Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/763cfa6e-9e26-3e14-88ad-6b57d696a4c4.roa
File:                     763cfa6e-9e26-3e14-88ad-6b57d696a4c4.roa (raw, json)
Hash identifier:          GafGzdQtgt07ExIqG/p9XtSVCe5mlpip3ifWUZquztM=
Subject key identifier:   E7:D0:83:A7:F6:96:5F:46:11:2F:19:18:8A:F8:13:F4:C9:C2:E6:A3
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285848BFEBD8520EB7FCB5FCC16200
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/763cfa6e-9e26-3e14-88ad-6b57d696a4c4.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        136.22.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d8:52:0e:b7:fc:b5:fc:c1:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=0f087115-7f94-42c5-96cd-fb7a66541455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:42:70:90:81:24:a8:e7:07:d8:9e:3a:fc:56:
                    f0:27:55:9b:6b:aa:e4:47:9c:fa:57:37:6f:a3:b2:
                    56:34:e5:94:52:84:48:8d:ee:e1:36:8e:68:30:3b:
                    30:20:91:2f:d0:30:ab:b5:50:30:ec:9c:b8:8c:3f:
                    06:f1:87:77:9c:88:91:80:2b:d3:56:d5:4e:c5:eb:
                    b1:5a:a3:b7:21:e8:7e:97:63:98:18:c6:b5:51:60:
                    f8:6b:dd:e5:c3:cf:d0:88:f0:9d:b1:0e:a3:8a:6d:
                    b1:ce:2b:0f:a9:c7:0a:6f:01:37:5e:d5:1d:0f:3b:
                    0f:22:ce:eb:4a:4e:d7:44:a5:27:82:68:e8:8a:e9:
                    bc:33:6b:aa:d4:62:dc:a2:6e:0b:ab:7a:a7:b0:e1:
                    91:7e:f1:96:e5:27:0e:53:e3:7b:f9:a7:f4:df:a0:
                    7f:78:3f:0b:ef:b1:9f:ee:bd:53:c4:5e:55:5e:f1:
                    e0:9b:3d:34:bb:20:04:01:20:ca:b2:20:1b:ce:af:
                    e5:3a:34:bb:27:a9:ce:30:fd:b7:32:bb:82:96:89:
                    58:1f:5d:40:9b:98:40:44:97:b5:12:3e:63:c2:f9:
                    61:b4:4c:ce:63:35:3b:63:b6:1e:8d:30:5a:32:c6:
                    11:0c:03:64:91:df:a1:cb:69:5b:8f:55:9a:20:a7:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D0:83:A7:F6:96:5F:46:11:2F:19:18:8A:F8:13:F4:C9:C2:E6:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/763cfa6e-9e26-3e14-88ad-6b57d696a4c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:8c:a8:3f:e5:98:af:c5:bc:f7:89:b4:e0:5f:3a:cf:6b:73:
         c3:df:bf:3e:48:7c:86:65:90:e8:5a:17:f4:9e:87:51:85:a8:
         59:d5:55:47:51:59:ed:65:46:81:7a:b4:12:99:e1:6d:0f:95:
         ee:89:b6:4c:39:b6:73:d4:5c:98:ad:48:c4:bd:0a:59:c6:7f:
         68:2a:e4:ed:e0:25:91:94:b0:c4:b1:af:c6:22:c7:06:19:3a:
         f0:35:15:36:85:f8:b2:d5:24:0e:e2:e1:7c:d0:32:b1:d5:f7:
         93:6d:4c:79:f8:2a:84:f3:2b:ac:55:ed:3c:4c:d3:fb:4c:43:
         b2:87:e7:ef:b0:b8:ff:34:5d:75:eb:3b:fb:e7:2e:f5:d2:34:
         f7:f4:74:60:b5:af:03:c2:92:90:c5:a2:d6:24:22:cd:4b:4a:
         e0:cc:6a:ae:70:51:4d:60:2d:4e:ac:1c:4d:bb:52:cb:7a:67:
         78:2a:06:d5:a6:8f:e9:b9:55:ea:7f:29:6e:fc:ec:99:3e:25:
         20:b4:b3:07:ea:23:8a:ce:7c:fe:44:10:94:0b:7e:75:16:4d:
         28:a2:d5:21:6a:d6:2a:66:85:36:1b:02:8c:0c:fc:32:36:17:
         c4:8c:ca:fe:57:2a:1b:15:b7:8a:6d:08:c8:b8:c8:90:84:6d:
         30:14:59:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:23 2025 by rpki-client