Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/2ad2ae3c-6e1c-38fc-807e-5fe97f82a803.roa
File:                     2ad2ae3c-6e1c-38fc-807e-5fe97f82a803.roa (raw, json)
Hash identifier:          KiHrFTad3dGf14Zx6oTgBPHGIWGrvGewrOHwoXzu7+I=
Subject key identifier:   CA:DE:DC:D3:81:93:A0:49:C1:58:F1:0D:BF:07:2A:29:E2:4B:CC:B1
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F4328584A23BFFFCACD9CE3718EF6C580
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/2ad2ae3c-6e1c-38fc-807e-5fe97f82a803.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     36321
IP address blocks:        199.184.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:bf:ff:ca:cd:9c:e3:71:8e:f6:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=ed904e5f-46c7-4a69-83f8-7cef96a0a750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:41:7e:a6:50:03:bc:d5:d3:c2:d9:84:ab:ec:
                    de:52:47:70:58:c5:dc:2b:14:2c:5d:39:af:37:1f:
                    d6:6e:13:6f:e9:2e:18:18:58:6a:85:8a:54:e9:54:
                    2c:34:c9:a3:d3:49:2c:85:66:76:25:e5:ec:92:57:
                    4a:37:43:ce:c9:a7:25:8d:97:c0:6d:17:50:82:12:
                    6d:8e:b5:3c:6a:73:1c:23:a6:c6:59:e1:2a:d9:85:
                    5a:f2:d3:25:e6:76:e7:d4:40:8d:e2:97:0c:96:e5:
                    c5:a3:af:9f:67:f6:48:03:4a:6d:b9:40:79:bc:27:
                    2b:b5:67:53:ac:bd:ed:42:68:95:25:55:88:b8:4b:
                    ec:23:d3:35:f9:ad:00:28:84:74:19:d9:cb:f0:28:
                    cf:ea:1f:7e:28:cc:da:e3:35:1f:b3:d5:1b:23:7b:
                    e2:42:c9:1c:b6:8a:aa:c5:72:b8:84:8f:24:7c:fc:
                    34:72:5b:9b:34:f0:10:02:57:b4:4a:25:eb:73:21:
                    44:cf:58:25:cb:04:f6:7d:e0:2c:36:94:08:30:49:
                    c4:5b:b7:bd:0b:8d:0f:a2:5d:ed:b7:e1:c8:5b:cd:
                    7b:db:d1:27:cb:3e:43:cf:2d:84:c2:63:0b:d3:ce:
                    f2:69:6c:63:b1:5c:74:d5:b4:ec:66:20:0a:3f:20:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DE:DC:D3:81:93:A0:49:C1:58:F1:0D:BF:07:2A:29:E2:4B:CC:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/2ad2ae3c-6e1c-38fc-807e-5fe97f82a803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.184.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1c:a2:4a:c7:25:a9:22:3d:f7:d9:ff:9e:0f:9c:34:1d:81:
         ed:02:19:85:25:1f:b8:4f:df:78:36:70:11:43:91:45:2a:07:
         9b:d6:24:83:10:08:96:2b:cb:1d:c5:69:37:69:d0:d1:f5:d8:
         c2:27:d1:4a:02:17:9e:5c:43:20:27:db:59:2e:97:7f:cb:ec:
         a2:6d:a0:a7:7b:80:ce:fb:cc:8b:7b:68:8f:f4:42:8a:0a:8b:
         d9:35:0f:c7:4b:8e:31:88:83:01:f3:59:dd:d1:4f:b1:92:15:
         d9:d2:39:1c:d7:4f:ba:ff:5a:f5:9e:10:a7:7f:a0:47:f0:f1:
         4b:ca:0d:51:36:3e:d9:55:ee:39:95:80:a6:d8:1b:59:35:db:
         3e:a9:09:09:21:50:29:34:e0:2f:0d:8c:c8:ba:fb:bb:d6:5e:
         de:e7:1c:fe:29:ab:4b:0e:3d:e8:21:27:39:fa:be:b7:59:bd:
         2a:e7:6d:9c:eb:23:00:74:3d:b0:8a:d9:f3:bf:71:cf:94:6d:
         15:44:eb:69:b0:e7:43:13:ec:be:72:93:95:28:5d:45:32:1a:
         79:db:58:0e:9e:8b:da:b1:37:92:55:9d:df:66:10:6d:2e:98:
         90:6e:49:99:a3:72:82:bf:5d:37:68:08:92:4a:b6:a7:b8:f9:
         60:4a:7f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:11:35 2025 by rpki-client