Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/26c4b3be-913f-3a33-ad6f-7c99d89d34c0.roa
File:                     26c4b3be-913f-3a33-ad6f-7c99d89d34c0.roa (raw, json)
Hash identifier:          6PjhHhcAUm3/JpU31JQeHpWGTSLAe2izQ/pEHukxmAE=
Subject key identifier:   9A:49:B1:BC:EB:33:23:A7:27:F9:DA:D1:E3:E9:22:0C:2A:31:7E:DC
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F432858498E64753F709EF1D06F5BCF40
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/26c4b3be-913f-3a33-ad6f-7c99d89d34c0.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     210630
IP address blocks:        104.36.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:75:3f:70:9e:f1:d0:6f:5b:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=0aa6bf8f-d51a-4432-b6f7-3530081c8c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f6:50:93:6c:2b:21:fd:c1:bd:c7:af:ca:21:
                    e1:3d:fb:84:bd:9a:76:36:34:d5:76:f2:5e:7c:71:
                    5f:59:75:6a:cd:fc:a7:dd:d7:51:c9:3d:a3:cf:1f:
                    c5:1c:bc:1c:d1:cb:dc:2d:3b:5f:99:04:aa:91:d2:
                    56:66:21:90:c9:20:3e:dd:62:17:a4:fe:7c:66:92:
                    a4:09:3e:f1:a0:3e:fa:69:c0:75:81:c4:91:7c:11:
                    71:0a:0d:fd:35:dd:df:3b:79:87:56:81:6d:18:70:
                    1d:54:11:61:24:78:9e:4f:ac:cb:a8:81:5b:f7:09:
                    a3:48:de:4d:3c:0e:be:9d:1a:ca:a4:88:4f:8d:44:
                    e1:c0:d0:fa:fa:c4:3f:c7:7d:02:fc:12:0e:98:5a:
                    b6:07:03:47:f9:33:96:2e:53:12:d4:74:4e:0f:d3:
                    3f:22:bd:c1:f4:52:69:a1:1d:b9:2f:1f:cc:b8:70:
                    fa:45:fe:4a:d8:e7:5a:df:ff:47:ef:7d:a9:02:65:
                    f9:b5:b9:fc:56:3b:7d:0c:55:9c:fa:8a:f3:24:19:
                    97:ba:31:0e:b6:04:c9:c7:24:5f:09:b6:89:c4:1f:
                    61:74:d8:88:d7:3d:f0:71:b7:ff:1a:59:13:50:74:
                    a8:11:a2:d0:81:39:48:ad:ad:ec:00:76:aa:ab:37:
                    b5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:49:B1:BC:EB:33:23:A7:27:F9:DA:D1:E3:E9:22:0C:2A:31:7E:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/26c4b3be-913f-3a33-ad6f-7c99d89d34c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:b5:aa:45:23:ce:7b:7d:91:1d:3e:a9:fd:54:2d:57:40:d5:
         cf:e6:e7:28:6e:bf:47:4a:ee:b2:47:82:b4:da:e0:41:9f:67:
         18:e8:3b:3b:aa:4e:ae:21:3e:63:fb:34:30:bc:ff:7c:d3:2d:
         98:19:91:45:69:04:09:66:5b:ba:80:36:bf:3d:59:12:77:09:
         93:ff:13:e0:6a:30:48:be:4b:32:5c:4f:85:3b:c4:91:81:55:
         e0:87:de:9d:b6:ba:5a:41:93:2b:21:90:ed:16:b8:f7:c5:c6:
         56:5c:f3:7a:ae:78:3c:69:35:b0:da:64:00:7b:29:9a:f8:ad:
         66:66:0c:60:5f:09:5a:39:82:8d:4b:86:0b:ec:80:12:d0:d6:
         8e:68:86:8b:c0:1e:ac:31:ad:b9:be:aa:a9:17:e7:7f:35:6b:
         89:4d:ef:88:58:59:4a:c5:5f:6a:54:23:b2:f0:9f:f1:8c:c8:
         43:f0:ca:83:e6:a0:33:94:63:c7:1a:e9:58:18:a0:e3:87:7c:
         92:8c:04:b1:dc:81:42:d0:16:b7:8d:fd:3f:ad:b7:d1:b9:e9:
         58:29:5f:46:1e:94:c1:94:9c:3d:2d:35:f8:d8:5e:c2:98:60:
         ce:6e:4b:a9:c2:cd:11:be:1c:0a:1f:44:e0:93:95:42:77:9a:
         ef:95:79:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:47:51 2025 by rpki-client