Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3033674a-de63-3ef7-8faf-ad3ddf452a53.roa
File:                     3033674a-de63-3ef7-8faf-ad3ddf452a53.roa (raw, json)
Hash identifier:          aYFUOYEyank2My7kNjBgyYICdbRrXelxEW79VX3Z32g=
Subject key identifier:   40:03:66:AB:C7:FE:ED:1D:E4:92:35:0A:37:C6:B6:7A:C9:AD:FC:96
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A00DAEC5D58CB29CB59587798
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3033674a-de63-3ef7-8faf-ad3ddf452a53.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        184.28.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:ec:5d:58:cb:29:cb:59:58:77:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=5f9f06e2-7511-4841-94d9-2e02d90b9ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:33:b3:3a:a2:63:c1:4c:65:27:64:aa:ee:a9:
                    8b:a7:a8:5a:b5:09:da:0c:23:25:97:45:bc:0a:25:
                    f7:0a:4b:f2:f5:69:9a:bc:6f:f0:6a:98:e7:02:56:
                    9a:3b:35:a4:cf:4e:91:f9:73:01:50:ab:2d:02:e6:
                    ef:cf:37:de:5f:cc:b2:94:98:a2:08:ab:a7:6a:9f:
                    6b:76:2a:e1:94:ac:76:e6:a6:7e:f4:04:59:cc:65:
                    c0:d6:ec:d7:b0:e7:d0:07:52:97:2c:e6:e9:d2:9f:
                    3a:98:a9:90:89:0a:03:18:e2:00:60:6b:8c:0f:83:
                    ff:07:e2:2d:3c:c2:90:f1:c8:96:c8:b3:46:8d:da:
                    f8:eb:46:d5:34:0f:1c:47:fe:06:f4:1e:c4:b4:aa:
                    41:02:f0:2c:58:ec:99:9d:77:f6:f0:72:fe:ee:19:
                    9b:8d:5c:bb:14:0b:3b:ee:04:01:e6:d6:7c:6a:4e:
                    ba:77:7c:8c:77:24:59:f4:58:84:94:18:8d:75:28:
                    31:0d:a2:0b:b6:b3:f2:7a:72:4a:a4:40:46:87:f6:
                    9e:21:8a:62:d0:51:25:57:b8:b7:b3:32:fd:3b:ec:
                    18:89:de:cd:a7:2e:bb:eb:8f:4c:d8:19:cf:fe:56:
                    9c:e5:3e:64:47:36:1f:0f:51:37:61:48:40:b5:87:
                    17:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:03:66:AB:C7:FE:ED:1D:E4:92:35:0A:37:C6:B6:7A:C9:AD:FC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3033674a-de63-3ef7-8faf-ad3ddf452a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6b:2d:5c:0a:18:91:d6:05:04:54:66:37:d9:ab:e3:c0:ac:
         56:c2:62:7d:df:14:0d:f2:f5:5d:3b:89:3b:a1:d8:a1:e2:36:
         1a:c2:4c:16:4e:4c:55:b4:58:35:10:89:51:33:99:a4:e4:d6:
         9c:56:90:b6:76:b2:a3:de:e2:ac:70:91:be:39:8b:3f:91:06:
         1b:6f:09:90:b9:ed:f6:38:45:cb:6b:fd:ed:50:7e:86:7a:d7:
         12:16:b7:b5:78:21:c5:4e:eb:5b:31:60:c1:9a:eb:79:85:ef:
         1e:66:d1:bd:28:fa:7e:94:10:6b:87:1e:06:b8:91:d0:a0:8b:
         42:3f:95:d2:43:42:89:a7:8d:a1:83:b4:d1:e5:9e:df:6c:6a:
         ef:00:bb:3d:3a:19:e9:50:c2:fd:fb:f4:d7:b7:33:46:e4:a4:
         ac:1f:7d:c1:f9:d4:7d:72:76:68:31:fb:11:49:c1:8d:e6:be:
         22:75:2a:47:75:af:f0:7c:cd:c1:06:34:e3:2c:e0:b9:36:d4:
         9c:d4:0e:ef:a4:88:b1:a5:10:ec:cb:2c:46:d7:b3:0f:16:30:
         39:65:71:0b:05:18:5b:b3:05:ad:8e:dd:a5:98:50:d2:92:19:
         03:59:43:62:a9:d7:c7:db:27:ca:4b:ef:6c:cd:de:cd:46:90:
         a0:f7:f1:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2uxdWMspy1lYd5gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NWY5ZjA2ZTItNzUxMS00ODQxLTk0ZDktMmUwMmQ5MGI5ZWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TOzOqJjwUxlJ2Sq7qmLp6hatQnaDCMll0W8
CiX3Ckvy9WmavG/wapjnAlaaOzWkz06R+XMBUKstAubvzzfeX8yylJiiCKunap9r
dirhlKx25qZ+9ARZzGXA1uzXsOfQB1KXLObp0p86mKmQiQoDGOIAYGuMD4P/B+It
PMKQ8ciWyLNGjdr460bVNA8cR/4G9B7EtKpBAvAsWOyZnXf28HL+7hmbjVy7FAs7
7gQB5tZ8ak66d3yMdyRZ9FiElBiNdSgxDaILtrPyenJKpEBGh/aeIYpi0FElV7i3
szL9O+wYid7Npy67649M2BnP/lac5T5kRzYfD1E3YUhAtYcXywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEADZqvH/u0d5JI1CjfGtnrJrfyWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzAzMzY3NGEtZGU2My0z
ZWY3LThmYWYtYWQzZGRmNDUyYTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBzqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD1rLVwKGJHWBQRUZjfZq+PArFbCYn3fFA3y9V07iTuh2KHiNhrCTBZO
TFW0WDUQiVEzmaTk1pxWkLZ2sqPe4qxwkb45iz+RBhtvCZC57fY4Rctr/e1QfoZ6
1xIWt7V4IcVO61sxYMGa63mF7x5m0b0o+n6UEGuHHga4kdCgi0I/ldJDQomnjaGD
tNHlnt9sau8Auz06GelQwv379Ne3M0bkpKwffcH51H1ydmgx+xFJwY3mviJ1Kkd1
r/B8zcEGNOMs4Lk21JzUDu+kiLGlEOzLLEbXsw8WMDllcQsFGFuzBa2O3aWYUNKS
GQNZQ2Kp18fbJ8pL72zN3s1GkKD38f0=
-----END CERTIFICATE-----
Generated at Sun Jun 8 02:42:01 2025 by rpki-client