Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/b3cca2f3-3d76-3623-badb-45a7c00bb88e.roa
File:                     b3cca2f3-3d76-3623-badb-45a7c00bb88e.roa (raw, json)
Hash identifier:          gQZx9lVKyvDEVzrGKQdxJrkYbwaxdoy2hW7bSWbrVSQ=
Subject key identifier:   49:AA:D4:DB:8E:09:92:BB:10:09:95:9A:D4:66:CC:5A:A8:3E:DF:41
Certificate issuer:       /CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
Certificate serial:       010D0C9F4328584AA160DF4359BB570BA530A300
Authority key identifier: 2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/b3cca2f3-3d76-3623-badb-45a7c00bb88e.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     22857
IP address blocks:        104.36.208.0/21 maxlen: 24
                          2620:12f:7000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:df:43:59:bb:57:0b:a5:30:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=67aeb49f-fa96-4d24-8315-7b2b791addd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:84:59:1a:51:61:e6:4d:d0:59:82:8e:db:9f:
                    de:5b:60:38:f9:8f:52:e9:48:d6:2d:4d:cb:05:58:
                    cc:cd:5c:aa:d3:47:f3:1e:3f:ee:5b:df:c2:e9:45:
                    0b:08:a6:d5:ad:9e:bd:b9:00:b9:e4:ad:e4:30:a9:
                    28:da:40:55:f6:c4:68:a1:39:0f:c4:9d:63:28:17:
                    55:49:31:61:a9:6c:81:e5:a8:0e:cb:78:5b:79:c3:
                    70:5e:62:d6:13:64:45:12:82:30:af:95:40:b9:af:
                    a0:40:a4:0f:2f:21:34:48:c8:90:ad:a9:d3:f4:a8:
                    ca:66:fd:9f:fb:17:70:b7:90:af:9a:00:f1:0e:7f:
                    02:05:45:6f:88:42:dd:8e:aa:90:ac:27:67:d4:8e:
                    e5:e8:65:88:4b:9b:48:ee:43:76:83:23:f8:32:69:
                    ec:2b:84:c4:a0:a4:13:3a:94:66:57:c7:6a:2b:7c:
                    af:78:75:fa:35:8e:d6:19:73:ad:83:c5:84:73:49:
                    b2:a5:34:dc:df:73:d8:86:74:36:31:90:b7:c7:77:
                    c8:d0:0c:e3:1f:e6:ac:6b:fa:b6:f0:43:b0:4d:ae:
                    e4:71:cb:29:69:d5:98:58:c6:e3:fa:7b:0e:d6:0f:
                    09:32:07:35:8c:e3:e5:73:35:d2:4c:a1:6c:2a:16:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AA:D4:DB:8E:09:92:BB:10:09:95:9A:D4:66:CC:5A:A8:3E:DF:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/b3cca2f3-3d76-3623-badb-45a7c00bb88e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.208.0/21
                IPv6:
                  2620:12f:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:14:ba:3b:50:59:8f:c8:f4:79:ec:c8:74:01:62:94:0c:0b:
         7d:89:dc:a0:ef:89:ff:a6:5b:d7:0c:ab:6c:8a:99:de:69:f9:
         c8:18:bf:54:d5:ca:6d:da:e7:56:62:02:60:2a:64:45:ec:6f:
         9b:18:fd:f7:72:00:92:8a:10:1f:bf:d1:68:ba:b6:e4:c9:18:
         06:23:37:03:90:d8:11:7b:7c:d0:a7:37:bd:e1:9e:88:57:52:
         9c:f7:c0:0e:58:78:d5:82:da:03:f6:66:4b:33:d2:10:8d:f2:
         63:c5:78:ac:9d:af:c3:2d:79:59:f6:fc:24:96:1f:c2:e4:42:
         c4:95:83:72:61:49:2b:2c:f4:41:31:25:e1:15:1a:d9:02:c1:
         36:e6:b4:68:ea:34:77:6d:fe:17:20:99:8d:49:0a:04:13:d1:
         21:be:d4:7e:e5:c0:be:66:76:0d:b3:3c:f4:81:2c:77:87:8d:
         a6:59:0f:7d:ad:f9:a1:c1:39:05:9f:fd:14:e9:fe:94:34:a8:
         59:a0:4b:00:a8:b5:e1:37:33:4c:3c:04:f3:63:3c:70:64:ec:
         a6:41:e1:a7:0d:68:30:1f:75:10:31:7f:97:3c:ad:0e:ea:c9:
         c7:e6:48:34:58:88:27:f4:6f:34:f5:c7:1f:bb:a4:ae:63:89:
         17:66:6c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:41:30 2025 by rpki-client