Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e4a0984-e34d-3e7f-aa09-71ecc62d72ef.roa
File:                     2e4a0984-e34d-3e7f-aa09-71ecc62d72ef.roa (raw, json)
Hash identifier:          1cO746p2cMT2ykaB+E8d+r/g9MCsueLTftYJfhVnvg8=
Subject key identifier:   A8:07:0D:EF:97:EE:AE:0A:2B:44:27:3D:45:74:2C:70:31:0F:5B:F0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584BA9325E4BFEAD61CE5F4EDF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e4a0984-e34d-3e7f-aa09-71ecc62d72ef.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     24319
IP address blocks:        184.28.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:5e:4b:fe:ad:61:ce:5f:4e:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=e1a89791-8fa6-451f-bcd3-af77a09df21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:81:87:d5:63:12:37:3e:27:80:3e:c6:23:31:
                    67:96:12:04:e7:34:db:58:e8:1d:c0:71:a4:ad:72:
                    9d:b2:13:22:cf:2a:47:23:20:4e:94:ee:db:5c:82:
                    fe:35:a9:66:35:66:87:db:73:a4:c9:46:84:35:96:
                    c8:58:16:03:a9:17:e8:af:50:fb:ef:af:f0:54:ad:
                    df:cc:eb:91:27:e4:34:19:02:4b:8a:58:30:23:bb:
                    e2:7f:c7:75:26:92:bb:0f:3b:81:56:20:50:a9:ce:
                    b2:95:f2:4a:0b:79:78:51:ad:af:8f:8e:6d:a3:ce:
                    b3:69:b8:cc:0b:d1:73:0a:22:39:53:ed:ff:01:5b:
                    32:ad:c5:65:74:5f:a5:e7:47:d2:0d:72:36:a2:94:
                    98:2c:cf:49:11:30:6e:da:63:40:f5:ad:0e:5a:40:
                    97:f4:9c:f5:0b:30:95:f5:fb:d4:7b:38:22:da:e2:
                    b1:07:6e:02:e1:35:2f:f2:7b:97:ad:e6:95:b0:ce:
                    e8:11:c8:a0:10:c6:00:f9:5d:fc:18:dd:de:1d:aa:
                    3a:60:db:53:f7:7c:37:a3:a7:3a:31:d4:79:a0:5d:
                    79:72:56:62:37:f9:c9:6a:37:7b:f3:63:39:36:19:
                    52:9e:82:19:72:00:f3:41:1b:df:11:3d:91:f2:a9:
                    02:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:07:0D:EF:97:EE:AE:0A:2B:44:27:3D:45:74:2C:70:31:0F:5B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e4a0984-e34d-3e7f-aa09-71ecc62d72ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:15:19:68:11:86:30:2c:a5:f0:14:ed:ef:3e:a9:1b:2f:02:
         91:7f:b6:b1:c1:b6:23:b6:80:33:97:e9:3f:bf:d0:ff:64:90:
         d8:69:57:ba:15:7e:58:3f:2d:94:c4:ed:97:99:66:d5:c7:59:
         ed:a4:ff:00:a9:e4:b2:15:70:85:01:1f:f3:fb:34:6c:3f:79:
         29:cc:8c:88:fe:5c:b9:aa:75:e7:66:76:c6:c2:bd:a1:2f:bb:
         9f:40:2d:f6:d0:90:81:9b:bf:01:1c:dd:b0:9e:87:39:d6:b7:
         93:a1:62:10:d2:eb:41:6f:22:83:c1:ce:85:51:a2:df:03:5a:
         f6:5c:1f:71:bd:af:82:4e:29:d2:e3:a3:a6:08:eb:b1:1b:15:
         a7:ea:ce:01:f3:d1:8e:6e:b7:80:c3:95:50:16:2d:a7:46:71:
         3b:99:78:9b:25:d2:83:5c:a9:1f:c2:ba:7c:f9:18:a2:69:fe:
         36:36:3e:1e:fb:5b:80:66:91:22:e2:55:7a:17:8a:65:fb:84:
         ec:66:c5:04:b9:39:5b:ab:25:e1:b8:33:e7:4f:97:71:78:90:
         83:d2:94:ee:a0:50:bd:7d:75:e4:1c:fc:ae:da:b4:be:66:08:
         da:29:64:f5:cb:8c:ae:bc:db:ef:85:72:d6:1f:4b:e6:23:07:
         e6:ff:09:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:59:24 2025 by rpki-client