Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eada1f7c-5059-3886-9ccd-bb3a1316dedc.roa
File:                     eada1f7c-5059-3886-9ccd-bb3a1316dedc.roa (raw, json)
Hash identifier:          Sx0x4TGv5WpNemmhIqjL+hcevXBHRBleU1mlArFhAaI=
Subject key identifier:   FE:91:A3:00:32:6D:4D:45:E2:69:17:88:31:73:F1:CA:B5:11:FF:C8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848CDE0F92EBC683B263B922C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eada1f7c-5059-3886-9ccd-bb3a1316dedc.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     394034
IP address blocks:        184.104.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e0:f9:2e:bc:68:3b:26:3b:92:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=4b9e8ffc-ec38-4263-aec9-00f8d52197e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:db:e6:38:00:d7:a3:3d:c8:90:95:c2:a8:
                    50:ef:1d:06:16:54:53:89:37:94:3b:83:c3:fd:70:
                    d1:f0:6a:db:7e:55:be:e8:b2:98:c7:ea:d6:0c:93:
                    36:06:ee:cf:3a:46:de:50:a4:3a:a7:2d:ef:30:ca:
                    cf:31:89:96:01:07:f4:cc:07:dd:d6:79:f3:db:ed:
                    ed:6b:02:99:a8:3b:da:4a:28:76:cb:a1:57:78:47:
                    db:12:20:08:b9:08:c6:34:a5:bd:73:7c:68:58:85:
                    f1:6e:b3:7c:65:6e:dc:67:af:0b:45:a4:f8:58:d5:
                    73:57:2f:6a:eb:b9:cd:e2:1f:2e:f4:e7:f4:8e:7e:
                    34:42:52:46:73:fc:c9:24:dd:e9:28:45:86:89:15:
                    13:14:9e:9e:ce:aa:ad:df:fa:e6:1f:07:d3:a7:f8:
                    8b:fb:60:8b:be:da:41:82:b7:55:da:a5:03:c4:ae:
                    32:ac:89:f6:d3:12:82:58:68:f7:1b:d3:4b:6c:ca:
                    8c:30:d2:cf:84:f6:c4:e9:e0:3b:2a:66:12:f9:1e:
                    8c:57:d6:6e:37:2c:5b:7a:58:37:0d:59:21:ea:9b:
                    b3:93:08:1e:4c:c8:ec:71:73:99:02:8b:d9:84:33:
                    2d:26:57:03:41:65:d0:41:8d:31:93:83:c1:56:60:
                    28:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:91:A3:00:32:6D:4D:45:E2:69:17:88:31:73:F1:CA:B5:11:FF:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eada1f7c-5059-3886-9ccd-bb3a1316dedc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.104.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:49:b5:8d:7a:2e:9c:8c:45:1a:bd:0e:02:e8:66:0b:96:1b:
         c8:0d:db:db:c4:65:5d:2d:5c:84:f5:55:48:b6:c0:74:3f:b2:
         fd:ed:f8:4c:5c:d9:bf:6d:9d:a7:8f:ae:ed:fa:28:d4:eb:94:
         aa:90:05:ce:e7:87:f0:24:c1:92:7b:02:d9:0a:ef:62:ad:ef:
         fa:28:39:f9:37:b3:f9:d6:5a:e6:76:c3:d3:0c:78:a7:d8:af:
         dd:ba:9f:97:71:05:2a:f9:a1:18:1f:21:fb:1a:62:20:71:6d:
         a1:3d:57:8a:ab:77:28:0a:06:6e:79:71:2d:9a:10:9d:25:ad:
         24:25:7f:66:c8:a3:57:41:9b:2f:27:6f:41:48:ee:58:7e:f7:
         0b:d6:b0:e3:eb:9a:d9:33:d8:b4:6b:d3:9f:97:f5:94:57:aa:
         6b:25:d9:37:98:c3:3b:36:76:05:8a:0a:76:33:2a:63:e4:d1:
         12:66:3b:f8:7e:fd:7d:40:4e:b9:0d:93:a9:4c:45:b0:1c:3f:
         f1:58:01:68:c1:d8:64:22:2a:3f:cb:12:75:67:7d:55:35:91:
         51:58:6d:28:3c:f7:4b:b6:4f:f8:c2:74:c2:d3:2b:a5:36:ee:
         57:f7:53:77:c4:91:cd:c5:6b:75:04:7f:d0:b5:a7:68:d2:04:
         4a:a2:c1:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4PkuvGg7JjuSLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk
NGI5ZThmZmMtZWMzOC00MjYzLWFlYzktMDBmOGQ1MjE5N2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VTb5jgA16M9yJCVwqhQ7x0GFlRTiTeUO4PD
/XDR8GrbflW+6LKYx+rWDJM2Bu7POkbeUKQ6py3vMMrPMYmWAQf0zAfd1nnz2+3t
awKZqDvaSih2y6FXeEfbEiAIuQjGNKW9c3xoWIXxbrN8ZW7cZ68LRaT4WNVzVy9q
67nN4h8u9Of0jn40QlJGc/zJJN3pKEWGiRUTFJ6ezqqt3/rmHwfTp/iL+2CLvtpB
grdV2qUDxK4yrIn20xKCWGj3G9NLbMqMMNLPhPbE6eA7KmYS+R6MV9ZuNyxbelg3
DVkh6puzkwgeTMjscXOZAovZhDMtJlcDQWXQQY0xk4PBVmAokwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP6RowAybU1F4mkXiDFz8cq1Ef/IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWFkYTFmN2MtNTA1OS0z
ODg2LTljY2QtYmIzYTEzMTZkZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuGi4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJJJtY16LpyMRRq9DgLoZguWG8gN29vEZV0tXIT1VUi2wHQ/sv3t+Exc
2b9tnaePru36KNTrlKqQBc7nh/AkwZJ7AtkK72Kt7/ooOfk3s/nWWuZ2w9MMeKfY
r926n5dxBSr5oRgfIfsaYiBxbaE9V4qrdygKBm55cS2aEJ0lrSQlf2bIo1dBmy8n
b0FI7lh+9wvWsOPrmtkz2LRr05+X9ZRXqmsl2TeYwzs2dgWKCnYzKmPk0RJmO/h+
/X1ATrkNk6lMRbAcP/FYAWjB2GQiKj/LEnVnfVU1kVFYbSg890u2T/jCdMLTK6U2
7lf3U3fEkc3Fa3UEf9C1p2jSBEqiwek=
-----END CERTIFICATE-----
Generated at Wed Feb 12 17:55:40 2025 by rpki-client