Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/366add4e-4606-37ef-ab68-41519dad2292.roa
File:                     366add4e-4606-37ef-ab68-41519dad2292.roa (raw, json)
Hash identifier:          DlWGU/Gu7qOGL3XqRgyYz7dVOQlTmkOjckX/WBL+yq4=
Subject key identifier:   08:0A:A4:E6:55:59:88:75:E4:5D:E5:E3:E5:4E:44:89:33:D2:67:58
Certificate issuer:       /CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
Certificate serial:       010D0C9F4328584A9FFBA5042836C7D0C8E179C0
Authority key identifier: 10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/366add4e-4606-37ef-ab68-41519dad2292.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     133530
IP address blocks:        104.192.136.0/21 maxlen: 24
                          2620:136:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a5:04:28:36:c7:d0:c8:e1:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9c0ae31-2052-4d10-8904-5d08b09aa688
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=277b72bb-ba7e-4e4a-8afe-8241ef8ecc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7d:f5:07:77:84:32:90:8a:b2:b2:95:73:29:
                    2d:7a:83:37:30:54:b2:8f:5d:e1:bc:5b:6e:ff:40:
                    42:5f:1b:f3:1c:9c:50:22:71:c5:67:0e:52:3b:9d:
                    87:1f:46:6e:f5:55:fe:80:27:ae:46:eb:90:ec:fb:
                    19:5d:10:6a:1d:f1:72:c5:04:18:90:55:a6:c7:76:
                    ab:ae:e3:eb:fd:50:81:e3:5f:2f:c3:9f:2f:fe:d2:
                    25:e1:98:6c:7e:08:8f:21:2e:ea:04:fa:87:9a:b4:
                    88:41:a1:7c:b4:5e:7b:85:bb:8b:28:bd:27:fe:14:
                    41:25:f3:e4:fa:41:dc:86:23:f8:99:d9:c8:8d:21:
                    c9:31:f3:d5:15:4d:e0:0e:13:4f:ad:9a:e8:66:c0:
                    50:12:9c:b2:fd:2a:8f:5d:36:d9:fc:50:d7:74:12:
                    79:36:bc:b1:50:75:7f:cc:1f:19:e5:68:b4:a2:b4:
                    08:44:be:27:49:e8:58:10:fb:1f:77:17:97:60:ec:
                    2b:13:ee:43:d4:b7:74:17:66:4d:8f:7f:16:f2:0e:
                    a4:d5:87:0a:b9:e5:6f:f3:70:7b:36:61:b4:6a:40:
                    1c:ea:92:89:a8:4f:54:cd:51:f1:44:00:2b:97:34:
                    7a:cc:99:92:fb:94:c4:79:65:ec:a9:b9:7d:af:3b:
                    dc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0A:A4:E6:55:59:88:75:E4:5D:E5:E3:E5:4E:44:89:33:D2:67:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/366add4e-4606-37ef-ab68-41519dad2292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688/e9c0ae31-2052-4d10-8904-5d08b09aa688.crl

            X509v3 Authority Key Identifier:
                keyid:10:4F:F9:3C:53:39:35:69:27:34:1C:B6:E1:F4:B9:8A:C7:50:17:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e9c0ae31-2052-4d10-8904-5d08b09aa688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.136.0/21
                IPv6:
                  2620:136:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:c7:6f:3e:85:04:9d:65:6c:92:46:2e:08:60:62:2c:cd:c7:
         d1:76:ac:09:c1:ba:de:25:3b:8a:87:60:be:fa:46:16:75:f9:
         02:3f:d6:d4:c7:ff:c7:6a:22:cb:16:d3:78:e8:aa:7d:70:de:
         99:e9:1c:c2:dc:b8:08:5a:8d:67:73:cf:10:71:fe:f0:f6:94:
         a7:45:0a:7f:fa:15:78:49:a5:58:e6:0e:66:d0:93:4e:a9:86:
         c4:05:cb:0f:f4:53:20:44:a2:f1:a5:99:b8:dc:a1:39:92:ea:
         13:9d:95:91:93:b2:c9:1d:0e:6d:61:d1:2a:7c:fc:46:52:6c:
         0a:2a:f4:9e:1f:ab:96:c0:bb:73:c9:9d:5a:23:ad:59:ff:2c:
         28:73:61:85:6a:8a:24:32:c0:63:0a:cd:9c:73:67:2c:27:b6:
         4f:43:f9:c7:20:5a:19:4e:7b:75:35:6f:02:d8:4e:2e:29:b2:
         ea:89:7a:a2:d7:17:3f:70:79:49:50:43:d7:97:bf:ad:bf:4e:
         99:7a:46:0c:4f:aa:f1:8e:99:6c:c0:ec:13:80:3b:43:48:46:
         bf:2c:43:64:8d:8b:d2:0a:5d:d0:7d:83:54:e4:e2:c6:b6:c6:
         b9:aa:ac:d3:e8:f8:02:67:bf:b4:08:92:a9:67:2b:ee:f6:61:
         3b:43:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:19:58 2025 by rpki-client