Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/fb782dca-b91f-32ae-8beb-3964d1a7981d.roa
File:                     fb782dca-b91f-32ae-8beb-3964d1a7981d.roa (raw, json)
Hash identifier:          BA2Gk4UXJ1zdY33nEFL9+JuW8DXV0CyDm3AEKF7YEz8=
Subject key identifier:   FC:5C:72:D2:07:B1:2C:80:E3:41:98:3D:99:C6:83:01:BC:1C:A5:BF
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F432858496054182414C419F3D9FA8F00
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/fb782dca-b91f-32ae-8beb-3964d1a7981d.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     396982
IP address blocks:        104.36.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:18:24:14:c4:19:f3:d9:fa:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=c21ce05b-aff2-46f8-b016-648084303cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a2:06:d4:e1:ce:10:77:98:3f:92:84:fb:82:
                    bb:52:b2:0f:a1:23:e6:59:15:4b:65:4d:05:ac:4e:
                    44:f7:b3:61:3f:84:eb:f8:c9:40:f6:73:2a:3e:76:
                    50:78:5b:52:6a:d8:0a:4b:e9:92:c6:8c:fa:fb:be:
                    96:08:1a:26:4a:55:67:00:91:a1:9f:3d:6c:82:c7:
                    96:37:25:92:2a:4d:4c:46:18:e5:13:a3:24:d1:19:
                    ac:62:d6:11:2d:cb:58:d2:ca:92:bc:d1:fb:a9:5c:
                    e6:3e:ee:ed:37:5c:61:88:c7:9e:32:35:5c:dc:33:
                    5c:99:c7:83:8a:b9:1e:a6:26:d9:0b:f9:70:dc:3c:
                    dc:68:15:ff:3d:33:91:a7:61:4f:14:9f:a5:cb:93:
                    aa:27:9f:aa:9f:d1:b9:51:4c:fb:56:3a:b6:86:4e:
                    33:e0:d2:bc:1f:75:2e:31:81:c3:b5:b9:85:d2:ba:
                    3d:d1:fd:9c:4d:00:0a:dd:0b:83:65:44:83:da:8c:
                    e7:96:fb:04:88:9b:b0:ef:1f:4d:5c:04:3a:01:71:
                    c4:25:96:d9:38:06:2f:a8:6c:08:87:24:cd:54:9c:
                    d0:c9:84:7d:c5:32:13:9f:3a:62:a8:98:be:8f:11:
                    84:62:83:7d:2b:17:c1:2b:ac:ab:2e:e3:c4:20:c8:
                    bd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5C:72:D2:07:B1:2C:80:E3:41:98:3D:99:C6:83:01:BC:1C:A5:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/fb782dca-b91f-32ae-8beb-3964d1a7981d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:14:60:9c:72:ad:81:1c:d9:70:b7:c7:92:6c:39:04:78:af:
         8e:0b:8b:39:76:4a:f7:a7:7b:b6:8f:f0:41:e4:ba:b2:b4:bb:
         ac:1f:d7:c6:7c:02:f3:b5:6b:2b:5b:c9:14:36:47:d7:66:c8:
         a6:0a:5a:7b:a1:1c:54:b3:f5:44:7f:30:42:b2:a0:60:87:10:
         af:c8:f9:83:40:be:10:63:76:9f:a1:c9:a2:a9:37:8e:7a:46:
         56:24:c2:d8:6c:13:ea:33:d3:28:e5:99:fb:94:f3:11:1e:28:
         5a:7a:80:61:81:fd:ac:87:99:84:5b:0d:e1:17:b2:04:71:26:
         f5:35:09:90:9a:f7:96:32:8b:88:50:d2:e6:bf:bd:00:9c:c3:
         f1:78:33:0d:e0:8b:69:06:da:30:f3:64:07:fa:4d:70:fb:77:
         62:44:3c:49:58:ec:ab:b3:6c:8a:b5:7b:b1:d6:dd:b1:66:ff:
         a0:d5:96:da:69:44:0e:4c:d5:4a:cb:73:66:fe:9a:8e:e2:f5:
         f3:0a:47:b8:d8:b0:f9:fb:2b:b0:f6:ee:ba:83:3c:c1:b3:24:
         05:28:99:ee:97:72:49:23:a1:4a:c3:39:07:ca:3b:26:b1:cb:
         25:ce:e6:61:1c:f5:0b:c4:21:2b:bb:22:c5:9b:c7:85:e4:15:
         98:d4:5e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:54:18 2025 by rpki-client