Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/36550130-e332-3d46-995b-52a6afa4ea05.roa
File:                     36550130-e332-3d46-995b-52a6afa4ea05.roa (raw, json)
Hash identifier:          Xeu6F7D8UzqTi4pLayuWpSl5Ijsv8bmmvIJcBQaDlIA=
Subject key identifier:   92:97:CE:4F:50:3B:FF:28:80:80:E4:B7:0B:28:30:B7:31:AE:44:85
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F43285849B9AA04C4AD65B40D59D7DAC0
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/36550130-e332-3d46-995b-52a6afa4ea05.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     8014
IP address blocks:        204.236.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:04:c4:ad:65:b4:0d:59:d7:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=4e032ad7-cea4-40fb-b36b-b9313d3749f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2b:f5:4d:5a:7d:2b:0b:05:35:a3:f4:f3:5f:
                    1d:3a:da:46:03:00:e1:7c:4c:35:73:ae:37:ed:37:
                    c6:72:4e:3c:48:af:3f:5f:ab:fa:33:9c:4d:6e:66:
                    fa:ec:ed:6d:5e:b2:9e:39:48:3f:8c:f7:17:04:5c:
                    bd:53:e8:00:a5:10:c3:cb:67:2e:84:57:38:45:25:
                    60:3a:ff:c0:dc:61:fc:87:5e:b3:27:f1:0b:31:7c:
                    f0:65:ac:c9:c1:1b:42:fb:cd:1c:5e:d9:00:12:54:
                    80:fc:15:14:95:94:18:58:0b:53:18:44:ec:f3:51:
                    c2:8d:54:a3:9b:90:1f:f3:3b:03:b6:98:35:24:b6:
                    a1:84:0c:cd:42:94:fa:11:3e:92:f1:05:44:4a:cf:
                    f4:83:61:6d:c7:57:8d:17:7b:1b:10:93:68:59:8a:
                    aa:a4:de:8e:be:0c:df:30:09:32:b5:ac:dd:5d:78:
                    5d:55:91:ba:a6:66:84:25:fb:58:3a:1f:1d:dd:d6:
                    a6:59:37:f8:4c:64:bd:e9:53:85:25:c2:a5:00:ab:
                    bf:2a:89:1e:8b:5a:80:6e:00:e1:53:47:12:dc:ba:
                    29:0f:e9:f0:c7:c8:68:5e:ed:45:03:ca:1e:b9:cb:
                    b9:69:0a:57:47:d1:74:b1:b9:b8:41:8c:0c:34:be:
                    b3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:97:CE:4F:50:3B:FF:28:80:80:E4:B7:0B:28:30:B7:31:AE:44:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/36550130-e332-3d46-995b-52a6afa4ea05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.236.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f2:4b:62:1b:7b:95:bc:c9:db:1e:23:4b:70:d0:24:9c:0b:
         01:70:18:75:47:db:75:15:0a:8a:89:68:49:56:68:86:2d:48:
         e4:35:bd:63:60:a6:09:00:92:8e:e2:36:6d:c9:ab:e2:11:d7:
         e6:d0:67:8f:f7:6d:36:e7:ba:25:c1:4c:85:82:40:0e:10:f1:
         22:81:8d:f8:fb:28:9f:76:d3:8f:d8:05:b6:1f:e7:1b:56:8c:
         90:38:61:20:c9:0e:e5:5b:84:ae:8c:36:b5:fb:44:d6:cb:16:
         68:0f:86:2a:c1:fd:0a:f9:89:6e:c7:4e:33:12:b5:81:6c:e3:
         0f:22:40:68:2b:33:ab:2d:e4:39:4f:d5:1a:03:b8:d0:82:f2:
         e3:3e:b6:fd:d0:55:eb:9d:68:80:cc:02:ff:81:0d:83:56:36:
         0f:77:69:34:85:ae:e2:1f:3f:49:ee:10:1a:33:dc:ae:bf:78:
         c1:a1:21:fb:76:c7:3f:fd:c1:0d:79:ff:06:7c:8c:75:c0:35:
         5f:d6:55:64:f3:c7:d4:6a:b4:b5:25:c4:af:bf:cc:5c:f7:2a:
         f5:98:b0:62:f1:55:bd:9b:3d:ba:24:87:2b:53:9c:c1:90:2b:
         ed:db:51:a5:ec:19:47:d7:89:ed:19:62:73:7e:58:0c:e1:71:
         fb:c4:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:01 2025 by rpki-client