Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af2ece0c-9de5-308b-9ee0-c07fac0bd72b.roa
File:                     af2ece0c-9de5-308b-9ee0-c07fac0bd72b.roa (raw, json)
Hash identifier:          JziiHZCFuluWTulhNOaquE26RrzMXkFJdL++htUhXRo=
Subject key identifier:   C2:F6:68:04:60:D8:59:A2:19:D0:4B:7C:6B:2D:AE:3E:F0:AC:B8:35
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849393E8460027742B13ECB7600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af2ece0c-9de5-308b-9ee0-c07fac0bd72b.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     210805
IP address blocks:        184.105.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:84:60:02:77:42:b1:3e:cb:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=a85a6a0d-b983-45e6-92a2-3867c46718bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b2:fb:d8:ff:7a:30:1a:ec:8d:46:87:a5:ab:
                    b8:8b:fc:4d:5d:3a:7c:06:4b:7f:d0:19:4e:1c:16:
                    14:8c:12:84:cf:d4:df:0f:5f:90:42:f3:3a:13:fd:
                    a5:53:2b:b9:99:9b:0e:34:ce:7b:1b:23:0f:36:0e:
                    bf:ac:d8:fe:5b:22:cc:84:6a:78:e2:e6:4a:54:d7:
                    c3:90:b3:1b:69:c3:62:b0:01:59:ab:d1:8c:b9:9e:
                    05:a0:96:f5:3a:b4:2e:5e:40:1e:1f:55:76:25:6c:
                    0e:d9:5e:c2:ea:5f:5e:cf:fb:7c:59:86:b2:8b:ef:
                    03:6a:92:25:b9:70:b8:dd:94:33:b4:90:87:65:85:
                    8c:c5:bb:43:45:ed:06:c7:68:18:a4:b9:58:b7:e2:
                    9d:69:82:19:d8:f7:40:4c:c2:6b:83:de:c1:82:d0:
                    65:54:9f:1b:53:cf:76:93:a1:42:75:ce:07:a0:80:
                    fc:8e:5b:39:1a:be:48:82:15:88:b1:ea:27:c9:4a:
                    e4:c8:29:35:2f:b6:11:3a:fe:f3:65:a1:e4:a6:ed:
                    d0:3d:ea:ee:50:00:e1:d1:72:46:69:e3:f4:26:6e:
                    5e:bf:2f:e7:7d:3c:ff:de:34:85:33:c1:4c:5e:09:
                    40:07:8f:0d:c7:78:48:78:eb:71:54:94:a4:03:26:
                    b9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F6:68:04:60:D8:59:A2:19:D0:4B:7C:6B:2D:AE:3E:F0:AC:B8:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/af2ece0c-9de5-308b-9ee0-c07fac0bd72b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:69:41:d6:6c:4a:21:ec:39:87:ee:2b:0c:07:e6:ab:b6:00:
         f6:11:25:36:8d:b2:0b:b9:50:e9:63:26:3e:bd:3b:fa:46:0b:
         8e:fc:ed:cf:42:e2:37:50:4c:e4:66:3b:19:ee:88:8e:7c:01:
         20:c6:6a:db:d9:3c:99:f3:83:ea:65:85:5d:1e:ed:e3:f1:09:
         12:08:b3:c1:55:bb:ee:8d:2e:da:f1:83:70:fc:4d:a2:90:5a:
         4b:e8:25:ee:1b:91:f6:44:b0:92:7f:8c:e9:6c:99:c0:ba:00:
         d1:a4:df:d5:b7:94:6b:95:cf:5f:d3:ad:c5:90:4b:c1:f8:de:
         8f:4d:0b:cd:7f:fb:f4:be:15:00:9e:8d:d7:e2:cf:af:ac:9d:
         25:14:bd:73:b6:e5:84:0f:54:7f:12:a1:87:6f:da:ae:79:a0:
         41:86:c3:db:66:6b:a0:a6:c5:5b:22:c3:dc:a2:9d:06:a2:0a:
         ce:e5:78:cc:36:3d:2d:bb:18:e3:18:11:fe:d4:55:1b:76:31:
         0a:ba:f9:f9:a1:f4:92:85:63:19:d5:81:df:9f:39:6a:5c:59:
         43:a2:1c:17:1c:02:52:0d:6a:76:3e:9a:2d:de:4b:85:56:97:
         b5:d1:2b:66:5f:2a:81:2a:4f:fd:9b:25:d2:34:0a:67:18:e6:
         c2:dc:c9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:43:20 2025 by rpki-client