Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0bc3c8c-79f9-31ce-b8ea-9c0c706256f5.roa
File:                     b0bc3c8c-79f9-31ce-b8ea-9c0c706256f5.roa (raw, json)
Hash identifier:          1H9rHGo+Gs/1NRpnG5IgriGVpGMAf7mtsojlJfSCmBw=
Subject key identifier:   5F:03:E0:36:23:20:F5:99:C3:43:C1:54:33:0D:79:25:57:00:B9:ED
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849F7153A93E68EB47BFD3BFC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0bc3c8c-79f9-31ce-b8ea-9c0c706256f5.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     20940
IP address blocks:        184.25.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:3a:93:e6:8e:b4:7b:fd:3b:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=f0746dc3-90c4-4bfc-962b-a450715e16cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0c:fc:24:4a:f0:0e:d5:ab:6a:4c:9d:09:d9:
                    e2:1b:db:21:39:43:4d:65:19:3b:ba:00:48:d2:84:
                    24:80:a0:76:ee:83:00:b1:6a:8b:38:e7:78:11:0a:
                    85:68:72:29:e5:ba:47:2a:76:da:5b:83:9f:0a:6a:
                    c0:71:ce:cd:de:16:c1:d6:fd:fa:73:9d:84:74:ee:
                    df:de:e2:a3:1d:06:77:c7:c6:e5:77:15:ca:73:39:
                    24:e8:b5:5d:fe:41:84:dc:b9:c7:55:ce:76:ef:e1:
                    e2:55:51:9e:c4:0f:71:3a:2c:4a:73:91:70:ab:c1:
                    a4:00:e4:b5:8a:09:5a:e5:60:01:9d:fe:6d:2a:43:
                    13:3d:a0:27:00:e3:2a:e9:06:9d:7f:90:a4:2e:b9:
                    ce:17:a6:de:55:f9:dd:6b:4b:a9:1a:de:25:b5:82:
                    14:f8:f4:4d:0f:fa:62:4b:50:03:e6:17:3e:3d:fb:
                    8b:0f:a2:2f:c5:e5:b6:25:81:2d:43:67:e7:a9:a0:
                    ed:bd:9d:59:c8:0a:38:0d:05:34:cb:6b:1d:08:bc:
                    db:63:b0:c5:b6:ab:b0:76:e8:a1:f4:0d:36:bc:99:
                    fb:7d:f5:85:53:4c:dd:cd:f4:ca:56:81:40:fe:ed:
                    01:ae:06:83:a2:b0:5b:3d:55:dd:02:21:c5:96:eb:
                    0e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:03:E0:36:23:20:F5:99:C3:43:C1:54:33:0D:79:25:57:00:B9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0bc3c8c-79f9-31ce-b8ea-9c0c706256f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:e3:29:7b:fa:f2:bf:6d:b5:c8:47:a7:ae:ac:49:74:99:e3:
         ef:22:5a:92:20:20:57:51:c4:a4:e3:6f:bf:88:ff:86:d2:b0:
         07:93:97:16:3f:1a:7a:37:40:ce:74:bd:ba:bf:7d:5f:38:58:
         26:5b:a3:26:a5:d4:91:3c:cc:cd:a3:c1:26:7d:d2:11:08:4f:
         8e:b7:7a:5f:b0:0f:eb:a1:3d:cd:6b:d3:17:09:2c:e1:39:23:
         ff:58:b3:b9:50:e9:37:1f:f7:c3:74:ec:d3:a8:d4:e3:74:92:
         c5:43:48:3a:5a:69:d6:0f:fb:a5:39:37:ab:29:63:e1:0a:66:
         d6:ed:f9:f2:42:2c:fc:c4:59:ed:f2:e9:34:ae:32:56:63:a4:
         b8:4c:ba:9b:67:22:63:93:78:21:85:7d:a4:db:97:5f:19:89:
         b5:14:52:1c:0d:0e:d9:30:79:17:70:cb:00:ff:bc:88:2e:bf:
         6c:f0:02:36:c4:94:db:69:55:75:f4:42:fc:25:aa:c9:91:67:
         4f:03:8c:73:77:13:76:46:a6:86:2b:9a:ba:6a:e5:6e:e0:04:
         f9:9a:b8:b0:71:48:25:e2:8a:34:ec:e4:2e:9a:69:b7:89:cf:
         b5:4b:01:5c:f4:d8:6f:0e:cc:c7:e8:f5:c3:34:30:df:a1:9f:
         b4:bb:49:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FTqT5o60e/07/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk
ZjA3NDZkYzMtOTBjNC00YmZjLTk2MmItYTQ1MDcxNWUxNmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgz8JErwDtWrakydCdniG9shOUNNZRk7ugBI
0oQkgKB27oMAsWqLOOd4EQqFaHIp5bpHKnbaW4OfCmrAcc7N3hbB1v36c52EdO7f
3uKjHQZ3x8bldxXKczkk6LVd/kGE3LnHVc527+HiVVGexA9xOixKc5Fwq8GkAOS1
igla5WABnf5tKkMTPaAnAOMq6Qadf5CkLrnOF6beVfnda0upGt4ltYIU+PRND/pi
S1AD5hc+PfuLD6IvxeW2JYEtQ2fnqaDtvZ1ZyAo4DQU0y2sdCLzbY7DFtquwduih
9A02vJn7ffWFU0zdzfTKVoFA/u0BrgaDorBbPVXdAiHFlusOdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF8D4DYjIPWZw0PBVDMNeSVXALntMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjBiYzNjOGMtNzlmOS0z
MWNlLWI4ZWEtOWMwYzcwNjI1NmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBlyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEbjKXv68r9ttchHp66sSXSZ4+8iWpIgIFdRxKTjb7+I/4bSsAeTlxY/
Gno3QM50vbq/fV84WCZboyal1JE8zM2jwSZ90hEIT463el+wD+uhPc1r0xcJLOE5
I/9Ys7lQ6Tcf98N07NOo1ON0ksVDSDpaadYP+6U5N6spY+EKZtbt+fJCLPzEWe3y
6TSuMlZjpLhMuptnImOTeCGFfaTbl18ZibUUUhwNDtkweRdwywD/vIguv2zwAjbE
lNtpVXX0QvwlqsmRZ08DjHN3E3ZGpoYrmrpq5W7gBPmauLBxSCXiijTs5C6aabeJ
z7VLAVz02G8OzMfo9cM0MN+hn7S7Sb4=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:24:35 2025 by rpki-client