Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fbaf148-8bb3-35e4-a8bb-b5b3947ee81e.roa
File:                     9fbaf148-8bb3-35e4-a8bb-b5b3947ee81e.roa (raw, json)
Hash identifier:          TCkk43a3oNz1cFRWdE7fAArabCfzVW0zP8guuO0X2aM=
Subject key identifier:   2C:9A:5B:98:B1:2E:7C:B6:D5:C4:DE:BD:F6:60:5B:B9:0B:50:D2:58
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B41D1C4A8C1D4333BB980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fbaf148-8bb3-35e4-a8bb-b5b3947ee81e.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     396026
IP address blocks:        184.105.198.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:41:d1:c4:a8:c1:d4:33:3b:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=eff62ba9-db26-439e-925a-1fdeb3af1706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:33:f5:b9:12:29:39:dc:4a:c4:7f:5b:86:
                    39:92:f2:2e:69:66:b8:47:03:01:bd:9b:92:60:a6:
                    75:76:4e:35:a5:79:ff:87:d2:0e:46:78:d5:f1:96:
                    c7:39:3d:20:ce:b2:82:0f:d7:8b:e3:3b:8b:74:35:
                    12:28:74:16:48:70:ff:34:4f:e4:e9:d0:cd:d9:a9:
                    a2:18:21:3b:ee:3c:6b:62:a3:fb:f3:d2:67:19:48:
                    9d:54:a8:5d:39:f9:59:0a:ce:ef:96:7a:14:e9:93:
                    92:18:01:5a:9b:44:27:6d:6e:7d:cb:a8:c8:c2:84:
                    75:51:bb:1d:64:57:7c:9d:9e:b8:2f:1f:17:65:f0:
                    8c:49:4d:69:89:6c:9e:30:38:34:cc:c4:f1:9c:f9:
                    99:81:ca:4c:e4:04:33:f0:d6:45:52:d9:53:63:d5:
                    5e:c4:24:5d:1a:af:3d:c4:75:bf:c9:1f:14:15:cb:
                    09:e7:d3:23:a4:b6:94:46:18:71:93:f9:05:74:33:
                    c0:52:46:e8:38:52:e0:6f:0e:11:41:65:16:f2:b9:
                    0a:2c:e3:59:cc:49:fc:d7:a9:84:78:63:73:ad:23:
                    ee:90:50:fb:5e:0a:db:22:96:45:5b:0a:0d:b0:c8:
                    06:74:d0:56:51:ba:f3:c8:9d:6b:23:c8:19:fb:71:
                    45:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9A:5B:98:B1:2E:7C:B6:D5:C4:DE:BD:F6:60:5B:B9:0B:50:D2:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fbaf148-8bb3-35e4-a8bb-b5b3947ee81e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f0:a6:e4:59:0a:e7:bf:41:5a:e4:fd:95:f4:21:03:f4:6d:
         5d:28:05:9d:4e:9e:56:1e:d2:45:2b:ac:60:ec:d8:83:c9:c5:
         86:79:62:37:3d:21:61:5a:f4:96:2f:25:0e:41:15:4e:88:45:
         83:17:db:fe:ef:15:99:09:21:22:56:4c:ac:fd:2c:03:9a:a4:
         c2:79:99:5a:b3:24:5e:86:37:47:7f:df:6e:ac:69:8e:eb:2b:
         c1:b9:85:c7:93:27:c2:96:f3:b4:2f:02:a8:17:b0:33:26:00:
         9e:01:3f:9a:93:0a:a3:82:e5:05:00:e4:15:56:cf:4e:bf:2d:
         96:f2:b4:13:77:b0:37:99:24:ed:81:77:e2:83:6a:fb:73:fb:
         aa:9a:46:e3:8b:15:58:3f:8c:96:29:97:d1:47:1b:82:ec:1f:
         e0:f1:aa:bf:c6:a2:40:ce:74:9e:67:36:73:67:d9:83:27:21:
         ef:e1:8d:b0:8e:ce:e9:61:fa:f4:d8:51:f5:96:0d:b8:4c:42:
         9d:41:bb:df:53:2c:61:5c:a3:c5:2a:3c:ee:e9:58:e1:f7:9a:
         74:c1:60:fd:ed:77:e0:d6:3d:20:0c:1a:a3:99:4a:6a:c1:28:
         d3:09:a2:a5:46:1f:41:36:f0:06:ea:52:fb:f1:5b:23:bc:d8:
         6c:3a:1d:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc6W0HRxKjB1DM7uYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDkxNjAxMDAyOVoXDTI0MTIxNTAyMDAyOVowLzEtMCsGA1UEAxMk
ZWZmNjJiYTktZGIyNi00MzllLTkyNWEtMWZkZWIzYWYxNzA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQoz9bkSKTncSsR/W4Y5kvIuaWa4RwMBvZuS
YKZ1dk41pXn/h9IORnjV8ZbHOT0gzrKCD9eL4zuLdDUSKHQWSHD/NE/k6dDN2ami
GCE77jxrYqP789JnGUidVKhdOflZCs7vlnoU6ZOSGAFam0QnbW59y6jIwoR1Ubsd
ZFd8nZ64Lx8XZfCMSU1piWyeMDg0zMTxnPmZgcpM5AQz8NZFUtlTY9VexCRdGq89
xHW/yR8UFcsJ59MjpLaURhhxk/kFdDPAUkboOFLgbw4RQWUW8rkKLONZzEn816mE
eGNzrSPukFD7XgrbIpZFWwoNsMgGdNBWUbrzyJ1rI8gZ+3FF6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCyaW5ixLny21cTevfZgW7kLUNJYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWZiYWYxNDgtOGJiMy0z
NWU0LWE4YmItYjViMzk0N2VlODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuGnGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjwpuRZCue/QVrk/ZX0IQP0bV0oBZ1OnlYe0kUrrGDs2IPJxYZ5Yjc9
IWFa9JYvJQ5BFU6IRYMX2/7vFZkJISJWTKz9LAOapMJ5mVqzJF6GN0d/326saY7r
K8G5hceTJ8KW87QvAqgXsDMmAJ4BP5qTCqOC5QUA5BVWz06/LZbytBN3sDeZJO2B
d+KDavtz+6qaRuOLFVg/jJYpl9FHG4LsH+Dxqr/GokDOdJ5nNnNn2YMnIe/hjbCO
zulh+vTYUfWWDbhMQp1Bu99TLGFco8UqPO7pWOH3mnTBYP3td+DWPSAMGqOZSmrB
KNMJoqVGH0E28AbqUvvxWyO82Gw6HXo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org