Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a92608f5-4efa-38be-997b-96e8775235ee.roa
File:                     a92608f5-4efa-38be-997b-96e8775235ee.roa (raw, json)
Hash identifier:          c+2xstgayJAa8lwfTz4nCtfX2QVL10hBEP/oFCA7aWg=
Subject key identifier:   A8:BD:13:4B:A7:A6:56:A5:91:0E:E4:FC:22:06:F3:A4:89:ED:4D:61
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A8B0B4D93E9C7077D707A5180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a92608f5-4efa-38be-997b-96e8775235ee.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     16625
IP address blocks:        184.30.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:4d:93:e9:c7:07:7d:70:7a:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=be1c215a-b6a6-4cfe-a82c-c41d61b68bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:51:1e:4d:1e:71:13:5a:53:21:2f:7a:3d:c0:
                    94:4c:7e:de:f6:23:ca:d0:f7:07:68:26:4c:eb:17:
                    61:e2:43:b5:9e:a2:94:6b:4b:d8:86:cb:65:b6:4b:
                    08:95:1a:17:ab:97:ff:12:1d:51:c0:7d:26:5a:a1:
                    ab:24:41:f5:5b:97:18:49:1b:d3:0b:bc:8f:a8:60:
                    8b:78:80:28:52:a5:bb:5f:e5:e8:58:10:b3:60:6b:
                    30:0e:6f:21:cd:aa:a1:6d:c2:b4:1b:a1:5f:e1:be:
                    12:7e:98:8d:9c:58:92:ab:ad:88:7b:fa:de:e4:76:
                    fd:8d:06:ee:cd:88:86:6a:07:1e:66:8f:e3:a6:2a:
                    18:d5:d7:15:6e:cc:f6:10:6b:64:12:4d:49:e6:67:
                    51:fc:14:21:80:98:a2:c3:13:2e:68:94:f0:f7:21:
                    e6:76:17:04:b1:26:cb:22:02:da:29:1e:51:6e:9b:
                    24:f6:53:c8:d0:e9:70:3d:ae:bc:20:c8:be:ae:63:
                    43:18:39:92:a0:bb:d9:ea:a8:8e:54:4f:e9:87:c6:
                    61:44:49:78:dc:4f:4c:70:e2:eb:77:6e:4e:60:cb:
                    b1:b9:29:d9:77:e3:8f:a9:af:54:5e:df:9e:ba:52:
                    5e:0e:b9:85:dd:f2:92:72:95:74:e2:56:a2:07:bd:
                    1d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BD:13:4B:A7:A6:56:A5:91:0E:E4:FC:22:06:F3:A4:89:ED:4D:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a92608f5-4efa-38be-997b-96e8775235ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.30.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:0c:f3:0f:a6:05:6e:da:1b:25:1f:cc:c0:b6:90:22:fa:f8:
         de:18:15:5d:20:89:94:56:c8:cd:f7:1e:84:a2:fd:e9:c9:5f:
         6d:66:a2:73:8f:0b:9a:19:57:15:23:5f:ef:ac:60:0d:63:ee:
         95:20:aa:a9:d2:27:2f:8d:35:98:9e:87:e4:39:3e:0b:94:51:
         2e:7c:54:8e:57:17:24:1b:51:78:bd:0d:69:b0:46:f2:c9:e4:
         62:48:4c:86:89:ae:19:02:30:5b:9d:ec:50:4e:bb:02:58:81:
         e9:59:cf:60:71:fa:ff:b9:39:7b:7a:61:7b:9a:a0:b6:a9:54:
         d5:e3:db:ab:a8:c8:0c:56:e7:4c:05:64:ab:9a:a0:c0:59:06:
         73:51:42:3e:96:25:57:56:e8:89:9e:ba:05:27:52:84:4c:e2:
         9f:1b:1a:9c:56:80:40:7e:f3:7e:1e:ef:1e:80:33:22:ed:19:
         78:0a:34:a2:10:9c:83:e0:9c:08:0f:b6:a7:07:66:aa:1c:cd:
         cc:ba:e8:24:bb:08:83:38:0c:e3:4c:a1:e4:19:1a:5a:75:80:
         7c:3b:12:ba:d3:34:0b:33:8e:6d:3b:31:e1:68:66:27:1a:10:
         cd:c3:b6:2f:d1:15:ba:e3:cd:2a:8a:fe:4a:fa:d4:cf:1c:db:
         19:42:ad:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:49:19 2025 by rpki-client