Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35da6f66-6d8e-3e4a-bca0-c50058f11459.roa
File:                     35da6f66-6d8e-3e4a-bca0-c50058f11459.roa (raw, json)
Hash identifier:          SQT4MEvW4YXk4dSlvs8QKvS/Nsni8TmWW9SHd70hHfg=
Subject key identifier:   E6:6C:CA:76:19:AB:45:74:83:AF:A1:E9:DB:ED:94:48:82:56:08:79
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FB42ECC8A530353B01440
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35da6f66-6d8e-3e4a-bca0-c50058f11459.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     22890
IP address blocks:        184.105.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:b4:2e:cc:8a:53:03:53:b0:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=117ccda7-e6f8-464e-a002-b9ba6ede7a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:82:77:bd:c6:70:76:48:46:bc:0e:91:49:e7:
                    ad:45:73:78:06:30:c3:fa:c4:ff:4f:13:40:0c:b4:
                    fa:26:af:0c:a2:72:ff:1a:70:e9:96:f8:67:14:93:
                    6d:3f:86:41:7e:73:e8:9e:ce:e1:9a:39:23:d2:49:
                    e5:d3:da:50:6d:e4:d8:22:b5:39:33:1c:49:c8:11:
                    f9:55:23:5a:d5:09:8b:f2:0d:43:aa:c0:dc:f6:44:
                    1c:51:65:98:b7:8f:7b:69:79:23:91:89:6b:ed:32:
                    4b:d9:ef:5c:75:cc:4b:91:aa:1d:83:b0:fb:e0:ed:
                    87:0e:9c:fd:4a:c9:b3:ec:6f:e2:8e:4e:71:77:2f:
                    98:34:27:8b:85:f0:0c:22:00:b6:6b:a6:0e:71:17:
                    11:39:16:dd:d6:4f:5c:58:5e:10:14:46:33:c0:8a:
                    84:00:e1:5b:82:c0:db:74:2a:52:09:bc:4c:44:c3:
                    e8:6b:d1:2a:c2:56:b6:fc:54:d6:5f:27:95:0e:65:
                    ca:11:53:ff:38:1b:97:01:b8:08:b0:93:d8:61:0b:
                    1a:8a:1b:c1:1a:be:f7:01:25:c5:59:61:e0:6e:12:
                    7a:c2:fe:83:87:53:a7:6a:ad:bc:0e:f1:b3:f8:0a:
                    28:a8:28:a0:3b:12:cb:9d:7b:69:d8:a3:e2:0a:a4:
                    e1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6C:CA:76:19:AB:45:74:83:AF:A1:E9:DB:ED:94:48:82:56:08:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35da6f66-6d8e-3e4a-bca0-c50058f11459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:17:64:a2:17:44:a6:48:fa:2d:20:fa:38:88:10:b2:be:c6:
         75:59:c2:0e:8c:38:8b:49:97:67:f3:17:f1:06:b6:4d:ab:a3:
         1b:12:51:10:fc:32:aa:d3:95:95:a5:c0:7e:7f:a3:4c:b4:aa:
         9c:b4:86:59:83:9e:14:eb:29:ab:9a:96:f0:b5:20:30:16:39:
         db:f2:20:b9:c7:75:05:a1:52:0c:5a:ce:49:3b:bd:63:f3:e5:
         0f:8d:f9:67:3b:31:26:8d:d0:71:90:5a:7a:91:e6:47:fd:03:
         1e:42:01:47:ca:01:61:fb:72:ab:e8:69:aa:5d:a9:ee:6c:08:
         eb:e7:70:c5:ab:38:f0:19:61:af:68:71:a2:93:29:26:0a:36:
         22:f6:87:49:34:74:7e:59:3a:3e:20:0c:1d:33:44:5c:45:ab:
         21:73:ba:31:aa:11:50:13:6b:d1:9b:c9:07:d4:c3:ad:c6:d2:
         7f:60:04:de:82:69:41:f4:c1:c8:ab:71:e5:eb:d5:e1:51:f2:
         53:16:36:f6:24:2a:60:ca:a4:fb:09:a4:0b:e5:85:13:c6:42:
         b8:4f:6e:2c:ec:0e:71:59:78:19:cb:51:30:6b:68:81:36:b6:
         0d:50:a7:da:17:17:4b:c0:fc:c7:a3:2f:81:16:8c:85:6d:0f:
         d9:99:35:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX7QuzIpTA1OwFEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
MTE3Y2NkYTctZTZmOC00NjRlLWEwMDItYjliYTZlZGU3YTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYJ3vcZwdkhGvA6RSeetRXN4BjDD+sT/TxNA
DLT6Jq8MonL/GnDplvhnFJNtP4ZBfnPons7hmjkj0knl09pQbeTYIrU5MxxJyBH5
VSNa1QmL8g1DqsDc9kQcUWWYt497aXkjkYlr7TJL2e9cdcxLkaodg7D74O2HDpz9
Ssmz7G/ijk5xdy+YNCeLhfAMIgC2a6YOcRcRORbd1k9cWF4QFEYzwIqEAOFbgsDb
dCpSCbxMRMPoa9Eqwla2/FTWXyeVDmXKEVP/OBuXAbgIsJPYYQsaihvBGr73ASXF
WWHgbhJ6wv6Dh1Onaq28DvGz+AooqCigOxLLnXtp2KPiCqThgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZsynYZq0V0g6+h6dvtlEiCVgh5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzVkYTZmNjYtNmQ4ZS0z
ZTRhLWJjYTAtYzUwMDU4ZjExNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuGkcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkXZKIXRKZI+i0g+jiIELK+xnVZwg6MOItJl2fzF/EGtk2roxsSURD8
MqrTlZWlwH5/o0y0qpy0hlmDnhTrKaualvC1IDAWOdvyILnHdQWhUgxazkk7vWPz
5Q+N+Wc7MSaN0HGQWnqR5kf9Ax5CAUfKAWH7cqvoaapdqe5sCOvncMWrOPAZYa9o
caKTKSYKNiL2h0k0dH5ZOj4gDB0zRFxFqyFzujGqEVATa9GbyQfUw63G0n9gBN6C
aUH0wcirceXr1eFR8lMWNvYkKmDKpPsJpAvlhRPGQrhPbizsDnFZeBnLUTBraIE2
tg1Qp9oXF0vA/MejL4EWjIVtD9mZNTQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:58 2025 by rpki-client