Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f40d0af2-a10e-399c-8b7b-63515888b194.roa
File:                     f40d0af2-a10e-399c-8b7b-63515888b194.roa (raw, json)
Hash identifier:          ws1bTUjvVG23Ne2i8mCQlyWQAq3Q7vE+dc2rQiyq80c=
Subject key identifier:   D2:D6:7F:C2:EE:B0:2E:60:E2:50:A1:C5:56:34:E0:80:E5:9A:26:A9
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285848BFEBAF5A915DCBF10398D780
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f40d0af2-a10e-399c-8b7b-63515888b194.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36492
IP address blocks:        136.22.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:af:5a:91:5d:cb:f1:03:98:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=cab7af36-70f5-4f89-bd3c-7dfdf62c9f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8b:2c:e4:cc:d0:85:30:e0:0c:67:84:2d:1f:
                    d5:6d:ea:c3:08:1a:84:b9:33:c6:c1:b1:72:8e:3e:
                    e5:20:85:4c:b8:ae:5e:53:40:00:07:f9:37:d9:79:
                    1c:21:10:18:57:28:78:4e:d0:b2:b9:e0:5e:65:63:
                    1c:f2:d9:bf:4e:cc:fd:05:d0:0a:5a:ee:14:db:09:
                    8f:ca:3d:76:bb:e1:16:97:27:6b:ec:91:a2:29:99:
                    47:b0:af:e4:90:7c:1b:73:ca:91:fc:ba:bc:d7:a7:
                    99:ee:4e:42:1d:a1:78:4c:38:36:39:6f:3a:91:45:
                    9c:81:c9:38:04:40:c8:05:51:07:d7:50:02:ae:3b:
                    a7:bb:c1:13:46:72:f8:89:1b:49:fd:6b:95:11:df:
                    c5:d5:36:c1:0a:26:7b:00:da:46:42:11:5f:62:19:
                    dd:0a:e8:19:0d:4e:c7:b1:31:82:d2:79:6d:b6:7f:
                    17:db:be:12:a2:bd:ea:0c:8b:39:4f:bb:6b:d5:b1:
                    49:d3:d3:c7:eb:3e:09:7d:5f:a7:b2:40:6b:15:70:
                    f3:1d:2e:35:80:d9:67:88:f2:41:14:5c:40:72:34:
                    8d:d8:73:ca:df:38:aa:ae:f5:3b:2b:19:cc:bd:9c:
                    78:63:ad:6d:a9:70:25:16:4a:52:1a:6b:6e:c6:ea:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D6:7F:C2:EE:B0:2E:60:E2:50:A1:C5:56:34:E0:80:E5:9A:26:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f40d0af2-a10e-399c-8b7b-63515888b194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:59:44:70:b4:89:f6:6f:8d:b4:1a:c4:96:b7:9f:16:cf:d1:
         82:68:91:6c:e0:7f:8e:9c:46:00:0f:5f:93:d2:15:76:23:60:
         e5:8a:40:69:16:93:9c:5b:7b:98:94:64:e8:f9:7c:5f:48:78:
         3b:54:b2:7a:92:e9:d9:4e:65:d4:c7:01:17:60:8a:fe:3e:bd:
         73:7f:21:44:35:4f:6e:92:cc:cf:44:ca:94:25:5b:04:b3:5d:
         33:e2:51:a8:2b:f1:b7:4e:59:86:5c:87:ff:9f:c0:51:44:13:
         fb:47:bb:db:4a:ba:72:94:98:dc:e0:14:52:54:c1:6d:c8:de:
         8e:6e:dd:56:8b:3d:20:44:17:8f:e2:79:c3:bc:3a:f9:2d:f8:
         07:45:02:39:62:f8:23:38:c5:db:a7:82:f1:7d:5f:b3:18:0e:
         01:62:f4:12:59:3e:12:de:70:f4:12:41:1e:ce:06:b7:7c:24:
         a9:51:c3:c7:7f:05:fa:ce:47:3d:8f:c7:2f:eb:50:f0:a3:1c:
         09:f9:66:11:f5:4d:df:fe:36:6a:0e:a0:71:2c:80:25:b7:5c:
         c8:a1:6a:49:8f:ed:58:35:cc:24:15:ce:17:fc:c7:08:ba:c7:
         33:bb:37:fd:94:cb:a8:93:35:37:f4:a0:47:62:76:1f:af:1e:
         92:f2:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:45:09 2025 by rpki-client