Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e4a0984-e34d-3e7f-aa09-71ecc62d72ef.roa
File:                     2e4a0984-e34d-3e7f-aa09-71ecc62d72ef.roa (raw, json)
Hash identifier:          PWLDbpsV5tRxLUPJuzFKKnGcdg2VYRqfx+CEL92NbFc=
Subject key identifier:   83:D3:41:61:86:B5:3B:54:A2:37:EB:6F:1C:6C:65:14:C5:99:03:F7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849E7BA75BC6662F29234C4A9F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e4a0984-e34d-3e7f-aa09-71ecc62d72ef.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     24319
IP address blocks:        184.28.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:75:bc:66:62:f2:92:34:c4:a9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=daa90820-f113-4f53-8be0-bae2e3a7d415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:94:9e:d5:02:7c:3b:70:ac:4b:bd:d4:46:
                    e7:69:67:e1:76:37:80:82:01:cd:b6:ea:64:95:4c:
                    da:3c:32:0d:29:6c:fb:69:f1:61:19:13:8c:76:3b:
                    f4:f0:53:2b:45:82:d8:59:f2:3c:f8:0f:f5:b4:46:
                    59:52:92:bc:f8:bd:15:67:6d:8a:fb:1c:95:3e:6d:
                    4c:32:6e:dd:4d:38:a7:e9:72:06:1f:f7:c7:37:1a:
                    08:64:b7:85:93:d1:3b:32:c6:31:84:14:96:3c:49:
                    d6:40:0e:62:18:e2:34:bb:7e:16:14:43:5f:ea:3b:
                    d2:c4:1c:80:61:66:42:d9:ca:89:7b:85:fd:09:c8:
                    ba:d6:8a:dd:c0:97:52:ca:b9:c6:52:ca:49:aa:43:
                    42:1f:d0:a2:18:71:ef:6c:1e:4d:e5:5e:7f:15:04:
                    77:22:66:4a:2d:f3:bf:44:41:ac:ca:ac:a5:de:cc:
                    da:a8:34:c6:81:56:c4:2a:1a:b0:48:ab:c5:31:e0:
                    60:f5:98:4a:0f:e5:d6:bb:a7:96:25:d7:66:c2:8d:
                    30:84:cd:02:53:80:6b:cb:cd:5f:c8:92:5e:13:21:
                    ea:82:c8:e0:29:61:91:c5:1c:85:e9:f5:83:72:c7:
                    ee:cd:10:f0:5a:e9:61:19:a0:d8:09:c8:7a:49:b8:
                    84:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D3:41:61:86:B5:3B:54:A2:37:EB:6F:1C:6C:65:14:C5:99:03:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e4a0984-e34d-3e7f-aa09-71ecc62d72ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:e3:3e:6b:24:9a:14:0b:96:58:e6:66:a4:f8:0d:41:db:
         d5:d6:e7:8e:e1:c2:2d:1e:9d:c4:fb:4d:6b:d2:83:1f:e3:e4:
         33:48:c0:4d:bf:f9:1f:a1:79:64:84:0b:af:11:a7:92:fd:70:
         10:97:47:4e:55:7a:db:cf:a6:5a:39:5a:d1:b9:3b:f2:b5:29:
         c2:35:5e:99:40:1b:10:f4:71:26:4d:95:c0:a6:3a:9a:30:a4:
         92:a6:d7:42:aa:86:89:8d:fa:b6:ef:f4:ff:e4:b5:4a:a6:f2:
         8e:2e:ab:23:bf:6f:b3:04:f0:0e:a2:6a:a3:f6:ae:2b:e7:7a:
         77:c5:1b:b7:ee:9a:e6:06:8e:53:52:10:16:85:ab:1e:35:3f:
         39:ad:be:8b:5f:73:30:2f:02:e6:27:b0:1a:90:15:80:9a:47:
         7c:1b:ed:96:99:ce:36:17:aa:0c:6a:7c:95:84:33:a1:31:29:
         af:4e:fd:ba:22:5f:d4:ea:9b:10:8c:a3:a1:db:b1:f9:d4:46:
         dd:b6:82:e0:fe:9e:03:56:58:2c:93:9a:ec:81:04:4a:7c:14:
         d2:6e:b2:f7:5a:18:e6:47:a5:21:e4:26:78:01:72:3e:42:b2:
         7e:fd:5b:71:60:ab:58:db:9d:f6:0b:ae:3d:ed:04:36:88:d6:
         32:64:0b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:40:49 2025 by rpki-client