Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9f6b981e-a001-3a45-9699-c4cef7e80035.roa
File:                     9f6b981e-a001-3a45-9699-c4cef7e80035.roa (raw, json)
Hash identifier:          SayMZc7Fq59hFOJzEnU+vLzv26ONHafo9wBIVG+bnPQ=
Subject key identifier:   B8:FC:4D:0C:82:2A:AD:E8:D3:76:40:D7:D6:A4:1A:B1:63:75:CB:2F
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848BFEBD54E1E43C450AB4ED180
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9f6b981e-a001-3a45-9699-c4cef7e80035.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36492
IP address blocks:        136.22.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d5:4e:1e:43:c4:50:ab:4e:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=ca41767f-d451-46bf-8ae1-775fa97d9b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5e:15:70:72:56:16:c4:7d:e3:51:6c:0b:43:
                    85:0c:9c:dd:c4:3d:18:c5:16:a7:50:7b:e3:97:b3:
                    2e:58:05:09:47:8c:e4:f6:b6:79:b1:a5:4e:a7:20:
                    18:38:51:8a:2b:fb:a4:3f:ab:1d:9c:f2:07:c7:12:
                    c1:e2:63:d3:46:ba:e8:04:f7:39:a9:65:ac:48:87:
                    b6:df:0c:72:bf:36:c1:b4:aa:95:23:d1:21:52:db:
                    19:cc:34:4e:b9:1c:33:62:ce:43:9c:04:64:1b:e9:
                    b5:ad:de:94:dc:00:09:ae:71:20:d9:e4:84:2b:82:
                    81:43:ef:cf:f8:59:ac:d8:cd:b2:75:7f:6e:09:53:
                    6b:35:c1:be:5e:06:46:48:d4:f5:b6:12:be:b6:54:
                    a1:48:f3:97:94:42:57:f7:c9:3b:17:5e:34:32:3b:
                    b7:15:90:51:85:12:b2:d3:17:b1:a4:bd:63:46:c2:
                    94:9c:c0:9e:a8:e9:48:b4:36:00:88:4c:9c:58:f7:
                    74:40:86:6c:51:3c:bd:71:1f:f0:dc:fe:d0:b1:d7:
                    df:b8:28:cb:2d:a9:62:44:c5:07:65:21:39:09:4f:
                    cc:18:36:8d:3e:27:ac:1e:ed:5d:62:d6:6e:3c:3d:
                    47:3b:d2:f5:2b:3c:00:f6:53:26:d1:0a:1e:d7:dd:
                    31:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FC:4D:0C:82:2A:AD:E8:D3:76:40:D7:D6:A4:1A:B1:63:75:CB:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9f6b981e-a001-3a45-9699-c4cef7e80035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:09:b9:77:9f:12:9e:a1:90:97:4d:15:09:dd:62:dc:ed:71:
         c7:09:8b:b5:b5:f6:2f:f2:99:dd:e7:ad:28:38:ac:92:e0:b9:
         1b:fa:df:3d:a5:3e:97:22:4e:f8:dc:31:a8:c5:d3:40:5f:ce:
         46:c4:67:bf:37:ad:51:ad:ea:24:86:e0:3a:eb:60:78:68:d3:
         8b:85:12:ee:06:5a:b1:3e:4d:4c:66:94:f6:10:9d:43:90:8c:
         94:1d:bf:3e:79:6d:4d:48:07:05:af:70:a9:16:34:81:c5:01:
         39:b7:ad:18:f4:ff:28:01:81:87:5e:a3:30:2e:37:c6:90:16:
         fb:7b:67:c8:ee:76:41:e3:f1:6c:30:ae:dc:c3:5e:1e:50:78:
         a7:bc:9f:cb:4f:fd:58:3f:e3:1a:8c:3f:f8:38:8f:aa:de:4a:
         45:c3:be:ca:20:b8:12:a6:5a:b5:2a:d8:ad:b5:dd:56:dd:ec:
         d8:1a:13:cf:a2:01:d5:89:f9:74:49:33:f6:b2:a5:e8:34:44:
         36:46:d3:72:ee:45:8b:32:80:e4:8d:54:e6:e9:7a:f1:9c:aa:
         6d:f0:8f:64:49:4c:34:2b:92:39:58:3d:95:15:d0:94:1c:74:
         fe:d5:85:46:28:4b:d7:80:d6:12:fa:94:07:68:6d:54:83:5c:
         f7:1b:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:45:04 2025 by rpki-client