Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a086baab-ef83-3a1c-b24f-6c1b8ba206bd.roa
File:                     a086baab-ef83-3a1c-b24f-6c1b8ba206bd.roa (raw, json)
Hash identifier:          TrBLnjR0rUS2tnYsNABn6rBAPfRz4dNoOFMIh9SRO+E=
Subject key identifier:   4E:7F:9E:45:FD:C1:9D:7D:CF:3D:50:1D:C8:7A:1C:E5:CF:E8:CA:57
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584ABD4BB0A7882C780D0AFC1280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a086baab-ef83-3a1c-b24f-6c1b8ba206bd.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     22418
IP address blocks:        184.104.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:b0:a7:88:2c:78:0d:0a:fc:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=0dca6f81-c031-4bfa-89b0-f5979a724577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:11:f0:5d:16:35:68:5a:7d:cb:f8:69:cc:
                    5a:9a:67:fe:42:39:ad:74:54:45:8a:1f:37:13:d1:
                    8e:a1:dd:14:68:ab:62:55:6a:9d:fe:09:86:30:f2:
                    e8:ef:95:77:0b:09:de:b6:f0:9e:5c:e7:c5:57:d5:
                    dd:12:37:92:21:b6:4d:bc:75:4c:1c:b3:18:a6:ac:
                    63:b2:3c:d2:a3:44:2d:69:bc:ae:b1:23:32:19:68:
                    96:fd:a0:8c:4d:e9:a6:a0:5d:a6:45:3c:83:73:f3:
                    b5:07:da:be:63:05:86:a8:67:1f:38:c9:08:93:6c:
                    03:92:4b:7e:e2:ef:65:9e:66:4c:9e:fe:e6:f2:a7:
                    e4:8b:73:78:95:fa:df:0a:41:1a:9c:36:c0:41:a6:
                    83:b2:d7:6b:6a:2e:da:ab:90:e3:d4:37:bd:48:f1:
                    60:9f:1d:3a:7b:c6:04:8c:83:50:fe:f0:fc:61:64:
                    4c:d1:42:ac:aa:5b:9a:03:d0:01:b5:99:af:e6:c1:
                    3d:fc:3c:54:c3:43:d5:29:f7:0f:eb:0a:52:1f:87:
                    62:2c:82:3f:58:60:44:fc:61:51:b1:ba:a9:cd:85:
                    81:9a:20:d1:64:62:b3:b6:1c:16:b2:e7:94:21:eb:
                    53:46:c0:98:97:b4:82:2c:47:6b:2a:53:5d:de:40:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7F:9E:45:FD:C1:9D:7D:CF:3D:50:1D:C8:7A:1C:E5:CF:E8:CA:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a086baab-ef83-3a1c-b24f-6c1b8ba206bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.104.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:36:ca:d5:6a:83:b8:31:26:90:3c:a9:66:35:b6:3c:d1:20:
         08:29:eb:a9:a0:b9:a2:8b:33:9b:1c:96:07:91:b6:0c:cf:97:
         29:7b:ac:c0:46:cc:43:ac:75:1f:60:2d:57:b5:85:5e:a9:81:
         78:02:92:fb:03:35:2b:3e:4f:32:82:d3:e2:ce:ed:7b:a5:85:
         37:93:7e:48:86:6a:71:2c:da:0b:a5:40:6b:7c:a9:e6:fe:d6:
         b3:a3:2b:f6:55:d8:0d:78:c2:13:75:7d:ef:fb:9c:26:4e:e3:
         2d:6b:cb:a2:4d:90:98:41:83:99:cb:52:c7:21:19:ed:7c:58:
         77:43:46:f8:9c:9d:2e:d7:17:66:2c:1e:01:c1:69:5c:c4:3f:
         2f:1b:02:de:1b:5a:3b:8f:e6:eb:f6:93:12:e9:2a:90:a1:85:
         66:9e:09:36:6e:00:dd:5d:ee:c3:83:16:ef:f5:24:cc:05:84:
         f6:21:a9:29:75:6d:df:2b:63:5b:cc:c2:ac:b7:67:8b:5e:cc:
         33:f2:fe:8b:1b:79:0d:4f:2d:9d:77:c2:d3:82:6c:df:27:21:
         19:eb:96:0e:c6:ac:af:c2:46:6a:25:8f:b0:bb:9b:ca:33:4d:
         8e:ab:ff:c4:48:13:b0:6c:cb:1e:5f:b2:a7:56:40:30:01:b1:
         48:0f:8e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:44 2025 by rpki-client