Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa
File:                     bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa (raw, json)
Hash identifier:          JMPVgmlReznSlfinM+cn11gtPE2N6b6Nr105rjLcK3U=
Subject key identifier:   16:53:94:32:58:61:5F:54:37:1B:21:BB:1A:02:10:90:66:07:EC:C1
Certificate issuer:       /CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
Certificate serial:       010D0C9F43285849C20A2072A361D3CC54D02080
Authority key identifier: 2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        104.36.208.0/21 maxlen: 24
                          2620:12f:7000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:20:72:a3:61:d3:cc:54:d0:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb8204eb-8ce5-4d9a-b383-b4433e8075a0
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=227c0918-c7d5-41ba-a4d2-2f23bbf4c1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:db:b0:ec:83:ae:24:ad:7e:9b:ea:48:32:
                    b8:d7:a3:5d:bc:cf:66:47:eb:63:8d:12:43:22:70:
                    b0:2c:5a:52:96:b9:0b:48:d7:df:f0:c9:f2:4c:6b:
                    26:af:61:7c:a1:32:ab:0b:c2:a9:de:61:89:e4:48:
                    36:3e:04:8b:c3:b7:c9:d9:78:1d:44:ad:f2:bd:03:
                    87:8e:ed:df:05:9a:76:14:df:b2:65:fa:a6:16:67:
                    e1:6f:db:dc:e8:ed:ad:f9:38:57:ed:5a:92:91:70:
                    5f:db:7d:95:3c:47:d4:26:18:d6:36:6b:b9:4a:e0:
                    f2:34:f6:ff:14:45:5c:e9:07:01:a2:f1:c3:77:20:
                    35:68:80:29:65:bc:c6:e9:ec:da:94:a9:79:04:46:
                    74:e2:7f:da:51:f7:9d:ec:39:71:20:ed:ae:c5:8d:
                    f3:3a:65:ff:1c:68:41:a2:59:ab:50:05:39:b4:82:
                    f1:05:4a:09:50:8e:e0:d5:9f:39:3b:b3:2c:08:72:
                    ae:3c:ff:84:76:82:98:d0:2f:02:26:be:fb:8d:ea:
                    db:06:4c:90:fc:f6:86:b7:c4:bf:e5:e4:a1:5e:3e:
                    27:30:0e:38:0b:03:f7:65:9f:f2:71:c0:c8:88:a0:
                    f0:f6:00:03:32:45:e7:a1:96:6d:3d:15:02:35:5c:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:53:94:32:58:61:5F:54:37:1B:21:BB:1A:02:10:90:66:07:EC:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/bb993ae3-0e6a-3a6d-aca5-69edd22cf7f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:61:60:B2:3E:09:E8:97:9F:3C:2C:F5:B1:39:AB:BC:11:A5:38:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb8204eb-8ce5-4d9a-b383-b4433e8075a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.208.0/21
                IPv6:
                  2620:12f:7000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f3:f7:a5:e0:d3:b9:9b:9a:a9:a5:f5:6f:c9:1d:40:95:2f:
         8e:d6:4a:b1:ba:5f:86:f9:f0:78:db:ed:8b:e2:e1:bf:7b:cd:
         70:37:7c:c7:e4:3a:3b:28:d9:a5:fd:6f:4e:0f:e8:f1:44:61:
         27:08:68:a9:e7:88:98:ca:cc:73:d3:41:1e:bd:49:ed:d0:1b:
         b6:d9:7e:d6:0f:59:ba:ce:4d:31:72:7e:97:20:30:4e:77:8c:
         4f:fc:01:87:1d:4a:02:34:93:cf:b0:5d:08:78:d1:cf:3f:71:
         91:fa:a9:27:f8:db:64:93:86:0a:03:e4:8c:b2:db:08:2c:b2:
         bb:21:23:19:50:d3:9e:e8:15:99:74:ee:14:ba:fd:99:04:42:
         fc:7e:57:92:e9:b8:59:37:80:8a:19:c4:ab:d2:00:d3:23:d8:
         d9:64:28:4e:8b:ea:d9:82:22:be:28:a8:97:b3:57:c6:6a:58:
         a7:fe:20:b1:c9:c3:bc:16:dd:7d:6c:b1:64:f9:17:11:2e:f7:
         4b:88:e7:c0:d2:f8:d0:c5:0c:12:f4:14:94:39:24:b2:5e:b1:
         0d:0e:66:00:f6:15:0f:c6:d9:9c:40:c6:12:ec:fc:16:89:55:
         54:6c:c7:1a:24:fd:8d:53:91:c3:9e:74:a3:bc:6a:2e:78:81:
         e1:30:7f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:46:39 2025 by rpki-client