Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/36feb70c-e0ce-3f09-aa78-d00230799f48.roa
File:                     36feb70c-e0ce-3f09-aa78-d00230799f48.roa (raw, json)
Hash identifier:          cw6WNBJOQ4q/aSRqHBYZgS6d8zpiuIYdqyOOLZM7g5g=
Subject key identifier:   67:A2:03:F6:FE:2B:AD:53:0C:04:6F:71:B6:7D:6E:75:73:7E:03:56
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F432858487E506337DEC78ED197CB33C0
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/36feb70c-e0ce-3f09-aa78-d00230799f48.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     396026
IP address blocks:        208.81.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:63:37:de:c7:8e:d1:97:cb:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=ed8463d3-a475-44d4-b5e3-c3a3edfcc680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a2:b5:37:fd:b0:84:d1:aa:10:3e:f6:fa:a3:
                    ec:05:90:04:54:2a:df:da:e0:cc:d0:b2:51:5a:17:
                    db:82:75:e2:8a:f1:b9:14:56:d2:ef:38:61:fb:60:
                    56:3f:95:7f:42:fc:f9:4d:a7:9e:ce:27:17:ee:b3:
                    67:d5:e3:86:73:b1:4f:91:97:d8:2c:a6:4c:10:4e:
                    61:40:cf:ca:d0:dc:52:49:fe:b2:1e:12:df:fd:06:
                    df:80:51:12:0e:b2:bc:2b:19:e1:70:1a:8f:f4:76:
                    06:29:80:11:27:46:28:3a:eb:b6:e5:34:af:78:a8:
                    f3:a4:ab:12:fe:7c:be:85:7b:d3:76:ff:82:57:f8:
                    cf:87:5f:17:2b:28:cb:dd:46:ed:c4:06:3c:20:62:
                    cf:cd:16:09:d2:a3:a5:4d:c4:8a:0a:a4:6f:f8:da:
                    f8:37:99:c2:07:3e:b0:1e:48:7a:eb:15:3a:b1:50:
                    6e:15:f5:42:d9:6b:c7:19:2c:b7:27:c5:82:bd:f1:
                    5b:e8:b7:56:14:27:7a:e7:a6:5a:ac:03:a8:77:4c:
                    79:cf:1b:51:fd:3c:2e:c0:ab:ba:e4:74:d8:09:47:
                    63:41:f3:15:8e:2f:f0:8f:1d:a5:25:6c:16:91:0d:
                    43:3c:56:8b:a8:b4:d2:8b:2f:88:37:0d:d9:8e:20:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A2:03:F6:FE:2B:AD:53:0C:04:6F:71:B6:7D:6E:75:73:7E:03:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/36feb70c-e0ce-3f09-aa78-d00230799f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e3:b9:0c:e3:01:10:a0:1d:64:65:3c:81:04:ef:c8:84:ed:
         83:68:d6:2b:9b:16:1c:c6:de:ac:39:ad:5e:23:aa:ff:5f:c5:
         72:b3:5e:a0:92:c0:06:e1:a2:1e:f0:e9:d0:71:6e:42:fe:9d:
         07:65:91:74:ad:05:ec:6d:c1:da:33:20:16:51:d0:5d:a3:83:
         e1:19:10:2f:d0:7d:5c:3b:93:29:c7:8b:02:a5:32:3c:40:a3:
         0a:cd:f7:dc:15:07:cb:d2:c5:8d:13:53:84:67:80:aa:96:25:
         67:8d:87:bf:6d:41:7a:38:23:0e:e0:76:aa:9e:cf:3e:0e:cb:
         89:7d:9e:d5:98:5d:9d:c3:01:13:f3:54:78:e9:6c:ec:71:f1:
         ed:0a:1c:05:d0:aa:ff:58:32:fb:c4:97:d1:cb:96:6f:b0:a3:
         39:41:7d:c5:ca:98:9c:75:13:f5:c8:97:7d:dd:df:88:fc:33:
         a6:2e:49:8f:31:a6:e7:1c:28:43:02:c1:cc:85:d6:ce:47:5f:
         be:a3:82:20:8e:e3:ae:69:93:fc:20:ae:e5:44:b8:16:69:00:
         d9:a0:e8:28:3e:e8:f8:71:78:bc:3b:bc:d7:f8:58:ba:f7:16:
         36:36:22:ef:90:6b:5c:8b:a2:f6:dc:68:a1:3e:de:d4:ca:0b:
         a0:91:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:16 2025 by rpki-client