Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73406ffe-11a5-34a5-a89e-cbddac30edfc.roa
File:                     73406ffe-11a5-34a5-a89e-cbddac30edfc.roa (raw, json)
Hash identifier:          p5MD55teX5ixIMqveo+924fOYrC7zwJ8/58L1olqn7A=
Subject key identifier:   1D:13:20:A1:37:F1:F6:F8:B1:CE:EB:76:06:1D:00:E3:14:E7:89:B4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926BB44C35F345D654D5EA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73406ffe-11a5-34a5-a89e-cbddac30edfc.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     396026
IP address blocks:        184.105.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:bb:44:c3:5f:34:5d:65:4d:5e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=dc00400b-905c-46de-ab9d-6308caf56e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:dc:8c:aa:fc:b0:c6:83:d7:03:61:a5:86:
                    08:d9:db:d1:4c:4a:4b:68:27:97:18:6c:37:86:41:
                    14:ff:5e:0f:82:b2:69:6e:67:ba:a6:97:13:2d:7f:
                    54:88:a3:36:05:ad:a3:7a:3b:89:9d:5f:43:15:8b:
                    4c:01:83:d5:01:72:e9:74:23:8d:4b:2d:2d:ec:38:
                    8c:21:09:0c:e8:48:55:12:94:82:54:e5:56:4a:19:
                    de:c1:13:2e:ef:f1:7b:7f:db:c5:c3:4b:ed:ac:a7:
                    04:92:c1:b0:78:a4:13:7b:59:46:eb:70:4a:95:02:
                    d3:a0:2c:33:97:49:e4:74:c4:d4:29:e3:81:d1:c4:
                    bb:18:11:e5:26:a8:73:0b:73:79:98:56:85:3d:a0:
                    d7:c7:b2:f2:61:16:f6:da:41:a9:33:09:e3:be:06:
                    87:09:e9:09:ff:9e:b3:d1:61:37:84:04:f6:47:d0:
                    f0:d7:76:e4:5f:bb:03:c9:bc:f4:22:2c:f6:29:63:
                    a3:89:5e:3c:17:16:97:db:b5:b6:8b:36:75:ff:88:
                    09:6c:a9:76:fa:25:77:92:69:7a:bd:5c:5b:e9:c1:
                    af:65:68:3c:32:aa:01:03:c3:95:d3:30:70:00:fc:
                    83:44:5e:82:c0:67:8d:89:49:9b:83:0d:94:96:56:
                    a2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:13:20:A1:37:F1:F6:F8:B1:CE:EB:76:06:1D:00:E3:14:E7:89:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73406ffe-11a5-34a5-a89e-cbddac30edfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d3:fe:1b:b4:45:e2:b3:f6:1c:07:3b:bd:91:65:1d:9c:21:
         de:e8:96:8f:ab:1d:f5:f9:33:1a:57:a5:77:55:21:f9:fa:fb:
         e7:e1:4e:f0:75:85:fc:c1:ac:b9:e5:83:60:96:e8:f3:76:44:
         3a:7a:99:05:c3:0c:9a:73:28:ce:07:ce:b5:ad:3b:0d:fb:24:
         ca:b4:8c:cd:15:50:9b:02:ff:65:80:91:04:96:f6:cd:f5:11:
         c4:88:d7:86:cc:4b:c8:83:4f:5c:db:7a:44:cd:7c:df:02:02:
         21:49:b1:cc:97:5c:a1:cb:eb:65:73:15:7d:e5:cd:45:4c:3a:
         49:74:1a:7b:8e:b2:64:39:36:e5:bb:6c:82:02:56:f8:78:57:
         4c:77:d7:91:83:a9:e7:e8:f7:26:93:49:9c:79:26:20:eb:d9:
         50:02:8c:ba:a7:4b:a7:8d:5e:30:1b:b2:86:b2:cb:99:c5:b6:
         a7:01:24:e2:22:86:1c:3d:8b:46:2b:a0:c6:3f:90:c0:7b:13:
         43:91:c6:34:ed:d9:c5:04:52:e4:62:13:3a:ad:e1:8a:0d:b6:
         8d:a4:9b:13:98:cd:f2:60:02:59:b6:d6:fc:d0:87:9d:a3:48:
         00:e5:8d:81:12:72:c0:73:8b:77:a9:2a:da:eb:cf:96:17:5a:
         02:6a:4c:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JrtEw180XWVNXqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZGMwMDQwMGItOTA1Yy00NmRlLWFiOWQtNjMwOGNhZjU2ZTNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/7cjKr8sMaD1wNhpYYI2dvRTEpLaCeXGGw3
hkEU/14PgrJpbme6ppcTLX9UiKM2Ba2jejuJnV9DFYtMAYPVAXLpdCONSy0t7DiM
IQkM6EhVEpSCVOVWShnewRMu7/F7f9vFw0vtrKcEksGweKQTe1lG63BKlQLToCwz
l0nkdMTUKeOB0cS7GBHlJqhzC3N5mFaFPaDXx7LyYRb22kGpMwnjvgaHCekJ/56z
0WE3hAT2R9Dw13bkX7sDybz0Iiz2KWOjiV48FxaX27W2izZ1/4gJbKl2+iV3kml6
vVxb6cGvZWg8MqoBA8OV0zBwAPyDRF6CwGeNiUmbgw2UllaiFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0TIKE38fb4sc7rdgYdAOMU54m0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzM0MDZmZmUtMTFhNS0z
NGE1LWE4OWUtY2JkZGFjMzBlZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuGnIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADnT/hu0ReKz9hwHO72RZR2cId7olo+rHfX5MxpXpXdVIfn6++fhTvB1
hfzBrLnlg2CW6PN2RDp6mQXDDJpzKM4HzrWtOw37JMq0jM0VUJsC/2WAkQSW9s31
EcSI14bMS8iDT1zbekTNfN8CAiFJscyXXKHL62VzFX3lzUVMOkl0GnuOsmQ5NuW7
bIICVvh4V0x315GDqefo9yaTSZx5JiDr2VACjLqnS6eNXjAbsoayy5nFtqcBJOIi
hhw9i0YroMY/kMB7E0ORxjTt2cUEUuRiEzqt4YoNto2kmxOYzfJgAlm21vzQh52j
SADljYEScsBzi3epKtrrz5YXWgJqTBg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:02 2025 by rpki-client