Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/b3cca2f3-3d76-3623-badb-45a7c00bb88e.roa
File:                     b3cca2f3-3d76-3623-badb-45a7c00bb88e.roa (raw, json)
Hash identifier:          ZRVnoTHhGJ+4BmBQoSb1c6WqKiEVsVXpcSNOMEbENR8=
Subject key identifier:   28:17:24:6B:21:23:B8:0A:4F:52:25:AC:74:ED:5D:5E:59:EC:65:96
Certificate issuer:       /CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
Certificate serial:       010D0C9F43285848E2D11C5686309BA493AA9B00
Authority key identifier: 2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/b3cca2f3-3d76-3623-badb-45a7c00bb88e.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     22857
IP address blocks:        104.36.208.0/21 maxlen: 24
                          2620:12f:7000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:1c:56:86:30:9b:a4:93:aa:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=4b5613cb-5b2e-48af-841d-07e4bcceb5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:e5:41:90:cb:1c:93:cb:76:d6:55:2d:c9:
                    a8:67:46:f9:64:26:cb:26:b1:6d:12:6f:0e:f9:58:
                    e1:31:76:b5:36:f4:2e:1b:80:ac:f5:c5:df:5c:dd:
                    5f:48:6f:53:06:29:b8:42:2a:28:5c:f7:66:be:46:
                    84:0f:2b:4e:d6:69:d9:90:6a:5b:f1:d9:57:49:93:
                    f3:a5:fd:20:19:99:88:d5:a5:c2:58:71:2b:f7:98:
                    c8:8c:ed:67:e8:d5:93:be:91:3b:45:d6:af:93:18:
                    8d:6a:e4:32:55:6b:bb:93:95:9f:2d:e5:27:b3:5e:
                    17:74:71:f8:6e:f0:56:dc:ed:f1:bb:7c:84:72:aa:
                    4a:7f:ff:e1:30:56:c6:e7:f9:0b:64:45:40:8a:42:
                    ff:99:5d:9d:04:21:7e:6a:6a:5e:7f:06:99:c7:20:
                    ba:49:49:0a:2d:cb:e3:e4:64:86:5c:a7:55:ff:3d:
                    94:4c:c4:fa:b3:c7:12:14:ce:da:f9:c1:5e:aa:30:
                    5a:d5:d3:6d:c9:49:d7:33:a8:79:3f:8d:7d:02:6f:
                    3e:a1:99:f3:1c:07:30:20:d3:e2:60:cb:12:44:37:
                    f5:6a:21:cc:49:9b:29:d1:10:66:68:d1:59:b1:b4:
                    b5:bf:04:95:0f:3b:e0:db:87:9b:a4:c5:55:3e:c5:
                    1b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:17:24:6B:21:23:B8:0A:4F:52:25:AC:74:ED:5D:5E:59:EC:65:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/b3cca2f3-3d76-3623-badb-45a7c00bb88e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.208.0/21
                IPv6:
                  2620:12f:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c0:ac:e5:53:76:d6:f7:87:0f:c7:10:19:f8:b6:9f:be:74:
         d0:1e:e7:cd:83:63:e8:0d:cd:42:70:2c:2a:a0:53:1b:af:2d:
         93:40:2e:24:28:4c:56:4b:4c:eb:1f:38:09:26:4f:78:65:eb:
         34:92:32:40:e1:17:93:0b:b9:df:91:59:fb:1a:db:e9:91:17:
         07:89:df:e2:b1:df:7b:61:7a:6b:07:19:04:cf:1f:4b:6c:b4:
         1c:64:a8:44:4b:b1:fb:0e:e6:93:b1:21:37:71:ff:6d:23:0d:
         40:90:37:9c:71:d6:c6:cd:10:86:9b:93:73:1f:f1:80:d2:76:
         c3:86:78:71:c8:c8:0b:82:6e:bb:62:96:3c:15:3f:71:24:cb:
         f1:df:a7:3f:9b:9c:0b:b4:2c:e3:b5:b4:3b:c3:4a:4e:ff:f0:
         ef:6a:ea:ba:28:fc:93:1e:65:25:b8:ca:0a:36:0a:d9:14:39:
         93:10:a1:d7:81:92:9b:1b:52:bf:d5:20:c1:e0:af:f4:d3:9a:
         73:60:49:77:da:67:36:b4:ab:0a:6f:03:bb:d3:25:b2:50:2e:
         11:fb:25:c8:9f:5e:cb:88:cb:af:0d:0f:cb:ce:47:eb:f5:f3:
         b6:10:99:38:35:0a:1f:8d:06:98:19:83:fb:79:a4:c8:fc:07:
         a7:fb:8c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:10 2025 by rpki-client