Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/e465363d-6fbe-3665-ac6a-c10d319a38ee.roa
File:                     e465363d-6fbe-3665-ac6a-c10d319a38ee.roa (raw, json)
Hash identifier:          12VfwpV4RNPAKBtNrJlILh6NAuJ5A+mvGETe38uo91M=
Subject key identifier:   06:58:62:9E:DB:EE:AE:23:7A:8E:1A:14:47:9E:A1:47:DB:9C:B2:70
Certificate issuer:       /CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
Certificate serial:       010D0C9F43285848E2D11C638B3A5D62F6ACEA00
Authority key identifier: 2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/e465363d-6fbe-3665-ac6a-c10d319a38ee.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        104.36.208.0/21 maxlen: 24
                          2620:12f:7000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:1c:63:8b:3a:5d:62:f6:ac:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=c5b8c114-822e-4b8e-8ab1-f90542a5433e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:91:18:9b:e9:2a:ff:1c:af:a8:de:73:00:
                    6b:8c:a6:77:75:30:96:1d:bf:b3:24:7a:0a:96:b3:
                    4b:5c:e1:94:aa:a3:1f:81:a4:d3:39:fe:e7:a0:ee:
                    43:07:43:f8:7f:d8:71:78:bc:40:30:a2:cb:4c:9f:
                    c4:3a:7a:94:96:cb:97:3a:54:38:7a:65:13:95:fe:
                    d9:6b:84:51:c0:dd:94:f5:2b:08:f3:7f:fd:a5:50:
                    74:fd:9d:25:0f:cf:a7:93:f1:c1:5d:30:87:d4:d9:
                    39:bd:df:08:dd:87:0f:bc:77:4e:5e:25:f6:7b:3c:
                    8a:3c:28:c9:79:37:87:da:33:7b:52:44:ec:a9:fe:
                    ea:9b:be:fe:c4:e8:06:e3:87:d9:84:ce:eb:5a:a6:
                    bb:ad:df:e9:50:c1:f1:75:dd:99:00:58:12:55:30:
                    d5:bc:ca:6c:f9:1e:39:b2:65:8d:1c:d1:1b:5c:a8:
                    20:73:a9:22:99:32:5e:ae:32:30:d3:48:95:46:5a:
                    18:52:81:1b:0f:b7:9e:59:82:e9:06:2e:fa:37:8e:
                    70:ff:09:11:80:6f:04:9a:8f:31:39:b1:ac:f1:c2:
                    6e:80:b5:d9:0e:58:69:ac:63:9b:32:51:b6:b2:97:
                    3e:eb:c7:e0:0f:d1:34:b5:ba:a6:7f:a0:db:b5:01:
                    3e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:58:62:9E:DB:EE:AE:23:7A:8E:1A:14:47:9E:A1:47:DB:9C:B2:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/e465363d-6fbe-3665-ac6a-c10d319a38ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.208.0/21
                IPv6:
                  2620:12f:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:4d:4d:99:0f:2b:7b:ad:e8:65:06:d3:6e:bb:ae:03:3d:5a:
         89:e0:47:b1:86:cb:b6:b3:ab:df:5a:be:39:ab:8c:80:55:02:
         ad:51:24:a2:02:80:41:81:95:7c:ec:54:4c:4d:a0:13:d8:45:
         09:92:da:b3:28:61:ac:78:a5:35:84:12:46:34:6c:fd:18:9a:
         b4:e1:50:d9:7b:43:f3:66:6e:e4:35:31:41:51:e4:29:bd:79:
         5e:a8:67:dc:b0:72:96:d2:c2:9d:80:42:11:6f:46:f6:7a:0b:
         c6:8d:0f:7e:57:67:b8:30:15:52:a3:ab:5c:23:bc:dd:28:63:
         e9:45:be:f6:20:eb:6f:54:6a:e9:3d:4c:88:62:23:59:54:7b:
         e7:6b:15:86:e2:11:2d:f8:18:78:4c:ec:e2:1b:2d:2d:45:1d:
         90:56:d2:67:f5:1e:54:37:53:98:56:da:69:20:c3:9f:f1:66:
         a7:7a:c6:2d:18:e1:b1:47:56:8a:d7:2f:26:a3:a4:ed:5b:9c:
         d4:fd:0b:65:5d:c9:00:d9:10:bb:4b:6f:31:5d:dd:8b:73:1b:
         e8:82:58:5f:6a:9e:95:c1:6b:ae:2b:5f:01:1a:00:39:73:12:
         ab:c4:62:95:b9:e0:df:c8:de:ee:10:36:e1:8d:c6:cf:7b:27:
         4f:0d:02:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:33 2025 by rpki-client