Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3c47ce84-5e75-321d-ba34-d84e3ac5a3d2.roa
File:                     3c47ce84-5e75-321d-ba34-d84e3ac5a3d2.roa (raw, json)
Hash identifier:          +I17aJSzHn0OddFuNLKk+oAESZ7hV10OsYk4f5DCcyM=
Subject key identifier:   AB:85:3B:6E:1D:65:EA:B7:E0:D5:93:52:1F:3C:0F:68:1F:6F:11:09
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926BF4B55EC7BD309331300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3c47ce84-5e75-321d-ba34-d84e3ac5a3d2.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     33083
IP address blocks:        184.105.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:bf:4b:55:ec:7b:d3:09:33:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=672a5f4b-acaa-4752-8cdd-08cb912aecec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:30:dc:21:99:44:cc:17:e9:48:9b:77:fe:
                    4b:a1:9e:4e:aa:22:55:7a:1d:23:3f:72:d0:4a:56:
                    e5:c7:20:e0:f2:ac:91:9e:db:6c:4c:c5:f8:07:e6:
                    72:b3:94:ed:eb:cf:56:e0:72:a8:de:4d:bb:70:d8:
                    37:2f:d5:88:8d:60:c5:0e:3c:44:21:60:32:3f:d3:
                    ae:63:5b:19:68:f9:89:0f:de:ae:9c:d6:91:06:d2:
                    ed:a1:95:0c:f5:1c:2b:41:0c:0f:19:f0:26:bb:27:
                    4f:31:51:87:ac:9f:af:49:31:62:cc:66:44:43:e6:
                    33:93:2a:52:9e:fe:9c:53:a4:b7:a7:24:8b:5d:db:
                    03:29:35:e1:c9:e5:1f:ae:28:e2:59:a8:31:7b:05:
                    27:d6:ae:91:aa:6d:c7:9f:03:ca:1b:a8:02:be:6e:
                    d1:d9:af:1e:ec:36:fb:cb:5b:bd:48:4e:79:c1:a4:
                    34:93:71:80:fd:e4:53:02:8e:62:a7:b6:ca:fd:58:
                    03:c2:c2:f6:5e:73:f0:4e:de:59:9c:ab:12:c9:e0:
                    40:79:0a:c0:49:3e:2f:8c:fa:3d:58:73:05:07:76:
                    0a:a2:fe:5e:06:96:4a:38:e4:2d:25:5c:e9:67:7a:
                    5f:c5:09:f3:c4:af:c8:1f:71:07:42:be:7c:65:ce:
                    1f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:85:3B:6E:1D:65:EA:B7:E0:D5:93:52:1F:3C:0F:68:1F:6F:11:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3c47ce84-5e75-321d-ba34-d84e3ac5a3d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5d:06:07:32:81:b2:4a:6c:4f:d1:94:f0:13:45:d3:e1:16:
         31:a9:f8:4d:69:e2:fd:70:59:fa:e3:61:87:1f:b0:0c:b1:8b:
         76:d4:da:ed:c7:d9:84:3b:3c:8b:48:f5:7e:00:2a:51:22:b5:
         ad:a1:32:14:91:61:dd:c4:18:89:13:ce:b1:aa:9d:fa:1c:2a:
         ab:df:b1:6c:2b:0f:a4:27:d3:dd:fe:98:84:fe:94:ed:f2:15:
         ac:93:1e:cf:e6:76:e1:fc:a9:73:9c:f3:90:f3:6b:9e:57:bf:
         54:fa:5c:3c:a9:e8:4d:54:d4:cc:92:2e:ec:f5:28:eb:66:22:
         1e:a6:eb:04:72:83:3b:f8:37:f1:75:2d:62:d8:5e:ea:f8:70:
         4e:b5:87:55:88:70:79:25:e5:44:b4:e9:dc:89:34:70:30:ca:
         9a:34:ba:9d:c5:d0:f5:5e:42:9c:36:a8:39:26:d4:83:22:93:
         67:95:ad:f0:4a:7e:da:32:f3:59:1c:df:fc:34:e9:bd:ff:8c:
         48:5d:1d:89:8a:87:cf:be:43:47:e9:04:e9:ce:73:62:ff:bc:
         25:1f:46:65:fd:d6:57:2d:9d:cb:97:97:13:64:e4:78:1e:5e:
         96:cc:70:25:9b:6c:5f:cf:74:bc:34:dc:03:67:e7:bd:c6:e7:
         67:5e:d1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:52:17 2025 by rpki-client