Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/dd7860a5-c349-33bd-9ee2-4a269bcc3599.roa
File:                     dd7860a5-c349-33bd-9ee2-4a269bcc3599.roa (raw, json)
Hash identifier:          9zofJxSSrH4mQlpNTRzQq/0LrrnhBy9eHH4NoqoK9bw=
Subject key identifier:   FE:1B:7F:8C:B8:81:AA:2C:C6:B5:BD:FD:01:BB:7A:65:86:F1:E9:1E
Certificate issuer:       /CN=b18324da-6458-413f-b067-6f50e625e3dd
Certificate serial:       010D0C9F4328584A225AC9A7D5C957B31CC68EC0
Authority key identifier: 1A:D5:92:D7:6C:36:43:33:6A:21:77:20:51:87:03:06:4F:C1:E4:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/dd7860a5-c349-33bd-9ee2-4a269bcc3599.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     25715
IP address blocks:        184.94.224.0/20 maxlen: 24
                          192.40.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:c9:a7:d5:c9:57:b3:1c:c6:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b18324da-6458-413f-b067-6f50e625e3dd
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=ddbcb666-bebc-4fc6-bd92-e46db4113750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:97:a7:26:ec:81:87:3c:4d:be:19:2f:d0:11:
                    18:b4:38:df:1e:91:a0:47:61:db:3e:66:72:48:ac:
                    a1:36:76:7f:6c:78:c7:7d:51:67:d8:b8:13:3e:af:
                    e8:ed:4c:62:07:2c:8e:64:02:5a:81:f3:60:a8:f0:
                    dc:26:fe:64:b7:71:25:d6:6d:db:13:8c:bc:8d:f0:
                    8e:9c:3c:71:9d:ab:e7:13:42:08:7e:ed:54:fb:e7:
                    a8:fd:b9:82:06:1b:19:1d:25:92:b4:ca:19:86:89:
                    87:58:8e:e1:67:5d:c3:e0:c8:fe:08:3a:af:f3:86:
                    a4:2c:47:47:b0:58:32:8e:42:e2:42:ad:e9:d1:08:
                    a9:a5:28:37:91:9a:a9:7a:dd:77:ce:8b:06:96:86:
                    9c:a0:ea:22:e8:0e:cc:3a:79:71:c8:99:d1:62:f0:
                    90:2b:9f:a3:72:72:e0:86:72:c8:2b:57:5c:d1:94:
                    bf:c7:8b:34:1b:7b:9c:48:5c:84:37:df:7d:4c:d1:
                    a3:c8:8f:40:8c:4b:e4:99:b7:60:ca:78:d6:37:f5:
                    dd:d5:fd:a0:f5:bb:d9:3c:fe:39:09:ac:2f:d9:c1:
                    1c:10:d3:e7:b4:40:84:f0:39:ac:4b:31:ea:92:30:
                    d6:2d:bd:f2:bb:6c:ac:bf:05:cf:6b:ab:4b:85:3c:
                    0c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1B:7F:8C:B8:81:AA:2C:C6:B5:BD:FD:01:BB:7A:65:86:F1:E9:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/dd7860a5-c349-33bd-9ee2-4a269bcc3599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd/b18324da-6458-413f-b067-6f50e625e3dd.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D5:92:D7:6C:36:43:33:6A:21:77:20:51:87:03:06:4F:C1:E4:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b18324da-6458-413f-b067-6f50e625e3dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.224.0/20
                  192.40.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:86:1b:7c:fb:93:77:dd:41:e8:76:9b:08:96:49:bc:67:ff:
         11:98:52:ca:39:aa:c2:0d:90:20:4b:a4:57:a5:13:90:2e:82:
         18:6b:34:bd:a0:ed:e0:e9:db:50:12:2a:75:be:32:8f:6c:fc:
         d1:39:2f:8d:61:9c:ae:48:6c:23:fb:69:70:24:40:ea:f4:35:
         77:9f:f0:3f:a4:0c:aa:99:da:d1:cf:c0:0c:83:c6:80:53:e7:
         53:9d:3f:5d:c2:b2:3a:6d:3b:ee:2e:8a:15:cc:68:a3:d6:d3:
         64:01:64:1d:3b:b1:a3:6f:a8:42:5f:16:29:de:27:66:dd:a5:
         1a:47:b4:5e:c2:ad:7a:4a:a7:82:2f:c4:0d:40:5c:a8:f1:ac:
         78:7b:09:e7:d8:ca:17:69:83:97:98:e4:7b:0d:f6:1a:e8:cf:
         3f:3d:65:15:15:18:cd:94:5a:c5:9b:8d:48:da:76:a5:d5:96:
         0b:ce:6d:ea:bf:5c:9d:2f:12:84:55:8b:9e:57:ef:d1:f0:e8:
         e8:79:b4:73:b2:a0:ae:18:33:56:c0:fe:c3:bb:de:33:4b:e7:
         b6:c2:50:75:8f:15:39:37:a6:b0:8f:57:c1:fb:a2:23:37:f8:
         47:d8:6e:f5:a3:5f:0e:04:1e:69:fc:50:a3:02:05:07:ff:1e:
         8f:16:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:22:55 2025 by rpki-client