Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa
File:                     b9976d2c-e93d-3060-b104-42102b50cd67.roa (raw, json)
Hash identifier:          zuAetu+Hh/YtsQ8cyTRNkW5j9SJnY+LvN7dsLqI7YNM=
Subject key identifier:   6F:1C:30:7A:8A:84:54:C6:C0:DA:C1:43:FB:EF:28:7F:45:10:81:C9
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F43285848BFEBBD371F9613DF1C1C5440
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        136.22.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:bd:37:1f:96:13:df:1c:1c:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=a97968f1-4458-417f-a13c-2c094aa37349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:10:d7:07:52:c5:96:7b:ae:66:cf:41:45:fc:
                    6f:17:31:f4:f1:63:1b:39:59:79:f4:a9:38:d2:67:
                    81:69:eb:d8:3b:de:cf:45:f6:65:cf:61:54:ce:f0:
                    c2:33:6a:f0:19:2b:a9:86:35:95:db:c1:d2:30:6e:
                    61:24:ce:7c:ad:06:1f:7b:84:04:86:c3:fa:d9:a1:
                    87:fd:80:75:19:75:1b:9d:5e:db:19:b2:ec:3d:99:
                    fe:71:da:38:05:b8:cb:b7:54:c9:c9:4a:7b:32:0e:
                    fd:34:35:75:99:1e:85:50:ad:2b:70:c5:98:f7:ce:
                    20:3d:0a:41:13:48:42:44:46:21:50:6c:44:16:b2:
                    56:7f:fd:4c:c8:f9:47:0b:a5:1c:a9:3f:8e:41:e4:
                    ec:3c:e9:1a:fb:ce:ac:b9:03:8f:17:59:00:78:00:
                    58:47:e7:0a:bf:d2:4d:7d:18:b0:47:3c:81:1f:9d:
                    22:24:57:58:9d:5f:b8:23:9b:d6:28:4c:7f:9b:9e:
                    27:47:4d:3a:ad:de:97:fa:a8:40:98:e7:c7:7f:57:
                    24:45:8f:f5:05:ed:d4:72:5c:3b:e6:91:e8:cf:dc:
                    f0:d0:f8:db:50:11:ed:d7:68:89:37:df:fa:c2:3a:
                    3b:ee:6a:66:c7:0f:cd:34:74:6e:62:11:ae:a9:7a:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1C:30:7A:8A:84:54:C6:C0:DA:C1:43:FB:EF:28:7F:45:10:81:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:80:19:5d:a5:01:95:83:a1:61:33:8e:df:a4:33:f3:b4:d9:
         03:fd:a4:21:39:4a:54:7e:fe:38:6d:98:5f:3a:a2:64:70:0c:
         d8:28:73:c4:9c:37:f2:d1:22:85:d5:6f:f9:27:a5:a5:c4:b4:
         e2:cc:05:ee:30:c0:23:a0:c7:ea:dd:e9:8b:6f:3b:59:6e:fd:
         f9:79:14:96:57:26:66:eb:fa:54:52:52:bd:b6:eb:45:7d:f5:
         c5:35:17:84:ca:4e:fb:7c:70:0c:f4:bf:26:85:60:bc:1d:1a:
         55:78:81:ac:5c:41:c6:71:fe:91:9e:92:2e:f6:c4:33:f0:bc:
         41:d0:6a:d7:ea:2e:43:fb:33:c3:b6:61:e6:cb:9c:42:63:06:
         c5:57:a4:fd:f8:81:52:f6:20:7d:10:06:d4:30:ba:f9:9f:0e:
         9d:10:88:da:81:29:de:9e:f1:ea:3a:f3:e7:7a:11:ee:ad:0d:
         b1:34:67:79:9f:f1:69:51:d2:b7:1b:59:d4:94:c0:12:89:5c:
         54:d3:53:5c:64:ab:c9:ac:e1:58:ea:5f:0a:fa:ba:19:4d:82:
         39:50:c7:e6:dc:03:47:63:66:c1:dd:d0:d3:d5:7a:9a:5a:81:
         b8:6a:cb:3c:e1:43:9f:35:af:06:f3:e4:7d:59:a2:5e:85:9b:
         2f:be:91:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:38 2025 by rpki-client