Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c/ef7ff1da-0982-368b-81ab-571fcd6ea7e0.roa
File:                     ef7ff1da-0982-368b-81ab-571fcd6ea7e0.roa (raw, json)
Hash identifier:          DoJT7VBwH89VbQHUloch1j+kj6Txo7hzrvlFE/CBsOE=
Subject key identifier:   02:67:B1:4E:16:DA:B8:B5:86:B3:FA:56:E1:95:87:F6:32:61:81:29
Certificate issuer:       /CN=40b182ba-ba4e-4386-b8b1-4724485bfc5c
Certificate serial:       010D0C9F4328584AECC12D058820AAA45451FE40
Authority key identifier: AB:63:4D:D3:43:AD:D4:80:79:CB:62:E1:C5:B1:4A:E4:46:E0:96:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c/ef7ff1da-0982-368b-81ab-571fcd6ea7e0.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     14296
IP address blocks:        104.36.227.0/24 maxlen: 24
                          2602:80e:8000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c/40b182ba-ba4e-4386-b8b1-4724485bfc5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c/40b182ba-ba4e-4386-b8b1-4724485bfc5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:2d:05:88:20:aa:a4:54:51:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b182ba-ba4e-4386-b8b1-4724485bfc5c
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=82647c83-eb30-4ecf-9589-5fea9d2c4193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:b3:0f:f5:28:44:86:e2:06:16:34:22:a6:
                    75:4a:53:92:78:0f:cd:35:bf:59:3c:f0:75:bb:e8:
                    e8:4a:46:02:5b:d3:c5:d6:d4:ba:80:e1:3f:7d:fd:
                    13:4d:75:fa:b0:88:56:06:15:65:18:56:a8:7d:4b:
                    c3:87:3f:7f:ee:6b:a5:05:cb:43:ae:81:3c:fa:dd:
                    d8:6a:30:89:9d:ae:58:16:3b:78:08:ca:04:de:09:
                    56:ff:0a:5d:e0:2d:3b:e9:76:f0:da:5e:39:a9:bb:
                    aa:fb:69:5b:a3:53:f8:54:ef:b1:d2:c5:61:1f:84:
                    c8:7e:d1:bd:47:23:72:81:b0:55:07:34:9a:00:9e:
                    28:3e:4f:f3:fa:54:85:ff:3c:1f:f8:3d:62:25:34:
                    3b:3d:51:82:05:12:02:1d:ad:cc:20:14:e3:4e:a6:
                    b6:e1:0e:70:4f:5a:2b:53:8b:a5:79:d5:85:16:79:
                    50:fb:ee:2e:97:0f:0e:87:eb:f6:ab:b2:bf:49:27:
                    e0:c8:03:cc:2e:68:00:73:87:9e:e1:61:0f:0a:76:
                    9e:d9:00:c4:35:ba:60:2b:64:db:c9:df:65:1d:2f:
                    21:f7:c4:e4:2a:ba:03:31:19:e1:a3:2d:1f:81:94:
                    ee:06:0d:d5:a5:fe:24:4e:21:30:2a:c1:be:ba:84:
                    58:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:67:B1:4E:16:DA:B8:B5:86:B3:FA:56:E1:95:87:F6:32:61:81:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c/ef7ff1da-0982-368b-81ab-571fcd6ea7e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c/40b182ba-ba4e-4386-b8b1-4724485bfc5c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:63:4D:D3:43:AD:D4:80:79:CB:62:E1:C5:B1:4A:E4:46:E0:96:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b182ba-ba4e-4386-b8b1-4724485bfc5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.227.0/24
                IPv6:
                  2602:80e:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c2:4d:e7:35:48:42:dd:dd:9a:52:67:0f:34:2d:f4:d6:ad:
         f6:10:c9:fe:43:98:4e:cd:3c:ae:26:84:50:bc:af:09:33:ec:
         d4:07:d4:a1:33:4a:49:d6:d0:ed:ff:ba:e0:48:9a:a4:73:bb:
         e6:67:4c:be:e9:9b:e4:c7:13:db:9b:c1:cd:b5:63:ff:24:d5:
         f4:70:10:70:e6:1d:18:65:c1:98:88:8f:8d:aa:59:8b:03:9c:
         a1:f5:cc:17:1f:15:2b:5c:5c:32:85:a1:5e:57:69:a4:2c:b5:
         34:19:a8:18:71:02:18:dc:65:27:7a:55:14:67:a1:ed:c8:05:
         9a:3f:64:ae:04:a5:f2:62:34:a9:c4:4a:94:c5:19:29:dc:e8:
         dc:ef:ac:16:d3:9a:79:ee:9b:9d:44:c2:fb:53:c6:a0:08:9a:
         80:76:a8:3c:39:77:36:d7:53:69:e1:76:39:98:9a:9a:4c:80:
         f1:d5:7e:fa:8f:1a:45:84:5f:43:f8:c0:13:be:88:68:70:ee:
         fa:bf:1c:74:24:7e:88:70:1d:d3:c7:7f:b1:b9:14:a7:15:50:
         4e:97:df:fe:86:e4:42:e5:3e:8a:01:1a:df:29:44:74:5c:2c:
         b4:32:a5:dd:2f:40:98:35:d6:72:8d:ba:9a:47:19:99:91:d9:
         38:8c:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:29:41 2025 by rpki-client