Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9b36d67c-d771-3dd9-ab4a-67645e996e77.roa
File:                     9b36d67c-d771-3dd9-ab4a-67645e996e77.roa (raw, json)
Hash identifier:          uE6VlDzJf0eJlKtXJTHoh05n9goJsKdNsLrGME+yizk=
Subject key identifier:   DB:08:A8:0D:74:D5:AC:64:C4:84:86:56:8A:03:6A:32:5C:16:F7:55
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328584A43DB022AF7DA66602D884B00
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9b36d67c-d771-3dd9-ab4a-67645e996e77.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     53667
IP address blocks:        23.183.80.0/22 maxlen: 24
                          104.244.72.0/21 maxlen: 24
                          107.189.0.0/19 maxlen: 24
                          162.244.92.0/22 maxlen: 24
                          162.245.0.0/21 maxlen: 24
                          198.98.48.0/20 maxlen: 24
                          198.251.80.0/20 maxlen: 24
                          199.19.224.0/22 maxlen: 24
                          205.185.112.0/20 maxlen: 24
                          209.141.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:02:2a:f7:da:66:60:2d:88:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=39141735-c131-4585-abf1-d73d716fd1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:f0:3e:9c:c8:47:5e:31:12:3a:88:43:ba:
                    a6:52:ed:5a:6c:5d:9e:c0:2f:01:2f:97:fe:d7:c0:
                    46:5f:72:87:f4:9c:5e:33:c2:9a:63:b7:a3:53:e3:
                    a6:90:b1:65:cc:45:65:bc:29:e2:18:81:8f:19:ef:
                    43:60:7b:83:ad:c1:56:5f:0d:2f:02:af:5f:d2:16:
                    6f:f7:71:e5:83:f4:65:4a:e6:31:51:e6:e6:44:c4:
                    b5:86:34:26:a6:d7:04:a9:a6:ee:d4:53:7a:4b:d2:
                    63:f9:3b:da:f1:cd:96:26:13:ad:a9:45:00:76:99:
                    d2:be:ac:6e:c2:90:70:e6:ee:f8:22:11:9e:88:c1:
                    c6:05:4b:4c:ab:27:4c:c9:23:19:16:91:e4:97:87:
                    15:2e:22:3b:c8:80:08:a6:ad:95:b5:5a:65:0f:56:
                    9e:d8:61:5b:09:c9:d6:5f:ec:13:ff:65:85:20:a0:
                    d4:6e:c4:c4:43:c5:44:2f:c5:07:7b:95:46:41:97:
                    17:0e:87:b6:68:ee:54:42:68:65:bd:74:46:d0:aa:
                    74:b4:98:88:f2:de:5a:16:6f:17:bf:3e:50:2f:1b:
                    e7:bc:d7:7a:3b:c2:95:1d:01:b7:5c:35:1a:d0:7c:
                    c1:7c:75:a3:cf:10:22:ba:77:65:fc:6a:e2:30:49:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:08:A8:0D:74:D5:AC:64:C4:84:86:56:8A:03:6A:32:5C:16:F7:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/9b36d67c-d771-3dd9-ab4a-67645e996e77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.80.0/22
                  104.244.72.0/21
                  107.189.0.0/19
                  162.244.92.0/22
                  162.245.0.0/21
                  198.98.48.0/20
                  198.251.80.0/20
                  199.19.224.0/22
                  205.185.112.0/20
                  209.141.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:32:dc:4e:18:c5:b7:0d:3b:66:af:8a:a8:c6:17:d3:bc:86:
         f8:a0:05:d5:2b:63:23:19:43:e1:04:b3:df:6c:37:de:31:62:
         4f:d9:53:3f:fd:97:98:bd:00:40:d1:40:5b:ba:69:35:dd:d3:
         b1:2b:e0:9a:43:96:53:9a:05:23:5f:e7:b3:d1:96:17:66:8b:
         9f:d4:ca:a9:e5:52:77:1e:62:a5:5c:ca:fc:e6:29:27:12:db:
         23:e6:7b:81:c0:e4:2e:ff:2a:06:1b:90:36:b5:c1:03:62:a7:
         5b:0b:23:24:71:fd:9b:70:35:30:3c:aa:21:fa:9a:3d:d6:0f:
         d9:36:23:4b:46:2f:4c:43:d8:90:5a:9e:4a:7e:87:4b:98:1a:
         c1:20:a0:c6:c6:01:9c:42:8e:13:f3:06:5a:5e:68:07:43:54:
         3e:67:f4:11:52:db:80:58:0a:89:0c:e2:6a:1b:21:d5:39:e1:
         41:86:b8:84:59:f9:13:ae:d6:3a:56:69:96:a5:56:de:11:d8:
         5f:f1:b8:1b:1b:a6:39:4e:aa:f4:28:19:9f:77:28:b1:ca:74:
         c1:c1:4b:3a:fe:20:41:e5:24:8f:9d:dd:86:6f:e1:9a:40:ad:
         ac:79:68:d7:65:4c:44:4f:39:76:5c:9d:d2:03:6f:2e:bd:71:
         70:9a:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:37:29 2025 by rpki-client