Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af39ce4-8abb-389e-b83a-f20b8f910a20.roa
File:                     3af39ce4-8abb-389e-b83a-f20b8f910a20.roa (raw, json)
Hash identifier:          XmyQiPqQi6V97yjiL5PpIawbdf4pyb55Hrwj+zpnUps=
Subject key identifier:   EC:45:50:13:BB:3E:BA:07:71:68:AA:FF:49:CC:27:14:E7:92:B5:56
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926BACCF8CB4AD1EF8E1440
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af39ce4-8abb-389e-b83a-f20b8f910a20.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     394996
IP address blocks:        184.105.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:ba:cc:f8:cb:4a:d1:ef:8e:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=08e32304-cd2b-4182-8836-f8e03e8e76ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:62:34:c9:8e:5b:c7:60:4f:a2:a6:0d:94:5f:
                    fc:c9:0c:9e:2b:af:92:34:a5:e5:89:70:85:95:6b:
                    f4:fb:aa:15:f2:9a:e5:45:54:6f:03:3e:1e:83:ae:
                    08:0e:ab:7c:d7:28:99:13:7b:ba:2a:38:95:f3:a3:
                    78:a6:80:c8:5d:1e:79:88:b9:4d:13:de:91:33:b7:
                    c9:fd:fd:94:91:02:c6:47:13:89:14:02:9a:11:ae:
                    29:fc:79:11:f7:fa:b3:90:0a:24:ed:22:91:69:9a:
                    c8:77:06:26:92:18:9a:02:f9:da:57:f5:a2:4a:f6:
                    96:af:dd:ca:74:6f:06:c4:1b:97:20:ba:0b:5c:3c:
                    bd:be:2f:d8:bd:cb:bf:5d:93:d8:a8:f6:11:9f:3d:
                    1a:8f:e0:52:2f:8c:47:9a:fa:8a:27:37:14:dc:18:
                    0c:56:25:e8:50:81:d8:b7:23:bd:eb:ca:7c:6b:f4:
                    49:b2:5a:54:05:ba:92:48:38:08:e9:98:67:7a:c8:
                    b0:ac:43:41:87:f6:6f:82:85:08:69:a5:e0:64:70:
                    e8:d6:67:eb:90:c6:b6:bd:ed:1c:5d:bf:46:a4:72:
                    29:e0:14:bc:c0:37:a6:b8:4d:06:1c:9f:58:91:9c:
                    6f:8b:2a:1b:16:9f:f3:1a:4b:83:0a:a0:74:1e:73:
                    00:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:45:50:13:BB:3E:BA:07:71:68:AA:FF:49:CC:27:14:E7:92:B5:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3af39ce4-8abb-389e-b83a-f20b8f910a20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:4c:f3:70:81:cf:52:a4:d3:d5:6c:fb:2f:a5:87:c0:79:13:
         87:43:51:06:7c:eb:a6:52:70:f1:1b:cc:d8:b4:47:90:45:d4:
         47:e2:cd:19:17:d8:57:ac:51:fd:90:99:1b:ac:3c:6a:d6:c5:
         4f:57:aa:03:ac:65:04:d3:3d:04:58:62:b4:f6:9b:96:61:c1:
         32:0c:29:86:52:cf:e2:f5:dc:5c:49:2b:47:86:98:47:30:e8:
         d6:5d:57:9c:fc:10:9f:79:24:48:72:60:f0:b6:f6:55:2b:f6:
         3a:ee:3c:b1:1d:d3:40:e1:01:32:47:0b:a7:ef:ff:1d:15:67:
         b0:5b:70:0a:71:18:3e:2f:d8:f9:67:eb:de:94:51:db:cf:1d:
         7d:2e:1f:b7:b0:d2:1a:8a:6d:14:f7:f2:86:f1:c2:fd:f0:9b:
         81:2d:c9:70:df:b5:0f:c7:b2:0a:50:97:b7:bb:5e:98:fa:e4:
         08:6f:ca:e8:a3:93:df:f5:4b:29:de:70:ad:21:05:6a:bc:1a:
         67:4e:80:29:04:d1:0b:e9:3d:ad:a7:28:34:3e:82:d5:fb:44:
         27:21:3f:be:3e:7e:b0:28:7d:80:e7:b8:ce:ae:51:0f:dd:4f:
         dd:75:c0:56:2f:f3:ce:fe:34:96:ab:6f:26:ee:29:bd:84:b7:
         04:36:36:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:49:39 2025 by rpki-client