Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b777c1b0-6a6f-3cee-8d25-12bbe47fceaf.roa
File:                     b777c1b0-6a6f-3cee-8d25-12bbe47fceaf.roa (raw, json)
Hash identifier:          uUzjoi6F72DPBZM0GxHlNzhREHc3tmzIex5IPOwC6hM=
Subject key identifier:   24:8B:58:D5:F1:63:D3:FF:7D:C0:18:92:15:4F:E0:65:65:28:11:4B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A00DAD7EE120CF7647DE217F8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b777c1b0-6a6f-3cee-8d25-12bbe47fceaf.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     20940
IP address blocks:        184.28.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:d7:ee:12:0c:f7:64:7d:e2:17:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=264bfe2b-5e3a-4b31-bd86-676530ae0a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d2:cb:ad:72:f1:ca:3e:9f:4a:47:de:c7:db:
                    b9:b2:3c:b5:42:69:0a:17:6d:19:f3:7f:32:71:cd:
                    e1:19:61:43:6a:1d:99:c7:49:98:2d:c0:c7:64:d5:
                    bf:39:86:80:c5:2d:b6:d3:ca:0e:e6:2d:0c:9c:69:
                    03:08:83:53:1c:40:cf:8c:ee:1b:87:78:ac:a6:15:
                    0e:43:4c:96:3e:fc:81:d0:6f:3f:7d:33:9e:79:2a:
                    7f:76:44:7a:57:e3:9e:13:fd:aa:09:dc:6f:4b:8a:
                    a7:73:b0:33:6f:5e:78:fa:93:20:28:99:a2:3a:a0:
                    dd:93:f4:68:42:13:88:80:bc:c0:da:15:88:95:5e:
                    4f:83:97:7d:f9:91:c0:bd:53:1b:7b:b5:40:28:2d:
                    73:08:35:c5:83:a2:df:98:c9:da:de:85:3f:26:69:
                    01:0d:3b:a5:3f:f8:19:f6:db:e9:c2:23:85:24:ad:
                    c7:c7:4b:ad:fd:00:af:56:b6:b8:65:0a:36:78:b9:
                    8f:c0:68:98:a9:3f:c8:86:cc:b1:98:37:93:00:e0:
                    79:3e:10:a0:e8:33:69:14:1a:4c:83:ba:df:26:e6:
                    f4:cf:be:3b:28:d6:d9:d8:09:80:5d:04:6a:52:8a:
                    b5:20:45:51:9c:dd:dd:bc:37:a0:2e:6d:06:2a:f2:
                    d8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8B:58:D5:F1:63:D3:FF:7D:C0:18:92:15:4F:E0:65:65:28:11:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b777c1b0-6a6f-3cee-8d25-12bbe47fceaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:60:e4:27:19:67:bc:0d:c5:07:08:56:07:15:f8:d9:12:ea:
         b9:72:b7:b4:87:b7:f3:1d:a5:fe:5a:b4:41:bd:22:58:05:d5:
         65:f5:1a:90:a0:88:0d:69:4d:8f:05:19:f2:dd:88:15:bf:18:
         ab:ac:86:d7:40:35:62:76:4f:67:3b:6a:9c:db:07:75:7f:cd:
         18:04:44:43:7f:42:23:00:4a:9e:8d:54:16:31:96:ec:e1:36:
         48:46:2a:9d:50:fc:38:b1:f6:4c:ba:cb:5e:da:ba:84:55:c1:
         ca:00:02:67:33:bf:e2:d5:85:3a:9d:cf:c4:fd:a6:4d:41:e5:
         9f:31:a9:93:24:fb:ca:cc:c8:3b:26:0f:d1:e2:67:f9:b2:9b:
         94:b9:63:be:22:f6:39:83:61:ec:c2:8a:5e:96:b7:c1:94:f9:
         21:90:f5:de:8c:4b:b5:49:d6:58:0c:37:89:23:42:bc:3e:3b:
         0e:3e:c9:0c:cf:83:fa:42:05:5e:c2:3b:4d:0c:31:c3:ba:6c:
         4e:e9:65:15:3d:9b:a9:58:5e:7f:9c:57:ba:dc:f8:67:40:2c:
         3f:71:6c:45:d4:09:4b:e4:62:92:37:89:71:3d:2d:c2:ce:6b:
         dc:37:10:a5:c6:55:f2:16:7c:a0:ed:0b:f9:7d:f4:ed:ca:f5:
         35:01:6c:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2tfuEgz3ZH3iF/gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
MjY0YmZlMmItNWUzYS00YjMxLWJkODYtNjc2NTMwYWUwYTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59LLrXLxyj6fSkfex9u5sjy1QmkKF20Z838y
cc3hGWFDah2Zx0mYLcDHZNW/OYaAxS2208oO5i0MnGkDCINTHEDPjO4bh3isphUO
Q0yWPvyB0G8/fTOeeSp/dkR6V+OeE/2qCdxvS4qnc7Azb154+pMgKJmiOqDdk/Ro
QhOIgLzA2hWIlV5Pg5d9+ZHAvVMbe7VAKC1zCDXFg6LfmMna3oU/JmkBDTulP/gZ
9tvpwiOFJK3Hx0ut/QCvVra4ZQo2eLmPwGiYqT/IhsyxmDeTAOB5PhCg6DNpFBpM
g7rfJub0z747KNbZ2AmAXQRqUoq1IEVRnN3dvDegLm0GKvLY8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSLWNXxY9P/fcAYkhVP4GVlKBFLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjc3N2MxYjAtNmE2Zi0z
Y2VlLThkMjUtMTJiYmU0N2ZjZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBySMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAANg5CcZZ7wNxQcIVgcV+NkS6rlyt7SHt/Mdpf5atEG9IlgF1WX1GpCg
iA1pTY8FGfLdiBW/GKushtdANWJ2T2c7apzbB3V/zRgEREN/QiMASp6NVBYxluzh
NkhGKp1Q/Dix9ky6y17auoRVwcoAAmczv+LVhTqdz8T9pk1B5Z8xqZMk+8rMyDsm
D9HiZ/mym5S5Y74i9jmDYezCil6Wt8GU+SGQ9d6MS7VJ1lgMN4kjQrw+Ow4+yQzP
g/pCBV7CO00MMcO6bE7pZRU9m6lYXn+cV7rc+GdALD9xbEXUCUvkYpI3iXE9LcLO
a9w3EKXGVfIWfKDtC/l99O3K9TUBbFY=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:21:44 2025 by rpki-client