Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fbaf148-8bb3-35e4-a8bb-b5b3947ee81e.roa
File:                     9fbaf148-8bb3-35e4-a8bb-b5b3947ee81e.roa (raw, json)
Hash identifier:          6xJlNE4TwXOyploEHxAdaP7/mPRNs2gg/g9y+Fes5TA=
Subject key identifier:   3F:79:DB:E6:24:DE:1C:4F:60:4A:8D:76:7A:0D:DA:36:B2:4A:AB:8C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926BB3961FD268B31F466F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fbaf148-8bb3-35e4-a8bb-b5b3947ee81e.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     396026
IP address blocks:        184.105.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:bb:39:61:fd:26:8b:31:f4:66:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=1a1c3015-c6e2-41d2-9aa0-95b4e75e05c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:d1:52:e1:61:19:67:0d:02:2c:81:38:06:
                    5d:2b:ad:ab:a0:de:ca:25:09:5b:42:36:f5:43:6e:
                    8f:57:9e:4c:64:dc:66:b4:b3:97:4d:8f:92:cc:2e:
                    d4:71:5b:c7:46:0d:3b:28:6f:7e:13:19:69:c6:6d:
                    82:f2:d8:07:1b:f1:a5:b1:b5:b4:c4:fe:42:67:7e:
                    ff:67:a8:bb:ba:b3:48:97:99:35:ff:53:5e:ea:8c:
                    35:87:e6:97:ef:0b:67:db:cf:60:88:2e:dd:f5:63:
                    9e:67:cd:b1:32:dc:d6:ca:4f:79:33:05:20:f0:46:
                    49:8b:ad:42:d2:a0:6a:aa:52:d4:cc:5b:c4:ca:f8:
                    81:df:7a:aa:0d:17:ec:73:72:0d:77:2c:6e:b7:15:
                    97:e5:ef:10:c3:22:af:68:16:20:ad:16:ca:8a:31:
                    5d:ce:ca:18:3a:05:90:71:b3:9f:2f:16:1f:01:54:
                    30:ca:28:16:58:d3:db:ef:cc:6f:54:13:47:73:43:
                    f7:c8:b8:4c:c2:fe:c8:9c:c4:49:50:14:31:13:05:
                    ee:3e:ff:fc:d3:4a:59:6c:8b:f6:ae:06:c8:dd:49:
                    59:99:60:3d:8a:53:5b:63:7c:2a:e6:52:7a:60:31:
                    bc:30:63:09:35:84:89:c8:86:06:84:c2:b1:7d:11:
                    da:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:79:DB:E6:24:DE:1C:4F:60:4A:8D:76:7A:0D:DA:36:B2:4A:AB:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fbaf148-8bb3-35e4-a8bb-b5b3947ee81e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:ff:43:40:8f:0e:8c:b7:c1:9b:da:e3:3c:c7:ae:36:f1:f7:
         bb:03:6c:41:c6:a2:b8:d6:23:5b:c9:4b:89:e8:be:74:b3:0c:
         ed:f8:24:f7:49:37:8e:de:23:ab:f4:8d:63:ac:68:45:99:5c:
         cf:ed:c7:00:47:e0:46:96:be:77:b9:81:e3:4b:c5:8c:b1:cb:
         db:43:91:37:90:1a:3b:3b:63:c9:58:ee:59:e9:56:6a:71:e7:
         52:7e:c0:87:92:6b:a7:04:15:81:9b:26:ff:7b:bf:55:56:3b:
         5f:e4:73:2d:a1:9d:98:f7:95:43:c2:d7:1c:c2:f0:c0:31:fc:
         e2:aa:bb:80:dd:61:51:d1:a9:53:7a:02:08:de:e4:7e:89:1a:
         69:d4:4b:d1:bb:e2:cc:cf:8e:76:37:78:af:5e:d2:9a:15:a1:
         03:b6:6a:5f:d3:b7:6b:80:8c:9a:c1:d0:0f:3d:98:e1:9c:64:
         c3:6b:7c:ea:52:eb:78:70:c9:ac:c7:5e:87:98:dc:ec:dc:65:
         d7:3b:96:6a:fd:fa:25:ab:90:67:db:35:78:36:93:ed:4f:55:
         91:1d:b3:c5:81:33:2e:19:a4:7f:29:89:09:08:11:cf:ce:34:
         0e:16:b7:cd:56:21:f2:a0:9b:49:a3:70:aa:a4:93:15:54:46:
         50:54:94:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:49:37 2025 by rpki-client