Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/89dcfd54-481c-3a57-b5e0-93dc76ea87de.roa
File:                     89dcfd54-481c-3a57-b5e0-93dc76ea87de.roa (raw, json)
Hash identifier:          rVE/SeibBI7Oyo+tidFixaPTeN80usItcRxe+GpS1Ic=
Subject key identifier:   C8:A6:A2:DA:E0:B7:18:B4:5F:B7:F7:59:32:DA:48:38:09:70:24:A5
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285848BFEBB1EDBA75DE21A3DB3D00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/89dcfd54-481c-3a57-b5e0-93dc76ea87de.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        136.22.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b1:ed:ba:75:de:21:a3:db:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=a596c2f5-91fd-4f24-8949-471a787ea2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:23:e5:ec:80:01:2e:70:35:32:34:a2:3d:fc:
                    16:3b:15:ef:b0:a7:42:08:df:ed:4e:11:d4:9d:2f:
                    fa:d3:4f:31:9b:e5:f1:7b:cf:a7:b3:90:9e:f9:d7:
                    dd:54:77:84:f5:3c:64:c7:63:d8:47:1d:8c:14:aa:
                    ba:02:88:89:c1:7f:d0:b1:62:f7:2a:0c:f1:09:bd:
                    b6:fa:3b:11:34:69:c3:f0:4f:a6:a2:d3:7b:ab:ba:
                    a9:d9:7a:5e:5e:57:2d:5a:d9:50:5c:6d:12:14:2c:
                    6f:90:05:77:6e:9b:73:6e:1d:c1:a9:26:b3:bb:23:
                    b9:c3:e5:36:d6:63:70:11:95:77:6e:f9:1d:c1:87:
                    69:4f:ef:97:ed:74:c9:88:f2:79:02:ec:b2:28:5a:
                    d4:94:a1:48:8c:a1:80:5c:19:f6:0e:c4:98:c5:b1:
                    bf:7f:12:94:2f:b5:09:f8:12:8f:cb:23:8d:80:49:
                    db:00:d5:57:4e:15:1d:a9:ce:95:32:27:5e:6e:54:
                    0d:be:39:93:3f:a6:dd:35:e8:4d:9d:98:5f:3c:93:
                    f4:61:2f:bc:a2:a2:95:8d:42:aa:0d:dc:a4:8e:0e:
                    e1:09:29:24:87:75:34:54:72:e7:f7:69:1b:f5:9e:
                    80:30:8e:fa:fd:7b:78:6c:c2:40:75:07:88:81:d1:
                    05:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A6:A2:DA:E0:B7:18:B4:5F:B7:F7:59:32:DA:48:38:09:70:24:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/89dcfd54-481c-3a57-b5e0-93dc76ea87de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:20:05:c8:61:96:ad:41:23:8f:24:8e:bf:61:66:d3:2d:5b:
         81:27:1a:60:56:e3:d7:f3:b2:e5:e1:56:e0:85:36:b3:e1:e5:
         e9:48:cb:ac:34:bf:43:2b:1e:ad:10:20:9f:dd:05:33:b7:db:
         92:b0:e5:6c:36:9f:7a:05:b8:ee:6c:a8:f3:39:24:74:e3:be:
         59:88:e4:ba:01:89:6e:61:94:d7:23:a6:cf:aa:92:22:dc:69:
         94:9a:9c:35:bc:47:75:73:d1:c7:65:de:a3:3a:03:5f:5f:e0:
         cf:6b:8d:e2:f0:74:ec:85:98:12:56:43:96:d2:8b:fd:b8:e0:
         3c:54:63:e7:ad:d4:82:1f:4d:a7:d5:2a:63:aa:58:35:66:a0:
         1f:50:a6:ef:96:df:3a:ed:a8:14:14:06:3f:4c:d4:9a:5c:9a:
         15:65:17:f3:60:79:74:a5:cf:31:ce:6b:77:84:5f:4f:ac:3a:
         39:36:80:fa:bc:f0:b3:70:1a:a6:89:55:72:b6:44:44:3f:68:
         ac:f5:fd:27:e9:90:a6:39:5f:73:96:4a:09:74:26:f2:42:92:
         9d:da:e9:3f:69:39:8a:0a:43:a3:dd:bb:96:56:07:25:be:c1:
         07:c0:24:d7:f0:29:3c:8a:5b:24:4e:ee:53:04:f1:cb:f7:2d:
         b1:96:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:21 2025 by rpki-client