Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/164edc0d-b0e1-3e1c-8176-9e28e94286f0.roa
File:                     164edc0d-b0e1-3e1c-8176-9e28e94286f0.roa (raw, json)
Hash identifier:          zehKKcX6f27mgnM3AsnviAJbZXLsxXF+FFItF9MOyT0=
Subject key identifier:   B1:0E:22:4B:31:B0:40:FA:E2:24:78:C3:75:65:F5:B0:76:4D:F0:50
Certificate issuer:       /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial:       010D0C9F4328584A3FAAD583910140479EC1F948
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/164edc0d-b0e1-3e1c-8176-9e28e94286f0.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     63086
IP address blocks:        104.36.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d5:83:91:01:40:47:9e:c1:f9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=858595fc-476d-4d3d-aa07-05ae0ede8d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:1f:b9:d4:40:1c:62:5f:96:93:03:4f:bc:
                    7a:1d:3d:e0:75:6d:0a:48:11:00:42:fa:7c:ce:bc:
                    a2:d6:70:f9:8b:c4:5c:b8:23:07:b4:16:62:45:e9:
                    df:d0:a5:b2:f9:4c:df:38:94:b5:34:e9:e2:8a:78:
                    c5:ad:21:da:4a:47:37:b6:e2:69:9e:63:cc:80:bd:
                    c4:a2:83:51:b3:fd:f8:23:77:dc:0a:28:02:ff:d8:
                    5d:eb:46:93:68:a8:6d:44:d1:58:e0:15:7e:8a:b3:
                    f6:ca:ae:ad:3d:ae:f3:a9:78:83:7b:33:90:86:f5:
                    fa:66:3d:1f:b0:b9:12:d9:23:14:90:28:7c:aa:f1:
                    76:62:3b:67:47:42:f7:fd:ed:5f:bd:68:4b:13:2e:
                    f3:2e:c3:3a:d1:57:0e:ef:e7:78:d1:fa:1c:33:69:
                    cb:f8:14:3b:50:f9:3a:30:c6:27:5b:09:3e:56:7e:
                    ab:da:0f:76:57:be:a2:bb:0b:1d:c6:4f:35:fc:bb:
                    6a:54:5b:90:66:a1:d7:ba:56:8b:ee:a5:89:6b:a5:
                    b2:68:3f:08:53:90:48:2b:9d:df:c1:5c:5f:8c:ab:
                    1f:40:3b:d3:d2:d3:ef:ab:25:b1:bb:49:47:2b:8e:
                    dd:84:20:53:00:6a:c9:3c:8e:91:09:c4:41:69:5f:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0E:22:4B:31:B0:40:FA:E2:24:78:C3:75:65:F5:B0:76:4D:F0:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/164edc0d-b0e1-3e1c-8176-9e28e94286f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl

            X509v3 Authority Key Identifier:
                keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.36.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:00:d6:2d:bb:16:74:e1:ba:ce:fa:38:07:be:cc:6e:63:01:
         5d:bb:0f:79:9e:2f:14:e4:41:dc:57:1c:35:12:40:eb:f2:7c:
         16:87:76:ae:e2:46:a8:17:39:91:e3:a9:3e:78:4f:ed:b5:75:
         ff:0e:32:46:e1:4d:16:88:5d:90:ed:98:02:13:bf:bd:56:cd:
         03:01:ca:13:d7:c1:96:e8:e4:15:e9:d2:c6:61:d0:7f:82:4f:
         5c:34:f0:78:56:c1:f3:f5:75:58:84:31:9c:bb:02:68:cf:c7:
         5f:51:7f:0b:e1:fa:b5:b6:db:31:e3:63:c3:16:9d:41:a8:9a:
         e8:39:67:ed:24:2c:25:4e:ab:ef:63:42:e0:c6:6b:ff:d7:3a:
         96:20:71:c6:76:a2:b6:0f:21:fe:a8:ea:10:d0:6a:b6:e3:92:
         4b:f5:64:ea:f1:30:d7:fa:52:12:3b:f7:e0:60:58:1b:29:46:
         39:c8:d0:ab:60:fc:0e:dd:2c:2e:34:97:78:15:0d:35:b8:83:
         4a:d6:b9:27:39:db:a0:1a:00:c7:45:49:5c:91:a7:96:2c:3c:
         05:9a:ec:53:c2:11:5d:e7:18:ee:fd:47:2d:50:f1:8a:94:e9:
         0b:a3:b2:ad:cb:4c:8a:25:5d:87:9d:95:7f:e5:5f:58:8e:d8:
         49:69:14:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qtWDkQFAR57B+UgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmRkMDgyOTItOGRmZC00M2I4LWEwOGMtMjJjYjMxZWQy
MDBmMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk
ODU4NTk1ZmMtNDc2ZC00ZDNkLWFhMDctMDVhZTBlZGU4ZDQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7wfudRAHGJflpMDT7x6HT3gdW0KSBEAQvp8
zryi1nD5i8RcuCMHtBZiRenf0KWy+UzfOJS1NOniinjFrSHaSkc3tuJpnmPMgL3E
ooNRs/34I3fcCigC/9hd60aTaKhtRNFY4BV+irP2yq6tPa7zqXiDezOQhvX6Zj0f
sLkS2SMUkCh8qvF2YjtnR0L3/e1fvWhLEy7zLsM60VcO7+d40focM2nL+BQ7UPk6
MMYnWwk+Vn6r2g92V76iuwsdxk81/LtqVFuQZqHXulaL7qWJa6WyaD8IU5BIK53f
wVxfjKsfQDvT0tPvqyWxu0lHK47dhCBTAGrJPI6RCcRBaV9jwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLEOIksxsED64iR4w3Vl9bB2TfBQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82ZGQw
ODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNiMzFlZDIwMGYvMTY0ZWRjMGQtYjBlMS0z
ZTFjLTgxNzYtOWUyOGU5NDI4NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmRkMDgyOTItOGRmZC00M2I4LWEw
OGMtMjJjYjMxZWQyMDBmLzZkZDA4MjkyLThkZmQtNDNiOC1hMDhjLTIyY2IzMWVk
MjAwZi5jcmwwHwYDVR0jBBgwFoAUsDu+INGuzPtX0T1i6kyZ2kHR6zwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82ZGQwODI5Mi04ZGZkLTQzYjgtYTA4Yy0yMmNi
MzFlZDIwMGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCTCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALYA1i27FnThus76OAe+zG5jAV27D3meLxTkQdxXHDUSQOvyfBaHdq7i
RqgXOZHjqT54T+21df8OMkbhTRaIXZDtmAITv71WzQMByhPXwZbo5BXp0sZh0H+C
T1w08HhWwfP1dViEMZy7AmjPx19Rfwvh+rW22zHjY8MWnUGomug5Z+0kLCVOq+9j
QuDGa//XOpYgccZ2orYPIf6o6hDQarbjkkv1ZOrxMNf6UhI79+BgWBspRjnI0Ktg
/A7dLC40l3gVDTW4g0rWuSc526AaAMdFSVyRp5YsPAWa7FPCEV3nGO79Ry1Q8YqU
6Qujsq3LTIolXYedlX/lX1iO2ElpFKk=
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:30:40 2025 by rpki-client