Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7d74f97-fa96-38eb-a256-5877a31b8121.roa
File:                     d7d74f97-fa96-38eb-a256-5877a31b8121.roa (raw, json)
Hash identifier:          qeLVcfsvrOYDYYR9B3ZauZzwGEye+21+KZF0N560hF0=
Subject key identifier:   91:0E:F9:5D:23:4F:3E:29:63:D9:7E:1E:5B:7C:D1:AB:37:C0:5D:8A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848F926E5F1C014CB0CFD9A6C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7d74f97-fa96-38eb-a256-5877a31b8121.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     393552
IP address blocks:        184.105.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:e5:f1:c0:14:cb:0c:fd:9a:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=232607fe-3b02-4248-93a5-08b36e750c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:11:a3:d2:6a:b8:b2:51:7c:40:cb:8a:f5:
                    2f:ae:98:0f:55:4b:94:68:9b:ac:8f:dc:10:5e:4f:
                    2e:1e:fa:60:98:90:bf:9f:bf:06:4b:8b:22:af:28:
                    29:05:46:e3:2b:be:6e:7a:0d:a5:80:18:00:8f:a4:
                    da:76:82:62:bb:d4:fa:ba:d3:72:d3:6f:87:95:8a:
                    92:be:b9:c1:1f:8f:47:79:49:9a:09:e3:63:11:0a:
                    59:ac:b8:62:06:31:e1:83:77:44:de:da:a0:cc:53:
                    70:01:ee:4c:b8:46:0c:df:0a:7c:e9:5c:ec:3f:b8:
                    56:b4:e4:95:76:60:01:26:8e:29:4c:47:7e:b3:0d:
                    4f:71:90:37:1c:1e:f7:41:08:63:73:5b:fa:85:10:
                    d3:99:df:12:2b:7a:7d:33:8d:d7:3c:39:00:85:72:
                    2c:24:b0:16:dc:72:30:aa:2f:79:c3:54:84:61:7e:
                    06:a5:dc:d1:1e:7f:cc:9b:b9:7a:9d:87:24:f5:89:
                    fc:0e:93:92:4a:e3:70:d2:de:7b:25:64:c7:36:0d:
                    76:3e:27:be:e5:7c:59:d6:a6:2b:aa:82:18:dd:61:
                    b9:78:84:8e:38:b9:1b:ba:84:0f:c6:f7:be:19:0f:
                    bc:c0:2f:a5:e7:3e:44:02:b2:47:4c:43:38:91:28:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0E:F9:5D:23:4F:3E:29:63:D9:7E:1E:5B:7C:D1:AB:37:C0:5D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d7d74f97-fa96-38eb-a256-5877a31b8121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:78:67:b1:02:13:4b:d7:80:9e:c5:d8:38:3a:67:01:94:02:
         7e:2a:9c:1b:94:97:e7:e2:9f:84:9b:7e:56:09:eb:81:1a:dc:
         05:69:5b:bc:f6:77:05:57:42:d4:9b:e2:21:bf:6a:6a:18:e5:
         ec:71:07:4a:a8:46:10:69:b2:0c:f4:62:60:74:43:ab:b6:36:
         8b:5c:fc:4b:f6:b1:7d:f3:45:d2:a5:87:3b:72:0b:51:28:db:
         7b:0f:c4:1d:45:52:8e:e4:9a:8a:aa:17:14:41:91:4d:c0:6a:
         ff:80:f7:b8:dd:05:59:f6:b8:e6:03:3e:a4:2c:49:dc:86:6f:
         53:fe:b0:c6:c8:a4:9f:da:1b:52:de:8a:6e:dd:0f:8c:58:62:
         08:67:09:cc:c8:2e:d9:15:09:87:56:52:c3:65:d6:df:9a:f5:
         91:f3:e6:c4:ca:15:d3:07:30:71:0b:d7:11:a9:da:2e:61:09:
         96:20:eb:32:ce:e2:0b:0b:56:29:21:9f:58:d6:69:89:10:37:
         24:a0:5b:e5:76:53:5f:fc:42:7b:27:8a:a6:47:dc:a4:c9:c1:
         04:4b:44:fd:a8:08:1d:ef:39:d9:b6:11:d7:2a:b4:02:a9:82:
         59:a1:90:4e:9d:ba:65:86:f7:27:b9:21:10:96:43:5b:27:a5:
         b8:1f:a2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:49:34 2025 by rpki-client