Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eedd659e-e149-37f2-8f52-85d256371ecc.roa
File:                     eedd659e-e149-37f2-8f52-85d256371ecc.roa (raw, json)
Hash identifier:          Nj4gvRuiO1WQuAWauu19APvtKU6rvV9h7EvJcEXTIbo=
Subject key identifier:   77:74:51:6C:D5:9A:33:C1:1D:61:DE:F7:FE:E5:77:C9:69:A8:BE:6F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F432858499C38426FACBF5D2711F49E00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eedd659e-e149-37f2-8f52-85d256371ecc.roa
Signing time:             Tue 22 Apr 2025 11:53:17 +0000
ROA not before:           Tue 22 Apr 2025 11:53:17 +0000
ROA not after:            Mon 21 Jul 2025 11:53:17 +0000
asID:                     30036
IP address blocks:        104.166.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9c:38:42:6f:ac:bf:5d:27:11:f4:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 22 11:53:17 2025 GMT
            Not After : Jul 21 11:53:17 2025 GMT
        Subject: CN=d2b031b6-bf08-4d11-9e15-c537cd0963b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cc:86:ff:8a:a3:68:9c:ef:1f:1a:0d:30:3b:
                    11:7a:fd:c5:86:e4:19:14:65:47:a6:7c:cd:8b:3c:
                    8a:00:af:0b:b1:38:28:02:d2:91:38:e0:b0:9d:dc:
                    c6:2c:57:dc:bb:9a:3b:7c:46:14:c6:87:6a:3e:ff:
                    22:1b:c9:bc:de:c8:e1:40:75:4b:ea:e7:c4:34:b0:
                    2c:df:18:f6:6b:16:5d:27:e3:4b:59:90:0e:28:a0:
                    85:62:11:dc:46:6f:13:36:95:5f:d6:55:70:da:6a:
                    33:46:0e:ad:e8:a1:89:0c:7a:98:10:10:da:d9:74:
                    e7:e1:31:9f:a4:1b:ad:19:a3:48:67:91:dc:2b:61:
                    ab:33:ea:12:83:5e:e9:8d:89:04:ae:30:3d:af:5c:
                    70:28:bc:07:3d:7e:7b:e1:60:74:07:78:73:f9:0e:
                    56:21:cf:fd:38:02:53:9f:ec:92:aa:a2:5e:85:f8:
                    e9:cd:b9:25:87:31:99:23:91:96:d2:b6:69:75:23:
                    82:b3:94:af:08:61:05:04:06:74:d5:fc:96:7e:ed:
                    61:00:fd:68:17:1c:5c:2a:1d:bd:f2:33:66:45:ee:
                    be:85:35:77:31:83:da:0b:ae:bf:45:d1:1f:7d:24:
                    4b:31:3f:12:34:56:93:0b:66:68:d3:2f:f7:c7:96:
                    b3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:74:51:6C:D5:9A:33:C1:1D:61:DE:F7:FE:E5:77:C9:69:A8:BE:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eedd659e-e149-37f2-8f52-85d256371ecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:4b:16:ad:5f:8b:f0:35:e3:2a:96:81:46:52:98:07:93:94:
         e4:2c:8d:21:79:e9:be:8c:9b:7d:bb:5c:35:3f:a0:10:b1:03:
         e3:e3:96:22:c5:cc:39:d7:76:bc:f8:b5:94:b9:6a:bd:66:5f:
         ed:82:51:70:3f:02:d9:1f:5b:28:a5:5a:19:0c:b3:89:d2:85:
         9c:d6:7e:34:aa:55:51:c1:cb:33:e0:8c:16:d7:27:16:29:81:
         d8:d1:57:61:fe:52:1f:d3:a9:b0:0c:fa:ca:3d:eb:d7:dc:2d:
         44:4d:68:90:69:c4:cb:de:61:b0:16:ff:50:b2:49:31:44:58:
         0e:76:5e:ff:9f:51:00:75:cd:be:d5:b8:9b:0d:d6:6f:a2:7a:
         a3:63:0d:dd:a8:a5:f1:a5:5c:df:bd:aa:54:18:a3:dd:0d:59:
         a3:eb:9b:42:8a:8b:35:83:16:b1:57:8d:28:04:1f:13:22:48:
         e1:c0:b8:21:f6:5b:e9:e8:c1:38:4b:91:c2:13:a5:d5:90:7a:
         1f:ca:4a:b0:69:e2:65:ec:ab:fd:4f:e1:1e:8a:d2:96:85:b0:
         12:63:33:3f:2e:be:de:04:e3:e1:78:d1:dd:bb:38:e1:45:c4:
         b6:c3:83:4f:03:ed:34:a9:37:f1:fd:c4:1e:fe:f1:1b:68:63:
         6c:a3:40:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:00:09 2025 by rpki-client