Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa
File:                     2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa (raw, json)
Hash identifier:          Lk8DsrouthmUx7M7rezykH3BJDoX6la/zXmsfOBuODw=
Subject key identifier:   0F:F3:8D:C3:2F:33:37:BF:19:EF:A3:18:FF:7F:50:CE:A6:AB:25:14
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584A46A5AA1C24F0DA2A62F79EC0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     36829
IP address blocks:        104.156.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:aa:1c:24:f0:da:2a:62:f7:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=c6ecff32-c890-49ee-ac66-aee906a7f4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:ab:90:32:f8:d5:b0:9b:f6:7a:18:17:45:
                    01:cb:ef:a4:43:74:f1:ad:99:a3:2f:76:05:55:2e:
                    98:52:1a:ca:4c:b9:68:96:65:17:81:7b:26:13:bc:
                    cf:7c:ac:8e:74:c1:c7:e5:21:86:81:8b:e8:ce:af:
                    42:a4:97:14:48:23:29:f9:3f:17:d1:7c:b1:07:fb:
                    78:ee:83:de:a4:d4:a2:0f:fe:e9:09:97:39:56:e6:
                    07:b9:ab:35:de:6a:1f:a5:76:37:cb:0e:bf:92:b3:
                    74:89:83:b3:21:72:74:ee:d9:d6:ce:20:20:e0:2b:
                    e5:26:cc:eb:72:c0:a7:52:2f:93:e9:aa:63:0e:41:
                    2e:ea:26:09:24:8b:a7:e3:72:64:a4:d2:33:1d:35:
                    13:4f:cf:18:8a:f9:e8:bf:27:69:3a:a9:f5:58:ee:
                    8b:56:6a:16:88:9c:bd:0c:2f:48:ae:cd:42:38:5a:
                    49:69:c6:40:ee:fa:bf:58:c6:29:fc:64:2c:58:d9:
                    d7:bf:83:84:fc:a1:12:3a:97:2f:ec:7f:7c:55:45:
                    5c:63:19:0c:61:9e:89:57:d9:3b:64:56:76:de:91:
                    28:81:df:e3:28:aa:9f:09:cf:f9:11:6c:b0:10:cb:
                    68:02:46:f6:f3:18:a7:26:a2:bd:ff:43:c3:84:a5:
                    e1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F3:8D:C3:2F:33:37:BF:19:EF:A3:18:FF:7F:50:CE:A6:AB:25:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/2d112227-ccc7-32dc-af8a-99b27b67c1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3e:1e:5f:28:63:09:1a:b8:65:e3:bd:61:f7:d7:6b:7d:06:
         c2:ce:76:71:16:28:1c:0a:26:04:76:fd:ae:26:4b:17:d1:b8:
         22:83:02:66:47:f6:31:8f:68:78:f1:94:83:f6:c9:45:c3:f5:
         0b:5c:2e:a8:80:b1:5e:88:cd:d2:8b:63:43:af:e5:54:01:48:
         17:82:9a:ca:fe:91:c3:ea:a5:61:1e:0d:f3:1d:23:12:a1:f0:
         69:13:15:f7:8d:fe:af:f5:66:97:21:36:4e:41:f3:e1:24:d7:
         97:ff:cc:34:f9:8e:23:cd:af:30:aa:1f:a6:86:26:a3:64:0f:
         0c:76:9f:3d:d7:ef:68:7b:34:cc:cc:61:41:6c:21:fc:25:f1:
         08:1d:b1:db:46:e3:05:ef:0c:a7:65:cc:36:5b:8a:e8:e7:b4:
         42:97:c5:22:f7:e4:43:36:2e:67:5f:c0:36:2e:e1:4a:57:7d:
         a6:44:35:9d:38:a7:19:f4:57:25:00:d7:44:eb:8b:8e:9c:3b:
         06:a7:a4:89:09:31:c1:70:c9:13:99:11:f5:37:ea:02:6d:6a:
         85:d1:dd:77:82:99:2b:4a:72:92:dc:1b:c4:73:91:35:e8:ce:
         3d:f7:d2:7c:c0:d3:5b:47:00:25:11:57:9c:95:af:f1:ac:5d:
         a7:91:ef:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:42:22 2025 by rpki-client