08:b5:60:e4:fc:45:ff:59:3f:79:5b:11:
                    b8:e7:37:b5:21:8a:f2:c8:9e:cc:be:dc:d4:54:0d:
                    59:14:d4:1d:1d:06:56:01:31:ee:3f:da:e0:cf:e0:
                    59:b4:57:cd:ff:de:fe:2b:4a:39:03:3a:73:c7:a0:
                    5a:b5:46:ce:c5:2f:f9:04:49:64:c3:38:87:33:37:
                    c4:9c:de:a1:fd:16:a6:99:c4:d1:56:a0:88:2a:4e:
                    78:34:1f:e4:15:8c:cc:a2:c3:e8:d1:bf:4b:2b:32:
                    c8:ca:9b:a7:20:fd:dc:f2:ea:55:e0:c7:83:6a:3b:
                    8c:a3:1e:83:f8:26:90:cd:5e:a5:77:a3:6f:cf:fe:
                    ff:76:03:20:8e:26:b5:b4:83:31:3a:97:5a:fc:3e:
                    b5:f6:f7:c6:e8:65:79:32:a8:fe:00:7a:df:fe:5c:
                    6d:30:5e:ea:1a:b6:ab:a1:17:33:f3:a9:fc:4a:d6:
                    4f:f8:07:fb:42:08:82:22:2e:eb:10:b0:e8:70:aa:
                    18:c0:d2:44:ec:f7:e3:e3:95:4b:8a:0e:81:a7:ff:
                    a7:2d:60:59:9b:d7:60:36:fc:3c:36:dc:45:25:e1:
                    58:e5:87:25:3b:af:9b:30:84:89:2d:2b:ef:08:70:
                    ba:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:94:D8:D4:E1:1D:D4:8D:C5:47:07:D4:E2:1F:B0:C6:CE:77:32:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/eb45dc83-d338-3cf2-ad31-602fdd36b7fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.0.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:61:49:42:e5:92:cb:46:5b:9d:f3:7b:c7:69:66:c8:5c:97:
         44:93:a1:46:7f:76:c6:70:68:fb:c8:9a:f2:70:9f:38:e9:83:
         b6:ef:68:dc:90:32:12:aa:c8:30:41:e8:c7:48:56:ea:4b:2c:
         8c:cf:51:a8:5a:fc:3c:a6:43:85:ac:12:77:a6:28:74:6a:33:
         bd:a5:8f:ce:d8:34:16:57:c2:06:d5:75:b6:c2:c7:90:c1:4e:
         dc:44:3f:1c:c7:07:53:b9:97:fc:ba:3f:56:fb:ff:da:32:67:
         b7:60:4d:9e:fa:1a:98:d6:aa:e7:a3:cd:14:9d:16:63:b4:c4:
         10:18:23:56:46:c9:32:b3:e6:b1:06:92:6e:75:bd:05:a4:90:
         29:8f:b9:bd:30:a4:cf:91:57:45:11:62:cb:75:a6:4b:7f:d9:
         b7:be:14:5f:3f:cb:b6:d3:50:37:35:28:b5:76:d4:f7:f9:92:
         56:4d:ac:6d:bf:67:fd:81:41:21:d1:bb:17:5f:e6:45:bc:5f:
         dc:ad:1c:21:75:06:74:c3:cc:64:90:8b:f5:5a:e6:b8:dc:9c:
         7a:b9:90:4e:b5:d2:5b:f7:71:8a:b1:55:5f:94:15:77:26:32:
         32:08:fe:0c:f3:8d:61:ba:80:aa:4b:e4:f5:6e:a4:39:c6:b3:
         fe:fb:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:51:25 2025 by rpki-client