Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1029c8c1-8d67-37ab-80fe-7fd21238b1e4.roa
File:                     1029c8c1-8d67-37ab-80fe-7fd21238b1e4.roa (raw, json)
Hash identifier:          If0R+AXBacXVrL//UFarpRlS+nguJZIc7ysAX6ReIXc=
Subject key identifier:   32:9F:E9:A9:37:DC:E4:58:A4:D9:86:BE:C3:61:8D:F8:21:15:E2:37
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858494B641F471B24087F98F232E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1029c8c1-8d67-37ab-80fe-7fd21238b1e4.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     13332
IP address blocks:        67.227.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:1f:47:1b:24:08:7f:98:f2:32:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=59c6393e-e7fb-42ea-8d87-404b7e7fe933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ef:8a:ae:30:8a:5e:ae:94:15:95:0a:31:61:
                    7a:f1:ba:01:6a:ac:b4:c8:21:cc:02:a0:93:6b:60:
                    3a:64:9f:bb:ad:89:72:5e:4d:7a:c3:2e:c3:76:56:
                    5a:83:0a:92:3a:2a:1f:35:fe:49:f2:06:52:ac:7a:
                    dc:7b:c8:d2:d3:c5:6f:c7:1c:4c:1a:44:c0:6d:f7:
                    e3:e8:8d:26:17:7f:29:71:ad:78:0d:a2:1b:bb:df:
                    53:04:b6:33:96:f6:b4:f9:b1:75:3b:92:a4:64:b4:
                    5d:22:eb:e4:7c:a7:2f:e1:e5:ed:de:b5:97:66:5e:
                    7b:30:05:57:75:4d:db:55:9f:cf:a8:f5:1e:0b:33:
                    83:7d:cc:53:9a:16:e3:8c:aa:3d:12:96:6c:6f:4f:
                    79:70:36:57:5d:55:b1:90:69:76:21:b2:d1:e2:3b:
                    b6:7e:e4:11:f7:7a:bb:73:78:42:bd:33:0c:da:1f:
                    16:a3:89:8a:17:11:28:53:1b:9b:47:84:07:53:59:
                    c6:c9:b3:8f:d3:2c:99:99:42:f0:ae:25:a7:bf:0e:
                    f4:dc:bf:ec:53:23:69:77:9f:a8:15:09:91:5c:76:
                    97:d6:d6:16:58:b5:fa:33:32:df:8a:5b:a6:ae:02:
                    b0:9d:85:0d:cd:21:4f:95:96:f1:d2:7a:ea:8e:b4:
                    98:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9F:E9:A9:37:DC:E4:58:A4:D9:86:BE:C3:61:8D:F8:21:15:E2:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1029c8c1-8d67-37ab-80fe-7fd21238b1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:8f:67:2b:2f:a4:63:ac:86:7b:31:d9:67:31:a5:bb:52:a8:
         c2:1c:ce:96:da:d7:d2:ac:bc:b0:20:64:92:58:ae:3a:74:fb:
         f2:c1:c0:a2:d8:26:39:57:a8:0b:ce:b9:70:0f:be:94:ef:bc:
         d2:cc:37:69:74:e2:d6:56:c8:74:f0:29:ae:60:32:8a:bb:79:
         bf:ef:d5:72:0a:08:d1:7d:92:2e:cd:2a:a1:e3:8d:20:11:67:
         96:ab:ba:fc:75:d8:30:1b:d8:eb:8e:a8:74:ab:3f:14:fd:d7:
         04:8b:ec:4a:da:d5:d4:37:d1:d0:f0:c6:f9:bc:d5:e3:f8:c6:
         6d:18:65:de:c5:a5:6a:70:4c:2b:bf:cb:01:1b:b7:0f:c0:f1:
         ec:5b:13:e3:db:57:58:42:26:75:e1:10:72:c0:49:ac:d5:ae:
         8d:77:97:7b:06:ef:41:92:08:e2:2f:8d:19:7d:91:aa:55:49:
         f2:bc:6a:d1:77:30:8e:d7:73:77:cb:4e:95:07:cf:53:27:b7:
         36:44:e1:91:63:3a:0d:48:01:08:9c:bc:3c:00:49:56:76:30:
         ef:3c:93:b1:63:3b:cb:7d:e4:ae:7e:77:e3:d1:fd:ff:1f:d1:
         5d:72:95:ea:f9:dc:f9:4c:78:79:5c:5f:ef:ac:11:04:9e:eb:
         1a:11:54:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:28 2025 by rpki-client