Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/824a90e5-42af-3961-9119-cb6fea03f725.roa
File:                     824a90e5-42af-3961-9119-cb6fea03f725.roa (raw, json)
Hash identifier:          qjSOrrb9tcSySUnL+G8vrVZeMAw29u/58v4Tv6c6oIo=
Subject key identifier:   32:BE:52:4E:84:72:B6:DF:14:50:A2:23:F5:B2:D3:F2:D0:F6:F1:8B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FB2F4F3765A93CB420480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/824a90e5-42af-3961-9119-cb6fea03f725.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     15102
IP address blocks:        184.105.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:b2:f4:f3:76:5a:93:cb:42:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=cd3948e9-642c-445c-9699-e75564b64266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1c:17:a1:97:1c:dc:6b:07:fd:7b:30:c3:09:
                    24:6a:ea:01:72:1f:13:7e:08:4c:46:eb:61:2c:68:
                    22:eb:0d:1b:32:ed:18:54:b9:e2:30:6b:21:62:9f:
                    d8:a0:89:59:75:ee:67:2a:36:10:81:36:01:63:d2:
                    46:42:a2:e7:32:0a:52:06:f5:4c:2d:b5:88:ce:25:
                    d6:5b:07:1a:02:28:81:c2:12:db:d0:90:97:e4:4b:
                    c3:56:2e:67:5a:b0:6b:40:4a:d0:db:d3:3e:ca:0e:
                    cb:f1:82:dc:07:55:45:a1:3f:8c:1d:bb:b2:80:37:
                    78:e7:fa:91:fb:b6:1c:b3:1f:35:6c:db:af:32:84:
                    e8:2a:d9:b9:50:35:d4:e3:16:b4:e0:29:c4:b6:1a:
                    9f:2f:e3:d2:41:24:7d:8b:eb:89:13:0f:41:05:d6:
                    92:4b:86:a0:ce:e4:e9:80:9d:ee:a9:b7:5f:44:a5:
                    f9:0d:62:26:72:a5:5f:0f:9f:81:2e:ef:10:08:23:
                    24:fc:20:38:1a:4c:3a:c4:aa:b8:84:48:4a:98:bc:
                    e0:c1:2c:80:92:a2:01:c4:8e:58:46:7f:95:2f:2e:
                    b0:de:08:7b:48:6b:a3:6d:35:8d:3a:9a:14:fa:76:
                    ff:8c:89:8b:e0:4f:a7:ac:d9:00:bf:74:3a:26:a3:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BE:52:4E:84:72:B6:DF:14:50:A2:23:F5:B2:D3:F2:D0:F6:F1:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/824a90e5-42af-3961-9119-cb6fea03f725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:82:fd:aa:83:55:b3:22:75:6a:b1:4f:b4:08:21:10:2e:bf:
         1e:e5:3a:8b:6e:cb:64:26:d2:89:43:39:a0:29:c3:4f:78:6b:
         37:34:bd:72:a7:fa:0d:ff:00:93:fa:c4:35:ba:cf:42:70:d3:
         c6:18:b9:a4:12:62:62:e8:0a:bb:a9:44:78:e9:64:54:d5:14:
         3c:c5:04:48:79:f5:31:3e:1a:4c:c9:72:63:c2:76:00:74:8f:
         52:33:1f:de:a8:52:a8:36:83:5a:83:ed:8e:6d:23:bf:eb:fd:
         0a:f3:82:42:d1:3d:61:25:d1:6f:f8:5e:c1:10:e8:db:49:32:
         be:17:4c:fb:98:ee:77:60:5b:53:e1:47:e0:55:dc:df:06:6c:
         6c:c7:c2:fc:bc:e4:59:fa:60:f5:72:2e:3a:31:00:ff:ef:37:
         e6:8e:89:71:0d:d0:72:8c:57:1f:e2:97:fb:0b:9b:24:52:54:
         66:b2:f7:06:6f:97:8c:a7:af:b1:91:e9:d8:e1:78:a0:56:9e:
         ce:f5:26:5a:1b:dd:f8:9a:00:f4:b7:ab:20:0b:0d:98:b6:28:
         09:6d:15:88:87:44:37:44:1d:b9:fc:f0:8c:a5:0e:8b:90:83:
         03:8b:a0:98:f8:68:5f:60:5c:04:a3:e0:3c:7a:64:a0:f2:4e:
         5e:80:c7:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX7L083Zak8tCBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
Y2QzOTQ4ZTktNjQyYy00NDVjLTk2OTktZTc1NTY0YjY0MjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xwXoZcc3GsH/XswwwkkauoBch8TfghMRuth
LGgi6w0bMu0YVLniMGshYp/YoIlZde5nKjYQgTYBY9JGQqLnMgpSBvVMLbWIziXW
WwcaAiiBwhLb0JCX5EvDVi5nWrBrQErQ29M+yg7L8YLcB1VFoT+MHbuygDd45/qR
+7Ycsx81bNuvMoToKtm5UDXU4xa04CnEthqfL+PSQSR9i+uJEw9BBdaSS4agzuTp
gJ3uqbdfRKX5DWImcqVfD5+BLu8QCCMk/CA4Gkw6xKq4hEhKmLzgwSyAkqIBxI5Y
Rn+VLy6w3gh7SGujbTWNOpoU+nb/jImL4E+nrNkAv3Q6JqOZdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDK+Uk6EcrbfFFCiI/Wy0/LQ9vGLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODI0YTkwZTUtNDJhZi0z
OTYxLTkxMTktY2I2ZmVhMDNmNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGlLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALGC/aqDVbMidWqxT7QIIRAuvx7lOotuy2Qm0olDOaApw094azc0vXKn
+g3/AJP6xDW6z0Jw08YYuaQSYmLoCrupRHjpZFTVFDzFBEh59TE+GkzJcmPCdgB0
j1IzH96oUqg2g1qD7Y5tI7/r/QrzgkLRPWEl0W/4XsEQ6NtJMr4XTPuY7ndgW1Ph
R+BV3N8GbGzHwvy85Fn6YPVyLjoxAP/vN+aOiXEN0HKMVx/il/sLmyRSVGay9wZv
l4ynr7GR6djheKBWns71Jlob3fiaAPS3qyALDZi2KAltFYiHRDdEHbn88IylDouQ
gwOLoJj4aF9gXASj4Dx6ZKDyTl6Ax1k=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:20:41 2025 by rpki-client