Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee7e8ea1-b57c-3a6d-b200-017dba025f21.roa
File:                     ee7e8ea1-b57c-3a6d-b200-017dba025f21.roa (raw, json)
Hash identifier:          +83VB6AxLJbWUWYvicuUV0tPIHC5b9c/4/QAzI3G+K0=
Subject key identifier:   8C:D8:CA:D4:86:0F:1F:FE:4B:09:31:79:36:A2:74:9A:58:76:5C:70
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858497C3EE9FF88D9EEED9D02A5C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee7e8ea1-b57c-3a6d-b200-017dba025f21.roa
Signing time:             Fri 11 Apr 2025 01:00:48 +0000
ROA not before:           Fri 11 Apr 2025 01:00:48 +0000
ROA not after:            Thu 10 Jul 2025 01:00:48 +0000
asID:                     16625
IP address blocks:        184.25.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:3e:e9:ff:88:d9:ee:ed:9d:02:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 11 01:00:48 2025 GMT
            Not After : Jul 10 01:00:48 2025 GMT
        Subject: CN=d34c989e-ada6-46e8-bf30-8ab28831f9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d1:ae:98:76:64:35:73:16:ab:1f:6a:15:98:
                    65:06:4d:8c:99:99:7b:8a:47:59:68:86:e1:f7:87:
                    15:3d:a3:ec:e6:71:3e:62:83:bc:03:12:c1:c0:ff:
                    04:fe:6f:21:c1:fb:c2:db:82:98:29:32:bd:a7:da:
                    b6:fd:a4:8e:7d:ac:7a:a7:2f:ad:f3:8b:49:55:92:
                    a8:ae:b7:89:11:63:76:61:92:c3:8a:34:ac:c4:14:
                    53:34:b5:6f:95:0e:08:80:46:5c:44:a1:aa:85:98:
                    13:87:75:dd:28:43:9a:ca:0f:43:d7:18:b9:47:0c:
                    2d:5f:e3:ec:a2:12:4d:8a:8c:23:bd:65:91:bc:14:
                    0e:2e:9b:c4:06:64:5b:ac:61:9f:c8:12:38:8b:75:
                    44:0e:ad:39:57:99:15:c5:1d:15:bf:1e:0e:ee:c8:
                    d8:86:74:70:16:a2:a7:a4:72:95:ee:e1:31:69:b4:
                    69:d9:7a:40:54:db:b8:0f:0e:8d:0b:a6:03:2c:dc:
                    c9:6d:37:96:a7:fb:9b:99:27:d6:5d:8b:98:0a:87:
                    d6:2d:fc:05:96:d8:de:b8:27:32:1f:d3:68:3d:68:
                    21:61:04:02:e2:f6:10:d0:48:59:35:af:26:e8:fe:
                    b1:df:39:cf:37:a4:23:80:0e:56:1a:41:ed:b3:ca:
                    7c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D8:CA:D4:86:0F:1F:FE:4B:09:31:79:36:A2:74:9A:58:76:5C:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee7e8ea1-b57c-3a6d-b200-017dba025f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:20:7f:63:d0:b3:36:8f:9d:c0:97:38:51:c8:19:ad:92:e3:
         ae:b5:17:b2:22:9b:f6:1c:3f:41:99:f7:ce:0a:1e:73:ff:d0:
         05:ce:07:ad:58:2b:fb:90:d1:58:09:50:22:96:72:49:c8:1a:
         a5:90:dd:9e:fd:db:76:0e:43:7d:b9:8b:d0:09:82:de:56:d2:
         04:cf:ec:1a:a9:a1:9a:61:15:8f:28:0a:2b:3a:c3:19:6c:8a:
         c9:f3:02:0c:aa:a8:f7:d3:60:f7:4c:5e:b2:23:18:b5:18:87:
         bf:a1:39:5e:38:8c:4e:ca:d2:49:21:ce:07:50:95:d0:c6:50:
         5f:1c:c0:db:5f:52:b1:35:49:ee:24:38:4c:e5:08:06:1d:b3:
         d2:61:51:d4:ae:10:b7:7c:71:3e:11:2a:7e:d9:d6:40:e4:f2:
         cd:58:3d:01:a5:70:11:de:e5:6e:ee:36:fb:c7:ef:4b:72:61:
         0e:e7:df:69:7f:ab:14:9f:75:52:af:d2:7f:9f:6c:5e:1f:fa:
         9e:29:2a:15:17:e0:3c:cc:8e:36:37:fc:26:a2:33:9c:ad:c8:
         3e:3f:12:b9:36:df:33:7d:5c:75:a6:c0:61:73:e1:9d:23:68:
         30:eb:e0:76:7c:c4:0e:5f:42:6a:33:5c:f5:2d:cc:3f:fd:cd:
         e8:b5:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:24 2025 by rpki-client