Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1/aac4b3d7-382a-344c-bd79-c61663ab06c4.roa
File:                     aac4b3d7-382a-344c-bd79-c61663ab06c4.roa (raw, json)
Hash identifier:          IcS6moHjd5jRppfV0WwxzgN8e9tiOALlF+5TBEVy+n0=
Subject key identifier:   FF:AD:96:42:BE:47:85:FE:48:04:D5:74:6A:1F:1A:8A:C7:E9:13:EB
Certificate issuer:       /CN=78d8ad5a-4674-49ab-87c8-ced6ef192bd1
Certificate serial:       010D0C9F4328584A629092D39EE91685F5640E80
Authority key identifier: EB:F0:05:0B:30:96:19:41:1F:C0:18:7B:EC:AA:1C:44:4E:EC:64:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1/aac4b3d7-382a-344c-bd79-c61663ab06c4.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     50837
IP address blocks:        104.36.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1/78d8ad5a-4674-49ab-87c8-ced6ef192bd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1/78d8ad5a-4674-49ab-87c8-ced6ef192bd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:92:d3:9e:e9:16:85:f5:64:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d8ad5a-4674-49ab-87c8-ced6ef192bd1
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=8270ed77-c074-4225-9341-9532b33c1852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:98:25:01:b2:23:24:0f:bd:cb:1e:b0:7b:74:
                    5a:0a:0e:8e:7d:08:58:51:17:12:ad:5f:d9:e7:c8:
                    00:99:9c:7a:d5:5b:12:ec:10:ec:8f:c2:56:ce:44:
                    7c:24:5d:b1:ca:ef:1f:d4:78:7a:05:34:f6:84:3c:
                    8c:86:05:d1:77:e1:3c:60:ec:7f:ee:1e:e1:b7:4b:
                    19:a8:e2:b2:c1:41:f7:7d:c0:48:e2:97:65:e2:fd:
                    c5:3f:6a:f5:21:cc:dc:13:ad:56:33:bd:d5:04:62:
                    78:15:a5:57:d5:6a:03:72:e0:2c:b0:39:67:db:e4:
                    62:f3:89:ca:5c:36:2e:18:63:4b:a7:f5:8b:fa:18:
                    20:d6:07:b7:5e:84:13:4d:0a:8e:96:e7:81:6a:42:
                    c0:bf:98:df:94:5b:64:7e:75:6e:1a:cb:8b:43:28:
                    e9:16:59:9a:d0:7f:95:f1:5b:56:c4:6e:28:98:a8:
                    74:42:96:b9:e8:62:9a:65:cb:f7:3b:4e:3d:10:06:
                    25:e3:e5:d7:68:7e:0a:32:1e:64:f8:ed:f0:fb:1d:
                    4f:02:b2:c9:4a:ba:b1:09:74:8d:86:46:bb:4b:be:
                    50:66:53:d7:39:0a:eb:6b:5f:90:12:b7:d6:f6:ce:
                    ff:62:4d:04:d3:cd:fd:fd:2d:b8:75:bf:fb:b7:36:
                    cc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AD:96:42:BE:47:85:FE:48:04:D5:74:6A:1F:1A:8A:C7:E9:13:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1/aac4b3d7-382a-344c-bd79-c61663ab06c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1/78d8ad5a-4674-49ab-87c8-ced6ef192bd1.crl

            X509v3 Authority Key Identifier:
                keyid:EB:F0:05:0B:30:96:19:41:1F:C0:18:7B:EC:AA:1C:44:4E:EC:64:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78d8ad5a-4674-49ab-87c8-ced6ef192bd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:49:a8:99:a8:aa:dc:5b:e0:fe:06:ed:f9:85:9f:5a:19:90:
         ad:83:f3:4b:22:89:28:7e:97:de:ea:06:43:1d:2d:6a:a4:e6:
         34:e6:e4:79:9b:fa:ce:ec:30:7e:f0:34:d2:a5:38:26:91:d7:
         e8:05:2b:9e:8d:51:2e:1c:9c:7e:19:29:e9:71:e1:20:51:49:
         23:bd:4a:36:7a:64:26:2a:b6:02:62:d8:6a:9b:e1:c2:10:51:
         df:4d:a5:3b:06:f8:d8:9a:d5:9f:89:5b:ef:cc:01:a8:aa:20:
         f2:98:45:48:53:2c:20:05:94:09:98:f5:31:60:cf:39:f9:70:
         6a:d3:f6:21:86:c3:5c:db:58:a6:7d:95:36:69:72:9a:fb:87:
         af:40:5b:93:a5:af:13:62:bc:3e:28:d8:8d:8f:5b:22:85:9c:
         5f:39:9a:a9:fc:85:7b:cc:bd:c4:cc:95:7e:21:73:62:c0:9f:
         35:43:fa:82:9d:b8:62:26:71:27:8b:49:f3:f9:ea:34:ed:b1:
         3e:43:dc:ce:2f:7a:a9:a2:78:78:c0:4a:84:b2:14:dc:2b:96:
         d0:cf:3e:b0:8c:8a:08:01:af:be:77:18:52:b2:22:0c:70:23:
         41:04:ac:35:1d:62:f4:e5:4e:8d:19:af:e5:e7:c7:e9:21:83:
         36:30:dd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:40:21 2025 by rpki-client