Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/91c1e2f3-72fb-3651-b995-c235e2819d23.roa
File:                     91c1e2f3-72fb-3651-b995-c235e2819d23.roa (raw, json)
Hash identifier:          LC7Bfq/pwn+QrDsFOo6EKFrWyBHfSYa4LVv4xlO8eMY=
Subject key identifier:   73:1B:B9:7C:12:11:89:82:F3:E1:BE:2C:82:09:8F:46:97:F4:8C:D8
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285848BFEBCCEC77A5D0BB6BC0F000
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/91c1e2f3-72fb-3651-b995-c235e2819d23.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        136.22.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:cc:ec:77:a5:d0:bb:6b:c0:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=91e1362c-ae29-495d-a07d-83e9186a9608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:04:c0:a3:87:f3:01:34:bf:67:54:a2:58:
                    b3:29:d2:f4:e3:0d:37:b9:7a:3e:ad:58:18:e2:bc:
                    7b:c2:c4:9e:18:18:76:1f:99:43:18:87:90:4f:00:
                    a9:f8:6a:a0:b3:ce:da:41:6b:d7:59:6f:51:1a:f3:
                    e1:8d:49:f1:d3:a8:3b:eb:13:01:5e:fc:16:b9:cd:
                    40:01:29:d6:10:b5:7e:fc:e8:a0:a0:5d:09:8d:05:
                    27:d0:db:46:b1:72:35:b4:50:7c:1b:69:66:8b:92:
                    ae:a6:43:04:3a:36:93:c6:57:e2:74:dd:1e:4f:05:
                    e9:8e:bc:d8:a5:42:b6:2a:43:a1:76:70:6e:55:8f:
                    a6:5b:aa:35:71:b1:d1:c6:b0:42:1e:e6:9d:a2:cb:
                    43:4e:b0:87:82:7d:d7:b9:3f:53:77:d7:6b:09:9e:
                    95:34:f9:b8:9a:49:e3:17:b0:9f:25:14:36:08:d9:
                    98:5a:7e:50:93:2a:0f:c3:58:61:f3:50:34:40:22:
                    be:f4:63:dc:23:5b:db:eb:5f:76:14:51:22:09:09:
                    a8:92:39:bb:dd:a1:3c:b1:7c:4c:1e:6b:1d:62:df:
                    b3:3f:93:7d:6d:d3:6a:10:99:38:b8:dd:59:10:c8:
                    ed:92:0c:bc:29:a1:aa:6a:39:2f:75:9f:5c:6a:bd:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1B:B9:7C:12:11:89:82:F3:E1:BE:2C:82:09:8F:46:97:F4:8C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/91c1e2f3-72fb-3651-b995-c235e2819d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:01:7e:02:1b:73:95:0a:e7:59:57:e8:2a:cb:b9:cb:2a:c7:
         11:5c:1f:6f:87:85:db:2c:ef:1a:80:a0:5a:51:2b:7d:36:1e:
         bb:eb:d6:06:f7:eb:20:d6:45:b3:bd:c3:bf:07:98:99:97:bf:
         c7:11:70:82:79:7f:9b:6c:22:62:a8:29:a3:d0:95:65:45:a0:
         8d:d2:84:3b:c9:9a:67:a8:9b:38:a8:06:95:9f:a8:06:0f:c2:
         62:b8:a9:23:3e:23:92:d1:cf:d9:01:0d:4f:36:bc:e1:c5:56:
         26:2b:d0:4c:8e:c8:fc:0e:c0:4e:9f:9e:54:01:a5:1f:e5:77:
         a9:d3:49:55:8b:b7:56:0b:d5:cb:ba:14:10:1b:18:13:f1:3b:
         f5:ef:11:65:0b:74:f1:95:67:fc:e5:55:36:84:4d:61:ce:bf:
         4c:12:28:46:9e:81:e6:43:a9:2a:8b:66:e1:22:8b:f0:d4:2a:
         21:69:44:ec:fe:35:09:22:ab:6a:46:0f:40:de:6d:54:89:15:
         eb:cb:c1:5a:d7:df:9b:32:b3:fe:d4:f8:f6:ae:aa:40:9e:86:
         60:db:f0:76:16:36:a4:9d:13:a4:4e:70:70:a3:86:9c:9f:5d:
         e7:f9:9f:57:ad:fc:1f:65:52:73:e4:fb:95:9a:0d:43:68:5c:
         43:d8:9d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:39 2025 by rpki-client