Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d3eac998-28ef-3069-b72a-ca7141d89283.roa
File:                     d3eac998-28ef-3069-b72a-ca7141d89283.roa (raw, json)
Hash identifier:          jBYQU3MlaupjaYyE9X4w0RTSweWIce++kvvfNDps+Hw=
Subject key identifier:   A9:A0:6A:C8:A1:6D:1A:30:6A:E7:3F:1B:DF:BA:ED:03:EC:FA:A5:5F
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848BFEBBCFAFEE1A1AA7ADE1C00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d3eac998-28ef-3069-b72a-ca7141d89283.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36492
IP address blocks:        136.22.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:bc:fa:fe:e1:a1:aa:7a:de:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=c8a4f808-a384-47c3-8028-8212c0801671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:8c:ed:4f:8c:98:6b:37:8d:40:8a:f0:fa:
                    5b:d5:f6:2c:f5:01:1c:29:ba:d6:fc:8b:7c:42:7e:
                    c5:19:2d:00:3e:83:fb:98:fb:4e:93:71:49:50:dd:
                    16:91:44:4a:63:50:8f:78:bf:45:f0:c1:6e:19:7c:
                    06:7f:52:cb:81:c9:17:70:91:80:d4:8a:86:1d:81:
                    62:11:c9:fa:44:07:ec:80:5b:47:71:48:44:90:84:
                    87:d5:b0:f8:75:52:da:37:9f:44:17:80:cd:23:05:
                    a2:c1:31:9a:30:b3:1c:9f:35:d2:34:09:29:a6:1d:
                    d3:62:2d:c4:d3:7f:ae:92:fc:2e:17:3a:61:87:59:
                    0c:d3:11:7c:25:c0:9a:33:5a:ff:77:be:b4:b0:4d:
                    ec:4b:6e:a5:e2:78:f6:17:47:9f:76:3e:22:6c:fb:
                    bd:cc:2e:c6:cd:b3:6f:b9:16:b9:29:e4:66:2f:30:
                    38:70:f4:e8:98:5e:cd:7b:86:a3:25:29:51:09:c6:
                    fe:c7:9c:47:e7:60:0d:6e:5e:8b:b6:36:ff:ab:84:
                    44:37:4d:91:51:2c:64:f5:5c:9c:db:ef:3d:a8:9f:
                    1c:d9:07:52:05:0a:8e:0d:e1:17:25:26:17:8e:a2:
                    05:f5:f9:03:0c:fd:d4:64:19:19:e8:3f:95:5e:cd:
                    07:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A0:6A:C8:A1:6D:1A:30:6A:E7:3F:1B:DF:BA:ED:03:EC:FA:A5:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/d3eac998-28ef-3069-b72a-ca7141d89283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:2b:ef:04:34:e5:c3:27:20:7c:d0:55:c3:dc:97:41:4d:62:
         97:b7:c5:65:ae:9d:f5:f6:05:ca:20:2e:68:85:49:d8:13:33:
         03:92:34:01:a4:1c:dc:b9:e5:85:ed:17:14:a1:d2:fd:c8:c5:
         ea:b9:b6:73:fa:c3:00:f1:11:de:81:63:48:85:ca:7d:e8:b2:
         2f:6b:3c:c6:9b:a2:61:91:66:6c:86:9e:7c:a1:0e:92:21:c7:
         8d:0e:0c:95:fd:b7:28:e7:c9:e0:e1:b7:59:63:b4:70:a7:48:
         3a:af:79:c9:64:41:7a:da:79:ba:4c:5c:81:6a:34:ff:68:67:
         3f:5b:af:59:f3:e4:00:13:4a:b9:29:e9:53:7d:08:f3:9c:f3:
         cd:24:c7:43:e2:81:96:cb:43:84:2d:8b:53:bb:d8:94:52:e5:
         3f:b6:16:5b:5f:e5:66:f3:88:6a:55:68:52:be:1d:01:8f:bf:
         05:28:31:21:f2:6d:46:7e:dd:62:31:eb:88:c1:1c:04:f0:40:
         ae:64:88:0e:6e:58:4c:cd:93:ea:1d:6d:58:e7:9a:a7:7c:40:
         78:64:1a:e8:ce:ab:6a:55:ee:5a:7d:50:23:0c:99:ba:ad:8f:
         00:dd:48:69:3b:f4:12:82:7f:71:f0:13:a3:fa:ac:e9:8a:03:
         49:c9:1d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:47:47 2025 by rpki-client