Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ed6c82ee-3b0e-3f81-8fd7-be4191f30750.roa
File:                     ed6c82ee-3b0e-3f81-8fd7-be4191f30750.roa (raw, json)
Hash identifier:          Qc4w10a8zbpMvjj13J6cpwmY7nIOGeArG1K8yeAZSzE=
Subject key identifier:   59:C4:39:4F:3C:EE:DF:26:8E:CB:87:A2:00:02:B4:ED:77:02:1D:F9
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848C5820867FB7A2A4FEC7FBA00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ed6c82ee-3b0e-3f81-8fd7-be4191f30750.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.23.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:08:67:fb:7a:2a:4f:ec:7f:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=51593248-dbb5-44f4-a091-3d2f71d0a0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:54:92:f5:48:72:04:2d:aa:3b:52:97:f1:
                    f4:fe:62:f3:c9:ab:78:4e:ca:cb:02:08:cc:16:cb:
                    7f:f1:50:5d:59:3e:1f:9d:0c:a0:48:fa:98:b6:78:
                    5e:1c:f2:2c:23:fa:38:12:f8:52:da:72:9f:e1:75:
                    0d:31:a3:9b:48:b9:fb:6a:f2:c9:f6:17:ad:f9:9c:
                    f7:e4:a9:9c:f2:be:59:4d:71:97:d0:c3:28:2f:69:
                    66:2f:e9:3e:0a:3e:bd:b2:58:d3:e1:f6:b4:1f:84:
                    6b:66:80:0b:36:02:c0:b8:cf:e6:a0:eb:92:77:c2:
                    6c:65:16:be:88:31:80:5b:65:7d:83:7f:cc:3d:fc:
                    6e:bb:eb:f0:8e:63:c7:09:ef:80:00:0e:13:1c:3e:
                    30:d3:b6:dc:7f:b7:92:fc:f7:de:1b:64:97:1e:a2:
                    1a:68:bb:9d:f6:a9:96:7b:98:7f:8d:45:bc:f3:fb:
                    9c:6f:25:3d:16:59:25:11:bd:46:f4:6a:00:1d:5f:
                    84:ef:6d:38:35:2e:77:44:73:6c:fb:10:ea:14:ad:
                    3d:5e:e5:c7:1f:6a:b5:a9:0d:f0:0f:7f:35:02:27:
                    d6:82:d6:a6:5b:ad:06:15:db:ee:6c:5d:da:4f:3a:
                    12:74:c9:18:05:6b:ea:64:28:d4:42:7d:35:a7:02:
                    2f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C4:39:4F:3C:EE:DF:26:8E:CB:87:A2:00:02:B4:ED:77:02:1D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ed6c82ee-3b0e-3f81-8fd7-be4191f30750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.23.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:71:f7:8e:37:ac:84:8a:b3:6b:18:de:b9:5b:ae:6c:6b:43:
         a9:dc:f9:15:1c:c0:1e:90:52:73:d6:74:a7:9d:82:47:54:6d:
         f0:75:84:2b:eb:21:cd:76:0d:4a:32:52:a5:77:83:42:f0:b9:
         c8:c8:78:5d:85:77:e2:12:22:0e:35:a6:5c:c8:0f:d2:21:a0:
         16:12:59:cc:42:1d:3d:a8:f0:7f:c0:ac:cd:7a:26:43:9f:85:
         3d:a8:32:ee:ed:21:96:20:7f:95:b3:c8:7e:61:78:0e:c4:1d:
         c7:68:da:3f:c1:0c:1b:ab:0b:d4:94:09:03:a3:a3:dd:d5:32:
         80:61:b6:d7:8c:1a:ac:14:4b:ba:38:c2:2d:3c:67:32:fd:7f:
         70:83:b7:99:21:7b:0f:f1:17:44:ca:92:cd:ff:d5:e0:ff:65:
         37:bc:60:b5:af:10:1c:d0:6d:03:77:15:7f:a5:ba:b6:1d:36:
         a0:23:65:6f:2b:3b:1e:1e:46:c8:95:90:10:ca:ff:e8:fc:29:
         d7:25:c4:be:48:b0:72:a9:d9:a2:e0:04:eb:80:c4:d9:76:b6:
         34:50:8f:d7:84:9c:57:33:53:3a:c4:3a:49:ca:34:74:42:94:
         bb:45:89:a6:ac:6d:77:19:b9:38:a6:5b:f2:80:7c:7f:78:2f:
         5e:b9:9a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:45:19 2025 by rpki-client