Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e437171b-7a68-3bc2-8c4d-3db46f9bfe52.roa
File:                     e437171b-7a68-3bc2-8c4d-3db46f9bfe52.roa (raw, json)
Hash identifier:          ozKGJf9f0STuibylB05X8NoI5Vt0RkQWLlpQ2MSPkGk=
Subject key identifier:   A1:66:19:9F:F7:35:E0:BF:25:AA:F3:FB:A6:BF:94:AA:F8:13:60:F2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D6AAA705A94C255CBCE7EE850
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e437171b-7a68-3bc2-8c4d-3db46f9bfe52.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     24319
IP address blocks:        184.50.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:70:5a:94:c2:55:cb:ce:7e:e8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=f7214827-20f6-48d8-8da6-9ccee1ee6bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:11:45:9c:22:6d:33:77:2c:e7:0b:60:db:12:
                    b4:07:50:8f:82:78:4a:a6:0d:7a:84:db:28:2f:cd:
                    c7:38:81:75:47:d0:f3:7a:6c:1c:8f:97:11:b8:24:
                    e3:f4:98:52:d1:39:18:23:10:47:fe:1b:b6:cd:a3:
                    28:bf:aa:cd:f9:35:b3:46:34:2e:ab:1c:13:1d:6b:
                    6e:2d:35:05:b0:62:33:b3:56:17:2b:9b:cf:f2:8d:
                    fd:61:69:6d:c0:e6:62:0b:da:49:7e:32:e0:37:0e:
                    8f:61:6b:82:08:5a:72:30:95:13:11:26:fe:32:3d:
                    91:46:43:48:24:dd:cd:ab:cb:df:a7:3c:bc:d0:e5:
                    2c:95:ef:cc:f4:eb:f1:05:1f:2c:f7:a8:52:38:1d:
                    d9:37:7c:51:24:bd:e5:fa:12:65:d5:0f:b3:a1:22:
                    98:a9:ee:2d:c5:32:2c:ae:cc:0a:d8:3a:ca:d0:f9:
                    39:00:95:6d:03:ef:ad:80:ee:08:d5:9b:51:5d:5f:
                    48:a3:7e:be:dc:64:2a:e7:c9:76:ab:b1:0d:ec:05:
                    f0:c5:dd:5c:37:81:29:ce:d9:9f:5a:10:4f:76:ad:
                    f0:ec:da:62:00:59:96:47:22:3a:86:56:c8:20:7c:
                    9b:9d:e5:78:5f:b1:5c:00:d6:7d:cd:39:d6:e4:75:
                    eb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:66:19:9F:F7:35:E0:BF:25:AA:F3:FB:A6:BF:94:AA:F8:13:60:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e437171b-7a68-3bc2-8c4d-3db46f9bfe52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.50.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:3a:1d:c4:18:47:a5:f1:ce:f5:5f:6f:6c:ee:b8:e0:83:f0:
         a1:e4:73:a2:d8:6a:d5:da:12:c9:fe:49:a2:98:65:ee:55:73:
         48:3b:de:b5:04:7d:61:f8:a6:9a:c1:40:cf:c6:34:d8:1f:3c:
         4e:64:53:4b:3e:ea:fc:04:2d:cb:f0:f4:d4:88:80:4a:61:6c:
         e3:e4:77:68:eb:77:7e:8f:7c:c8:75:22:0f:62:9a:c2:cc:b7:
         8c:cd:f8:ce:07:75:de:b0:ca:f4:f8:35:41:84:7b:ef:d1:9e:
         ba:e2:d4:1d:61:cc:d5:2f:63:67:f7:bf:b0:42:d6:2a:97:0d:
         03:73:96:07:9a:06:4e:b2:c8:f6:b3:b8:72:cf:87:6f:d8:10:
         92:04:95:a0:69:00:d8:83:f8:0e:22:48:00:50:db:76:d5:01:
         ed:6c:07:75:24:f0:6e:67:1a:eb:bb:06:8c:80:82:24:92:3c:
         7a:b4:8b:54:ba:c6:09:95:21:2b:c0:1e:d8:21:78:83:09:e1:
         a2:d4:be:78:ca:99:ef:1b:6b:cc:93:f0:4b:f7:59:14:2c:9d:
         7f:3a:e0:82:2d:2b:55:7b:4a:12:f7:e1:ca:f7:72:fb:bf:db:
         4a:db:68:28:31:42:3f:19:e2:52:a0:27:4c:8e:cd:f6:0a:c7:
         9e:71:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:58 2026 by rpki-client