Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35da6f66-6d8e-3e4a-bca0-c50058f11459.roa
File:                     35da6f66-6d8e-3e4a-bca0-c50058f11459.roa (raw, json)
Hash identifier:          QVJp4qOrnKmr3xKRofUYltc6DbKDfLEqR5sClT1+2tk=
Subject key identifier:   9C:6E:BB:81:A3:08:7A:15:A2:C6:B6:A1:B5:90:09:4D:1A:C9:74:1A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926B8BA3D0FCC59069FA0D4
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35da6f66-6d8e-3e4a-bca0-c50058f11459.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     22890
IP address blocks:        184.105.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:b8:ba:3d:0f:cc:59:06:9f:a0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=0d0c0e29-cb84-41f5-8d91-c0188b665e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:22:f9:a4:b1:30:84:e9:9e:8a:b0:6a:4b:
                    bf:dd:36:68:aa:01:f2:5a:fd:a5:dd:33:df:17:db:
                    71:19:82:d3:1e:4f:e7:15:0c:19:23:07:cb:b9:29:
                    9a:f3:62:8b:ca:61:f8:f3:57:52:86:8c:cc:63:a0:
                    c0:2d:3f:3b:bc:59:b6:a5:cc:68:48:68:c9:f0:9b:
                    0f:a9:de:b9:d7:96:4c:96:bc:6f:08:e5:bb:87:a3:
                    a1:44:f3:75:7c:ae:57:ab:3b:3f:18:39:14:fc:ed:
                    b6:db:e3:f0:6a:cf:b2:ca:9e:14:4f:21:30:aa:ad:
                    8c:11:39:ba:cd:74:67:85:8d:e7:eb:06:b4:23:7f:
                    a8:a5:41:0e:bf:7a:86:2c:cb:0f:ec:13:ed:02:63:
                    3f:f6:06:f3:9b:ed:09:af:56:d5:f3:59:68:2c:bc:
                    88:6f:00:1d:84:fa:5b:e9:c1:bb:17:b8:33:d0:95:
                    08:3a:32:fb:4a:86:71:56:fb:51:84:c4:5a:aa:34:
                    a1:6b:da:fb:04:68:7d:c0:cc:03:67:84:c1:af:a3:
                    02:a1:a1:39:3b:7c:c7:c7:c9:d6:90:1b:f4:51:cb:
                    f6:4c:9c:87:94:7b:61:d1:ca:a3:4c:eb:30:d4:2a:
                    91:85:92:38:02:c0:1b:ad:71:ad:91:0c:db:71:86:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6E:BB:81:A3:08:7A:15:A2:C6:B6:A1:B5:90:09:4D:1A:C9:74:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35da6f66-6d8e-3e4a-bca0-c50058f11459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f5:7a:ef:5f:0a:43:50:4f:9f:6f:09:ff:d0:83:67:0f:46:
         e1:72:3b:7b:fe:0c:97:36:2a:8d:aa:fb:36:98:fe:70:3a:40:
         4a:3d:86:a6:aa:6b:10:5e:c6:ef:1a:68:a2:23:41:55:12:e2:
         61:d2:6a:2b:61:07:cf:b6:e0:15:fb:a0:cd:12:d6:ff:67:7f:
         89:ed:1d:69:97:ea:55:24:9e:3d:e3:33:00:4d:58:e2:5d:38:
         89:be:e9:7d:9a:f2:74:cf:6f:26:97:6f:e4:c6:6b:8b:cd:a3:
         d1:d2:34:dd:03:b6:63:e1:3e:98:d3:b5:1b:bc:cc:f1:80:ec:
         9e:ab:57:ec:34:fd:fd:d8:1e:9c:cb:db:f4:4d:a8:1b:ad:22:
         33:23:c5:f3:b8:7f:2e:32:c2:23:5d:3c:2d:6f:66:38:40:ba:
         eb:9f:3b:8d:bf:c8:34:21:68:07:62:6d:4a:5a:1b:2f:95:0b:
         f1:7a:55:29:11:7b:fb:b8:20:73:49:9d:ab:7d:e2:7f:c8:ef:
         6d:3e:e1:74:e9:cc:be:d8:1c:e1:5d:ec:0e:cb:81:ac:e1:ed:
         b3:13:99:65:80:98:52:bd:94:bd:b3:71:70:04:97:7b:3f:5a:
         9d:bc:0c:ae:f9:22:91:96:97:52:ba:d1:6f:de:d6:8e:ac:95:
         44:bf:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:49:39 2025 by rpki-client