Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d607ff9d-2a0d-399d-a30d-6292f6ce515a.roa
File:                     d607ff9d-2a0d-399d-a30d-6292f6ce515a.roa (raw, json)
Hash identifier:          fcXmVKLprDKmbi/XL5FWbVAyTE3kUxUWwViyXZaw4KA=
Subject key identifier:   67:CC:06:D2:C2:44:4C:61:AC:21:CC:A5:E3:DC:E9:F8:54:7B:0B:27
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BF7CB5670ED8D8B386EC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d607ff9d-2a0d-399d-a30d-6292f6ce515a.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     398885
IP address blocks:        184.105.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:f7:cb:56:70:ed:8d:8b:38:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=b02fffbc-4bbd-4b31-bdd2-6bb1c09b635c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2a:ae:4c:7f:c0:a5:7e:74:da:f3:82:fc:0c:
                    88:85:7e:78:80:6c:fe:de:ca:5b:22:31:fd:b3:b7:
                    44:19:08:e3:32:f3:86:49:8e:06:6b:e8:0d:9d:54:
                    ad:43:ee:41:2b:fc:12:cd:c6:61:8e:8d:ad:55:6f:
                    75:e3:d9:15:c2:63:fb:58:23:de:d3:dd:3c:8a:ab:
                    11:87:ca:15:5a:e6:6b:21:66:fb:0b:87:73:ca:9f:
                    3a:7f:fb:c4:bb:c5:50:89:3b:69:09:ca:c9:69:fc:
                    eb:67:43:80:a9:b9:e4:99:e0:f9:25:28:c7:fa:f7:
                    cd:02:9b:87:38:9c:4e:9c:ad:69:a8:92:76:40:29:
                    ab:e8:6b:0b:28:af:b1:c1:3f:b2:16:b4:6b:dd:e0:
                    54:c9:b4:d7:d6:10:77:30:88:bf:b9:10:20:60:41:
                    65:13:67:16:ac:f0:53:a0:5b:8d:26:3a:e4:fa:fc:
                    0a:c4:4b:67:e3:65:0f:0a:83:a1:ba:1b:d0:50:9a:
                    4e:5d:81:1a:44:79:6c:55:61:23:c7:12:3e:11:cf:
                    24:ad:85:e3:b8:d0:b5:60:d2:d6:23:f4:90:7e:1b:
                    bf:1f:80:63:71:18:d5:ec:4e:36:2c:47:1c:bf:35:
                    02:0b:c1:02:ea:b3:5b:93:16:27:ac:37:6f:74:38:
                    6e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CC:06:D2:C2:44:4C:61:AC:21:CC:A5:E3:DC:E9:F8:54:7B:0B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d607ff9d-2a0d-399d-a30d-6292f6ce515a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:96:20:0a:03:04:28:5f:8e:9b:cb:78:b1:e0:1c:4b:5e:e0:
         d0:d9:d5:5d:2b:68:24:c7:09:7e:bd:aa:d4:60:f6:e4:ad:cd:
         87:ec:f7:c6:ca:c6:16:85:e5:33:0c:79:33:2c:16:2d:1c:58:
         73:ea:a8:b3:96:ea:16:04:20:e9:64:8a:c0:d9:10:6d:4e:98:
         f3:15:b2:7e:6e:1c:7b:b0:eb:26:2a:18:c8:f1:49:ba:85:c1:
         52:f9:80:d2:3e:f5:86:c9:07:71:a4:1d:80:85:06:a0:54:f4:
         44:83:74:76:19:bf:f0:71:bd:1d:93:c5:04:80:bc:1e:80:e6:
         ed:d6:f6:ff:70:23:16:e9:67:0a:8f:c8:9d:e8:7b:59:24:42:
         30:61:6c:fb:13:77:26:33:8d:18:d8:f4:4c:81:85:81:df:eb:
         79:dc:3b:94:49:72:ca:6d:17:91:8a:1a:ed:54:02:b1:42:3a:
         b6:f3:64:09:d7:69:92:c2:cf:18:c7:f1:b6:d0:72:9c:10:71:
         7d:a4:74:37:15:2d:59:2b:02:56:c4:01:a6:f3:a8:6d:52:d5:
         86:86:2f:4c:ee:da:3e:14:95:aa:38:d1:41:9e:42:bd:41:04:
         8e:28:a0:01:60:5c:74:20:a6:c0:dd:5f:07:79:d1:18:89:2c:
         d0:63:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:46:39 2025 by rpki-client