Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08eb82d7-93de-303c-84dd-6095690ff48e.roa
File:                     08eb82d7-93de-303c-84dd-6095690ff48e.roa (raw, json)
Hash identifier:          furtGVtH0OCCIwOpAfLKgJr+rxhlKyU56ooQjouEpCE=
Subject key identifier:   62:61:9A:CD:FB:78:19:09:AE:AF:3C:51:F4:09:DC:EC:2F:A6:EF:62
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584915115F801E2C5BB572FCEFD0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08eb82d7-93de-303c-84dd-6095690ff48e.roa
Signing time:             Wed 05 Mar 2025 02:00:40 +0000
ROA not before:           Wed 05 Mar 2025 02:00:40 +0000
ROA not after:            Tue 03 Jun 2025 01:00:40 +0000
asID:                     55836
IP address blocks:        184.85.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:11:5f:80:1e:2c:5b:b5:72:fc:ef:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  5 02:00:40 2025 GMT
            Not After : Jun  3 01:00:40 2025 GMT
        Subject: CN=c25b7dcb-ac67-4978-9cbc-5a592106c8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:bd:f6:8a:3a:28:e7:12:f7:d0:52:1e:2d:70:
                    1e:6a:ec:22:59:3e:2e:06:7a:94:ec:5f:c2:ec:a6:
                    10:78:bc:cb:f2:8a:3f:61:be:a8:4f:d0:98:de:12:
                    fd:9f:f5:31:0d:42:6f:6e:5c:c9:e2:56:a6:81:d5:
                    00:46:66:65:77:98:7d:87:45:48:da:12:f4:23:07:
                    74:ff:d1:2e:ad:d8:26:a0:ea:5f:2a:b6:6d:63:e2:
                    e9:b5:93:e9:91:f3:4b:ee:05:be:13:fb:66:ec:59:
                    c7:63:8c:8a:df:4f:5e:65:da:22:d3:7d:5f:18:c8:
                    47:8f:ac:cc:0a:58:1b:46:6d:3e:ac:7a:af:9d:0e:
                    ee:fa:58:f6:75:a4:4f:a1:0d:9b:b9:ca:1e:c1:cd:
                    70:5b:ac:ac:29:89:c5:68:bd:3f:1b:c1:52:61:62:
                    bf:15:e3:09:2f:75:99:af:86:16:97:ef:d8:61:96:
                    ce:0f:5e:d1:72:f5:ef:09:5e:a7:5e:de:14:ef:9d:
                    80:11:4b:0a:23:7b:05:99:c7:98:b0:27:e8:a8:e8:
                    dd:55:aa:be:c3:6a:0d:bb:b0:a2:a9:57:ab:fb:a6:
                    27:8c:90:ef:13:57:70:8a:3b:cb:53:7d:ef:0d:36:
                    02:85:9f:37:dd:03:13:b8:b0:11:26:e7:a7:60:bb:
                    52:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:61:9A:CD:FB:78:19:09:AE:AF:3C:51:F4:09:DC:EC:2F:A6:EF:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08eb82d7-93de-303c-84dd-6095690ff48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.85.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3b:21:33:7a:42:5b:f3:45:27:a4:38:e6:af:af:1b:3c:59:
         a0:e6:cd:1f:8e:04:5f:21:f6:3e:0f:93:ed:d2:19:b0:83:f2:
         dd:08:64:10:0e:06:c2:df:29:c6:c7:80:75:31:63:d3:c7:52:
         b2:12:e6:e1:2a:7b:5d:1c:b0:04:53:3c:ba:74:dc:b4:b7:3d:
         ff:3e:32:44:da:88:91:ab:4a:13:24:70:d9:e2:ff:d6:7f:dd:
         b5:32:61:cb:9e:31:0d:f0:53:f1:cf:da:27:d6:52:b0:dd:a8:
         b1:19:9e:1e:f7:1e:3d:75:3e:e7:93:96:3f:d7:bf:90:f6:c3:
         bc:cb:26:d8:0c:f7:7d:39:03:56:8b:2b:80:57:ae:d4:f8:c5:
         4f:b0:45:29:4d:b9:89:ee:91:08:91:8b:5c:2c:d5:d1:1e:aa:
         c8:bb:25:c2:05:20:2c:b0:f4:02:f3:54:71:2b:03:c4:48:33:
         e7:c1:62:d9:bf:c3:28:b3:e1:9b:79:7e:e7:c9:6e:2a:72:99:
         5c:1d:02:35:92:04:b1:7d:61:f3:37:8c:89:7c:ca:5c:ac:bc:
         e5:7e:57:25:b3:f0:13:d8:3d:f8:3f:35:b0:2a:22:40:5c:d7:
         2e:8f:29:92:15:48:d0:f4:20:b1:b3:b2:68:40:de:b5:bf:1d:
         04:23:2f:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEV+AHixbtXL879AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk
YzI1YjdkY2ItYWM2Ny00OTc4LTljYmMtNWE1OTIxMDZjOGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8L32ijoo5xL30FIeLXAeauwiWT4uBnqU7F/C
7KYQeLzL8oo/Yb6oT9CY3hL9n/UxDUJvblzJ4lamgdUARmZld5h9h0VI2hL0Iwd0
/9EurdgmoOpfKrZtY+LptZPpkfNL7gW+E/tm7FnHY4yK309eZdoi031fGMhHj6zM
ClgbRm0+rHqvnQ7u+lj2daRPoQ2bucoewc1wW6ysKYnFaL0/G8FSYWK/FeMJL3WZ
r4YWl+/YYZbOD17RcvXvCV6nXt4U752AEUsKI3sFmceYsCfoqOjdVaq+w2oNu7Ci
qVer+6YnjJDvE1dwijvLU33vDTYChZ833QMTuLARJuenYLtSdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGJhms37eBkJrq88UfQJ3Owvpu9iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDhlYjgyZDctOTNkZS0z
MDNjLTg0ZGQtNjA5NTY5MGZmNDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuFXcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEk7ITN6QlvzRSekOOavrxs8WaDmzR+OBF8h9j4Pk+3SGbCD8t0IZBAO
BsLfKcbHgHUxY9PHUrIS5uEqe10csARTPLp03LS3Pf8+MkTaiJGrShMkcNni/9Z/
3bUyYcueMQ3wU/HP2ifWUrDdqLEZnh73Hj11PueTlj/Xv5D2w7zLJtgM9305A1aL
K4BXrtT4xU+wRSlNuYnukQiRi1ws1dEeqsi7JcIFICyw9ALzVHErA8RIM+fBYtm/
wyiz4Zt5fufJbipymVwdAjWSBLF9YfM3jIl8ylysvOV+VyWz8BPYPfg/NbAqIkBc
1y6PKZIVSND0ILGzsmhA3rW/HQQjL+A=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:49 2025 by rpki-client