Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed62ea35-7b4f-3648-add1-976de9fa1ad3.roa
File:                     ed62ea35-7b4f-3648-add1-976de9fa1ad3.roa (raw, json)
Hash identifier:          zYOAdnWieOuoYuYHp4aKxRVjgVdHc0bwB/HqQeMibmk=
Subject key identifier:   84:72:3D:96:E5:A4:8B:56:46:DC:83:A1:BC:73:BA:F0:1F:8D:46:1E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FD6A3DDE30B6554F5B120
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed62ea35-7b4f-3648-add1-976de9fa1ad3.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     30712
IP address blocks:        184.105.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:d6:a3:dd:e3:0b:65:54:f5:b1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=5d3177d4-bf7f-4a17-b086-cf540d4c905d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:f7:cb:59:a9:de:41:0d:db:ed:9a:a9:c7:
                    7e:08:2b:9c:13:35:28:60:8c:f1:c1:38:5a:8a:7d:
                    7b:d3:57:8c:18:d5:9d:a1:97:c7:3e:b9:61:0a:16:
                    73:54:86:d4:20:1f:2a:52:a6:34:85:40:82:de:53:
                    8a:97:bc:6a:76:22:ab:02:c5:95:77:28:44:bc:be:
                    11:28:5d:f5:e9:35:44:29:ca:40:8d:76:86:5c:d2:
                    ce:f6:3e:fc:24:bc:5b:79:69:f3:10:20:55:d0:37:
                    f4:92:b7:bb:0d:99:5c:bb:b3:0a:61:3c:d1:08:7b:
                    cc:65:7a:09:8e:9a:0b:6e:31:7d:1b:3c:fe:58:b6:
                    9f:cc:a9:52:cb:1f:0e:a1:21:70:40:66:58:c3:a0:
                    9e:f3:70:ab:57:bf:f2:5c:5b:ea:b7:33:5e:f2:eb:
                    39:50:a3:38:b0:65:93:1d:e3:63:0f:23:26:b2:8c:
                    59:47:8d:13:57:bd:3f:d6:e9:99:20:b6:b2:07:2e:
                    7d:0e:0b:9e:ca:c8:30:ce:f7:a4:a8:21:01:65:a2:
                    44:41:98:f8:f8:50:dc:de:68:9f:4e:8f:f5:05:2b:
                    a3:88:1a:a9:13:87:3c:80:5a:17:7d:41:2a:ec:6c:
                    77:aa:87:14:27:11:f5:22:d6:a8:a4:6f:cd:59:1d:
                    3d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:72:3D:96:E5:A4:8B:56:46:DC:83:A1:BC:73:BA:F0:1F:8D:46:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed62ea35-7b4f-3648-add1-976de9fa1ad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:fd:3e:2e:8a:83:4f:c3:81:40:1e:e0:f3:e4:d1:27:c1:ea:
         a5:87:b3:f8:90:b2:6a:9f:18:ee:50:77:e0:42:26:5d:75:99:
         02:69:39:7e:c5:27:90:85:30:8b:1a:34:dd:0b:9f:75:17:9c:
         55:a7:98:98:d3:10:2d:e2:80:05:63:ba:96:d1:72:28:3e:06:
         ba:4e:3e:39:46:36:8b:7d:6b:a3:a0:6c:78:14:f7:c6:df:13:
         af:ec:f5:ae:1a:2a:0c:ae:eb:bc:08:bb:3f:35:53:5f:b7:13:
         da:1b:5c:f1:43:4e:59:f6:4c:3a:4e:0c:39:37:22:51:e3:03:
         08:91:b2:d6:c6:15:ca:4e:1c:98:6f:c8:d0:c4:c5:ae:fe:24:
         8e:4f:4e:3a:ea:56:f5:34:00:60:73:ea:e9:8f:00:ca:b6:69:
         a7:92:b6:6a:4c:9e:f3:84:cc:7f:83:cd:4c:49:a6:38:f3:fe:
         2c:74:08:22:17:07:08:45:70:85:88:f1:9e:44:fc:27:39:3d:
         2d:d9:70:95:7c:97:d0:43:55:66:b3:3f:50:62:98:65:d3:18:
         f8:f8:87:57:44:bf:8c:a6:e6:11:61:8f:6f:f2:31:4e:0c:13:
         99:93:35:82:29:5d:45:9f:08:0c:7a:c2:c9:7a:d0:25:07:a9:
         6c:1f:cc:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX9aj3eMLZVT1sSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
NWQzMTc3ZDQtYmY3Zi00YTE3LWIwODYtY2Y1NDBkNGM5MDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAL3y1mp3kEN2+2aqcd+CCucEzUoYIzxwTha
in1701eMGNWdoZfHPrlhChZzVIbUIB8qUqY0hUCC3lOKl7xqdiKrAsWVdyhEvL4R
KF316TVEKcpAjXaGXNLO9j78JLxbeWnzECBV0Df0kre7DZlcu7MKYTzRCHvMZXoJ
jpoLbjF9Gzz+WLafzKlSyx8OoSFwQGZYw6Ce83CrV7/yXFvqtzNe8us5UKM4sGWT
HeNjDyMmsoxZR40TV70/1umZILayBy59DgueysgwzvekqCEBZaJEQZj4+FDc3mif
To/1BSujiBqpE4c8gFoXfUEq7Gx3qocUJxH1ItaopG/NWR09mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRyPZblpItWRtyDobxzuvAfjUYeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWQ2MmVhMzUtN2I0Zi0z
NjQ4LWFkZDEtOTc2ZGU5ZmExYWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGlvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKf9Pi6Kg0/DgUAe4PPk0SfB6qWHs/iQsmqfGO5Qd+BCJl11mQJpOX7F
J5CFMIsaNN0Ln3UXnFWnmJjTEC3igAVjupbRcig+BrpOPjlGNot9a6OgbHgU98bf
E6/s9a4aKgyu67wIuz81U1+3E9obXPFDTln2TDpODDk3IlHjAwiRstbGFcpOHJhv
yNDExa7+JI5PTjrqVvU0AGBz6umPAMq2aaeStmpMnvOEzH+DzUxJpjjz/ix0CCIX
BwhFcIWI8Z5E/Cc5PS3ZcJV8l9BDVWazP1BimGXTGPj4h1dEv4ym5hFhj2/yMU4M
E5mTNYIpXUWfCAx6wsl60CUHqWwfzNo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:15:20 2025 by rpki-client