Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/4622086b-484d-3a11-990d-8d78572ad2fa.roa
File:                     4622086b-484d-3a11-990d-8d78572ad2fa.roa (raw, json)
Hash identifier:          hBTuK5z4daro8KjadVKYnMzjvXTVAfX592HTCex+mLY=
Subject key identifier:   80:FE:94:BA:A3:5B:13:2E:6C:15:50:0C:58:2A:06:73:77:D7:E9:1F
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F43285849ED4FD5C8B9D209FED277AB80
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/4622086b-484d-3a11-990d-8d78572ad2fa.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     109
IP address blocks:        173.36.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:d5:c8:b9:d2:09:fe:d2:77:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=bbaf195c-e12e-4753-8695-5252864c2c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:03:98:bf:55:2e:11:e3:2d:c9:d9:ec:e5:93:
                    52:d4:b8:5f:37:ec:1d:ab:62:cd:a1:24:54:e0:bb:
                    f0:53:4f:81:55:11:a4:01:89:9c:f6:c4:0a:50:85:
                    a0:c1:5c:f2:b9:a7:a2:b7:92:fe:69:03:a9:bf:54:
                    f4:fc:64:c6:a3:d9:3c:c7:80:0b:d1:2d:df:38:a8:
                    0b:56:23:ee:86:50:d9:47:89:02:99:60:a2:68:01:
                    e6:56:33:e1:21:4d:df:0e:50:9d:6e:59:f5:63:e5:
                    c1:61:96:ac:0b:e0:10:80:0a:bf:d7:3f:a1:ff:c3:
                    84:46:9a:ae:7d:06:da:7e:ac:0d:d3:5b:48:07:7b:
                    5c:81:05:28:36:14:e1:b4:92:47:f9:a1:61:91:4c:
                    a4:ab:85:ca:60:74:5f:ef:16:b6:90:56:78:d7:b8:
                    98:0d:6e:e1:77:10:7a:a3:c0:15:d7:77:f9:25:ce:
                    d2:89:2a:a0:cd:94:34:19:98:f3:4c:0c:26:70:5c:
                    bf:55:63:ac:b3:42:c3:3b:8d:5f:e4:f6:9d:eb:24:
                    b2:f2:5e:79:49:5f:26:e6:a5:be:be:20:89:57:fd:
                    44:ce:4f:64:e5:50:1a:95:ba:ee:66:61:da:30:4f:
                    7c:9b:df:0c:c2:c5:1c:21:d0:93:a6:92:c2:50:e4:
                    70:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FE:94:BA:A3:5B:13:2E:6C:15:50:0C:58:2A:06:73:77:D7:E9:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/4622086b-484d-3a11-990d-8d78572ad2fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.36.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:8b:a5:61:b0:85:9d:49:b1:20:1a:62:28:c2:48:18:d1:6b:
         3d:bd:b3:33:18:ec:a5:2d:8f:66:6c:d3:03:e3:6e:64:39:c3:
         7d:ba:3b:7d:43:9f:a5:21:00:87:fa:67:53:18:85:e2:4d:98:
         64:3d:09:26:7b:07:1c:97:fe:2a:f4:59:35:3c:18:2c:be:af:
         1a:2e:16:1a:12:9c:63:d0:e6:96:11:ee:73:11:bc:d0:38:81:
         31:01:38:92:f5:0e:2e:70:95:e0:25:e5:f1:21:63:a6:ee:c2:
         16:06:28:ab:a4:67:b1:99:fe:e6:90:a0:65:3a:18:c9:2e:81:
         57:2d:13:75:26:73:f9:63:72:d3:36:8f:59:e1:ea:64:8a:7b:
         4d:93:5b:7b:42:7a:ab:ba:7e:27:d9:82:f2:c0:d6:d2:dd:e3:
         b7:85:2a:fe:97:76:56:4e:51:17:8d:2c:80:37:01:30:67:7b:
         56:02:1e:85:63:58:84:65:b2:dd:bb:24:56:fb:97:6e:cb:cd:
         d2:d6:b5:9e:48:a5:dc:c0:fa:d3:c5:a7:c8:0d:b7:ab:54:0d:
         9a:3d:35:79:a3:0d:f9:96:8f:ee:65:97:bc:99:8f:08:b8:3b:
         93:92:4a:ba:34:fc:c5:36:95:df:94:24:61:bf:06:52:2f:9b:
         02:ca:5f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:46:51 2025 by rpki-client