Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38ff6bb0-132f-32b6-85e2-0a89cd757184.roa
File:                     38ff6bb0-132f-32b6-85e2-0a89cd757184.roa (raw, json)
Hash identifier:          50KWb8sSWjCGpc19WB7Cg3m7RabFjOVF69UTptARJQ4=
Subject key identifier:   DC:48:46:90:B6:0F:3D:F5:E2:12:15:B5:1D:0D:FD:3E:9A:CE:DE:1D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849F7153C41455A45F338566B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38ff6bb0-132f-32b6-85e2-0a89cd757184.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        184.29.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:3c:41:45:5a:45:f3:38:56:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=02696ff4-8b23-42c8-af61-475971896078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c2:e8:d6:fa:c3:93:82:b2:f9:7e:51:bc:7f:
                    15:28:f6:5b:33:18:02:e6:88:62:5c:46:19:94:89:
                    b5:36:de:c7:df:49:0c:09:be:f0:ae:19:75:74:c5:
                    6d:33:64:30:7f:72:22:c2:c8:e4:f6:b3:03:d8:ea:
                    65:90:3d:d5:3f:a2:a9:a9:3b:1f:b6:14:53:b3:c9:
                    1a:a8:73:71:ba:2a:5e:49:9f:3b:d7:ce:65:c5:cc:
                    38:a8:82:15:5e:f2:7e:9a:8b:f9:cf:de:84:e3:a1:
                    e9:f2:4b:a1:10:90:ad:e5:08:92:84:24:75:19:60:
                    9c:0e:76:14:3d:2a:79:4c:a8:78:c6:18:7d:bb:12:
                    cd:49:22:94:d9:27:21:f3:3c:3c:56:de:a7:74:33:
                    77:3a:ee:00:96:13:4b:2a:c8:54:b7:ba:fd:d6:3f:
                    bd:92:44:61:2c:f0:4e:0b:d0:b6:28:c8:a7:d4:6e:
                    90:d2:be:58:1e:46:1c:cf:84:78:cc:9a:93:95:3a:
                    3e:84:6d:0b:38:77:82:18:dd:84:73:b8:b7:a8:71:
                    54:73:51:85:23:f9:71:ba:9a:03:32:c7:7a:e5:0c:
                    ec:33:48:8c:0a:0d:0d:bd:43:9d:17:3c:bc:ec:a8:
                    51:3a:15:05:31:7a:d0:d8:a2:32:00:2d:a4:44:80:
                    97:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:48:46:90:B6:0F:3D:F5:E2:12:15:B5:1D:0D:FD:3E:9A:CE:DE:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38ff6bb0-132f-32b6-85e2-0a89cd757184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.29.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:53:0e:d6:2f:32:6f:33:f7:2d:e2:63:fb:86:6e:ff:32:ab:
         06:5a:2f:bd:0f:18:41:89:31:59:db:1d:ef:30:fb:f7:bf:be:
         1d:b1:08:c4:09:8a:a5:f0:31:86:27:a1:c9:40:ff:35:d8:b9:
         9a:79:17:d4:38:4f:3f:cc:2c:1a:2d:b7:8e:18:e5:74:53:20:
         74:fb:6b:b7:61:28:5a:93:2f:a8:b9:35:39:9d:f0:6f:a9:f5:
         67:c6:29:00:1f:1d:84:82:8f:96:ac:9e:f1:fd:3a:eb:e5:94:
         d9:02:d8:86:7b:6d:59:3b:0e:44:f4:b4:27:9a:50:c3:9c:7f:
         63:13:9c:35:0c:d2:f7:15:93:89:f0:eb:6e:19:0c:28:15:ec:
         4d:16:0f:9e:27:bb:fe:39:4c:ec:af:3b:ea:5f:78:80:3b:18:
         df:9d:19:17:54:e1:9e:67:b2:93:5b:11:2a:96:b7:d5:f1:69:
         f7:eb:93:65:a0:7a:fc:1c:54:43:f5:87:3f:52:5c:19:7d:3d:
         a7:57:ea:0d:08:21:f5:7a:7b:12:84:72:d6:86:74:e0:b1:c2:
         22:68:d9:e1:c8:5c:23:ba:11:a2:25:88:95:3a:e6:2f:a8:af:
         8c:19:b1:7f:ee:86:bc:54:8f:e1:8b:fb:48:c9:68:b4:f5:3b:
         61:06:53:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FTxBRVpF8zhWawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
MDI2OTZmZjQtOGIyMy00MmM4LWFmNjEtNDc1OTcxODk2MDc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMLo1vrDk4Ky+X5RvH8VKPZbMxgC5ohiXEYZ
lIm1Nt7H30kMCb7wrhl1dMVtM2Qwf3Iiwsjk9rMD2OplkD3VP6KpqTsfthRTs8ka
qHNxuipeSZ87185lxcw4qIIVXvJ+mov5z96E46Hp8kuhEJCt5QiShCR1GWCcDnYU
PSp5TKh4xhh9uxLNSSKU2Sch8zw8Vt6ndDN3Ou4AlhNLKshUt7r91j+9kkRhLPBO
C9C2KMin1G6Q0r5YHkYcz4R4zJqTlTo+hG0LOHeCGN2Ec7i3qHFUc1GFI/lxupoD
Msd65QzsM0iMCg0NvUOdFzy87KhROhUFMXrQ2KIyAC2kRICXYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNxIRpC2Dz314hIVtR0N/T6azt4dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzhmZjZiYjAtMTMyZi0z
MmI2LTg1ZTItMGE4OWNkNzU3MTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuB0nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5TDtYvMm8z9y3iY/uGbv8yqwZaL70PGEGJMVnbHe8w+/e/vh2xCMQJ
iqXwMYYnoclA/zXYuZp5F9Q4Tz/MLBott44Y5XRTIHT7a7dhKFqTL6i5NTmd8G+p
9WfGKQAfHYSCj5asnvH9OuvllNkC2IZ7bVk7DkT0tCeaUMOcf2MTnDUM0vcVk4nw
624ZDCgV7E0WD54nu/45TOyvO+pfeIA7GN+dGRdU4Z5nspNbESqWt9Xxaffrk2Wg
evwcVEP1hz9SXBl9PadX6g0IIfV6exKEctaGdOCxwiJo2eHIXCO6EaIliJU65i+o
r4wZsX/uhrxUj+GL+0jJaLT1O2EGUy8=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:48 2025 by rpki-client