Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4c7184b-92f1-3ce3-b38e-437aa4e47ef4.roa
File:                     a4c7184b-92f1-3ce3-b38e-437aa4e47ef4.roa (raw, json)
Hash identifier:          MR55HJA3Iasm6qdHpUV2gr92hRKb1waSsEwNOqwRY/s=
Subject key identifier:   57:C2:6E:56:D8:C6:83:C7:FF:F6:55:7E:3D:3D:6A:77:B1:CC:15:D7
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFC939B67B5985140E18C0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4c7184b-92f1-3ce3-b38e-437aa4e47ef4.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        184.94.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c9:39:b6:7b:59:85:14:0e:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=6d5959e6-bdea-4300-bedf-aea295e23ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:a7:c8:e7:62:14:0d:be:be:2c:24:b3:35:
                    07:6c:08:12:0e:5c:91:59:a2:b2:8f:96:45:1d:98:
                    64:9a:54:d9:ce:bf:92:eb:47:85:d7:84:40:90:0e:
                    af:a4:77:60:59:95:69:cf:2e:25:b0:a3:5d:f0:3b:
                    57:c8:e8:57:52:fd:43:6d:75:45:58:b0:d7:e4:28:
                    d6:77:cc:c1:df:c6:8e:23:5e:96:fd:af:09:ab:8b:
                    18:64:ca:e4:cc:1c:e6:d4:d4:d0:6b:d5:f4:09:99:
                    80:69:68:95:0c:22:ac:b7:74:dc:f3:9b:a2:e8:97:
                    56:3b:18:26:6b:e8:73:f0:ad:c9:f3:de:16:60:67:
                    68:d5:17:64:5d:0c:13:46:09:b5:fa:c8:47:f1:d7:
                    f6:cd:f9:e0:2f:39:26:a9:5a:c5:2d:8d:0b:ba:00:
                    94:f6:79:cd:ec:9c:9a:1b:82:c5:83:30:2d:f9:c2:
                    86:bc:42:fa:61:43:a6:a4:53:53:15:4a:71:8a:bc:
                    20:d3:96:26:6c:6f:3f:5f:55:ee:51:60:d8:70:80:
                    7f:26:fb:cb:7c:14:1c:12:55:da:2b:02:0d:ba:24:
                    01:ba:16:ea:02:f6:3e:98:b0:d3:6a:7c:87:4b:5f:
                    33:90:5d:0b:f7:26:c6:80:2c:ae:6c:72:e8:20:ff:
                    24:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C2:6E:56:D8:C6:83:C7:FF:F6:55:7E:3D:3D:6A:77:B1:CC:15:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a4c7184b-92f1-3ce3-b38e-437aa4e47ef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0d:e9:9f:c4:3b:e3:8e:1a:45:c0:9f:38:a0:8c:f8:41:06:
         4d:fa:e2:cf:e7:d4:6d:35:cc:c9:9a:7a:76:85:05:20:ef:d4:
         56:dd:bb:8d:28:e4:02:56:97:7d:83:9c:5a:d9:d0:0f:8e:22:
         b4:cd:62:d5:09:6e:5f:10:47:d2:48:0b:53:cb:42:ca:46:c8:
         33:66:e5:57:7d:e9:4e:f4:e1:bc:0c:ab:d2:2a:6e:97:4e:9f:
         29:3f:e8:ea:ed:45:d9:cb:ce:b8:e8:95:0d:76:a0:5b:ee:3c:
         c1:41:08:e1:39:27:a3:95:77:16:fc:9d:9f:0d:1a:ef:fd:f4:
         7b:43:3e:bd:53:a9:df:56:67:8c:f8:41:3d:b3:44:89:dd:9e:
         7b:cc:22:f7:ae:4d:b0:60:98:81:e0:5e:c6:90:cc:56:f9:64:
         26:17:15:0e:1f:a5:1a:9f:d4:01:5e:79:f8:4f:40:68:73:1e:
         6d:f3:79:87:43:bb:88:36:c1:a7:29:2b:8a:3a:a0:72:01:76:
         8d:f4:44:6c:16:6e:2b:4e:8a:a4:e8:c7:b8:f0:46:19:72:04:
         30:ae:4a:9e:19:a0:a1:4e:e4:6e:c5:17:30:8d:df:b4:7c:b7:
         43:f1:44:e6:5a:48:6b:9c:50:bc:9c:53:4e:82:0c:9d:95:3b:
         fa:58:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:07 2025 by rpki-client