Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d2c4fe5-069d-3bb4-a815-eaf48693872a.roa
File:                     8d2c4fe5-069d-3bb4-a815-eaf48693872a.roa (raw, json)
Hash identifier:          mImn920Qi9dRjBCldtcwd4d4F9tAB1qWN6FQcN+hs7s=
Subject key identifier:   ED:65:B0:5D:95:AA:08:7A:FE:CE:4C:A0:3E:BC:E6:B5:C4:F8:28:01
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BBB63E79FC5ECC79AAD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d2c4fe5-069d-3bb4-a815-eaf48693872a.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     36794
IP address blocks:        184.105.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:bb:63:e7:9f:c5:ec:c7:9a:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=ac2338be-815a-4f13-a829-88a36e5e0c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:bb:c0:10:3f:5a:05:a6:1e:70:9f:26:1b:e6:
                    97:40:23:42:dc:92:ff:86:7e:4a:ad:8a:15:75:e3:
                    61:bc:35:18:1e:ac:bc:27:29:4e:2c:46:48:8a:4c:
                    be:05:e7:60:5b:a6:a7:ff:df:8c:6c:d7:40:d3:b6:
                    5d:cd:5d:4d:52:25:b9:be:76:2a:64:00:0f:a8:95:
                    94:ed:16:a4:50:d5:96:08:50:bf:d7:c1:5a:5a:45:
                    40:56:43:53:00:25:6b:6c:2a:3d:71:a6:fc:7f:91:
                    17:9f:0c:46:eb:97:46:6f:cc:e2:df:74:79:38:56:
                    6c:53:fd:20:4c:2c:e4:59:9e:20:ff:94:f4:02:52:
                    1d:64:13:ed:b9:87:56:31:52:08:30:38:75:f4:15:
                    f2:c7:ea:5c:64:48:3d:93:db:08:3f:fa:bf:28:cd:
                    d1:4a:e4:c2:67:84:f9:96:a1:39:34:82:b0:dd:84:
                    c7:dc:b8:95:0d:78:70:0e:91:ec:01:f0:a1:26:5a:
                    88:ef:f6:d5:90:43:18:15:eb:88:24:c8:5f:a9:fd:
                    e4:55:d5:f8:15:20:2b:a0:87:b7:03:29:d7:7c:d5:
                    86:f3:97:aa:3f:c3:cd:14:42:93:2d:c5:c8:e7:7b:
                    04:18:58:20:80:4e:74:6d:91:0c:70:d6:8f:00:e9:
                    13:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:65:B0:5D:95:AA:08:7A:FE:CE:4C:A0:3E:BC:E6:B5:C4:F8:28:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d2c4fe5-069d-3bb4-a815-eaf48693872a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d0:4f:e8:7a:da:fb:4e:14:ea:b0:94:3b:eb:a8:8e:88:bd:
         92:88:d9:9e:a0:f3:77:68:4c:f8:aa:6e:24:b9:19:eb:1a:3b:
         02:10:fa:8c:33:09:4f:64:75:9e:e4:3e:99:e7:57:67:eb:32:
         6a:7a:2b:47:36:79:0d:07:d6:25:67:a4:7e:4d:b1:5c:c8:3b:
         38:7f:c6:35:c1:07:6f:35:9c:57:85:a5:05:27:bb:36:66:6c:
         36:db:3c:09:23:3a:8e:92:fc:b7:b6:71:13:4c:25:6f:15:47:
         b5:2c:d4:89:05:1f:e5:cc:2a:7d:85:a7:df:98:f9:2f:44:b5:
         4c:47:c3:62:96:ed:32:41:2c:19:14:19:db:e6:2a:6e:1c:12:
         a0:b0:a2:bc:07:ed:8d:c4:71:42:78:2f:fa:bb:47:79:be:e7:
         34:fb:0d:73:7c:bc:6e:35:57:24:8e:d8:dc:10:19:bb:53:70:
         b8:4d:97:27:73:fa:62:b9:37:1b:3a:c6:60:ce:3f:99:bb:5d:
         a7:4c:0a:43:e5:da:70:34:0f:5c:67:4b:e4:68:c4:8c:a6:47:
         ba:3c:7b:a1:97:5e:f8:d3:41:2e:67:43:13:9d:17:46:bf:49:
         b1:0c:70:2b:2e:b5:24:09:06:8e:ba:e3:65:95:6b:ab:74:10:
         cd:5e:7d:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G7tj55/F7MearQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
YWMyMzM4YmUtODE1YS00ZjEzLWE4MjktODhhMzZlNWUwYzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/bvAED9aBaYecJ8mG+aXQCNC3JL/hn5KrYoV
deNhvDUYHqy8JylOLEZIiky+BedgW6an/9+MbNdA07ZdzV1NUiW5vnYqZAAPqJWU
7RakUNWWCFC/18FaWkVAVkNTACVrbCo9cab8f5EXnwxG65dGb8zi33R5OFZsU/0g
TCzkWZ4g/5T0AlIdZBPtuYdWMVIIMDh19BXyx+pcZEg9k9sIP/q/KM3RSuTCZ4T5
lqE5NIKw3YTH3LiVDXhwDpHsAfChJlqI7/bVkEMYFeuIJMhfqf3kVdX4FSAroIe3
AynXfNWG85eqP8PNFEKTLcXI53sEGFgggE50bZEMcNaPAOkTEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1lsF2Vqgh6/s5MoD685rXE+CgBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGQyYzRmZTUtMDY5ZC0z
YmI0LWE4MTUtZWFmNDg2OTM4NzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGk4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7QT+h62vtOFOqwlDvrqI6IvZKI2Z6g83doTPiqbiS5GesaOwIQ+owz
CU9kdZ7kPpnnV2frMmp6K0c2eQ0H1iVnpH5NsVzIOzh/xjXBB281nFeFpQUnuzZm
bDbbPAkjOo6S/Le2cRNMJW8VR7Us1IkFH+XMKn2Fp9+Y+S9EtUxHw2KW7TJBLBkU
GdvmKm4cEqCworwH7Y3EcUJ4L/q7R3m+5zT7DXN8vG41VySO2NwQGbtTcLhNlydz
+mK5Nxs6xmDOP5m7XadMCkPl2nA0D1xnS+RoxIymR7o8e6GXXvjTQS5nQxOdF0a/
SbEMcCsutSQJBo6642WVa6t0EM1efSY=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:42:14 2025 by rpki-client