Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d7292f6a-df87-3184-8c67-566c24a72679.roa
File:                     d7292f6a-df87-3184-8c67-566c24a72679.roa (raw, json)
Hash identifier:          hN5kM5sYb8CyfrkLo4VmK3wU+TwwYWqJGU3g/FgfG28=
Subject key identifier:   A9:26:70:14:1B:96:6B:35:34:D1:B2:FF:77:32:E9:1E:C4:EA:10:CB
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F432858495EEEE5CDAA555ACD26FA9D00
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d7292f6a-df87-3184-8c67-566c24a72679.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     202276
IP address blocks:        136.228.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:e5:cd:aa:55:5a:cd:26:fa:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=b8899642-ac82-41a8-81bf-f862994c2234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:53:dc:7b:25:cd:11:ae:a5:42:c5:23:c7:20:
                    10:3f:f0:f3:a2:62:f9:4a:e7:5f:d9:49:05:42:cd:
                    fa:94:c4:ed:21:79:dc:84:08:44:cc:d7:6a:48:ae:
                    a1:c0:e7:1d:c7:50:08:89:06:b9:05:fc:9a:0d:21:
                    1c:27:f7:60:20:a6:f1:ee:13:2f:89:e5:74:71:34:
                    5d:71:f5:33:be:5d:1e:42:31:e2:71:ee:79:35:8c:
                    e0:77:38:58:27:de:b5:17:60:fa:b4:67:f1:f9:4b:
                    19:41:27:ad:35:47:96:39:58:8f:ad:0a:b9:0c:25:
                    30:aa:51:0a:29:8e:7e:e1:7f:24:98:a8:3f:58:85:
                    a6:9a:dc:bb:ba:32:c3:63:84:31:0e:3b:0a:7c:a2:
                    49:2a:f6:79:2b:0d:ff:67:5b:7b:f9:46:03:97:dc:
                    67:32:e7:c4:41:3a:55:1b:78:e8:85:83:ef:b9:54:
                    c1:5a:1e:68:5d:ae:20:0c:ed:72:2c:50:87:44:c9:
                    ed:67:0d:a7:59:8c:e0:e3:61:90:d9:99:d6:e7:c1:
                    cf:63:6a:65:e0:7f:ae:6a:e3:05:07:54:3a:8e:7e:
                    42:a4:98:69:41:e2:0c:d8:1b:37:12:60:df:dd:25:
                    88:a5:ee:56:ae:cb:73:55:2e:f1:7a:1d:f5:22:5f:
                    fb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:26:70:14:1B:96:6B:35:34:D1:B2:FF:77:32:E9:1E:C4:EA:10:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d7292f6a-df87-3184-8c67-566c24a72679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:7d:30:74:d1:91:c5:62:4a:e8:2d:d0:2d:ac:9f:02:46:d6:
         08:8c:b6:4c:cd:1f:f4:a3:64:a1:eb:e0:a7:09:d9:ea:c1:f3:
         0e:0c:0b:28:f7:7c:93:11:c1:a1:08:d4:a4:47:e3:8b:a4:60:
         61:79:12:85:84:1b:7a:dd:f6:0a:be:47:87:f5:64:1f:ef:7a:
         3b:1d:80:8a:10:f5:86:c9:46:42:42:88:70:d9:63:03:aa:ee:
         2f:7e:a3:45:71:e8:7b:b0:ff:c5:b5:75:ac:c9:8d:12:15:4d:
         cc:33:84:b8:d5:9b:f1:c9:c6:b9:82:e4:3d:db:b7:7f:cf:6a:
         1f:2a:04:70:f4:1a:4d:a5:75:0c:9c:fc:76:2a:70:d7:23:75:
         7d:23:94:f9:58:ab:70:6e:98:00:04:b7:d3:f6:08:0b:02:8d:
         6b:74:8a:98:40:2a:bb:f3:cd:2d:fa:3e:41:82:77:0e:a1:e1:
         ab:49:a6:43:f1:38:71:57:9c:cd:df:d2:46:8a:5b:b9:0c:e2:
         be:8b:d8:ca:17:8d:bf:87:11:c4:f1:74:f2:02:57:59:e4:2a:
         63:de:9e:ac:7c:ac:94:b3:2e:df:f7:e5:85:95:09:a6:b7:98:
         6f:cd:ab:2f:90:53:42:33:8a:ff:58:55:bd:dc:e8:67:b9:ac:
         af:b7:3f:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7uXNqlVazSb6nQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk
YTkzMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk
Yjg4OTk2NDItYWM4Mi00MWE4LTgxYmYtZjg2Mjk5NGMyMjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlPceyXNEa6lQsUjxyAQP/DzomL5Sudf2UkF
Qs36lMTtIXnchAhEzNdqSK6hwOcdx1AIiQa5BfyaDSEcJ/dgIKbx7hMvieV0cTRd
cfUzvl0eQjHice55NYzgdzhYJ961F2D6tGfx+UsZQSetNUeWOViPrQq5DCUwqlEK
KY5+4X8kmKg/WIWmmty7ujLDY4QxDjsKfKJJKvZ5Kw3/Z1t7+UYDl9xnMufEQTpV
G3johYPvuVTBWh5oXa4gDO1yLFCHRMntZw2nWYzg42GQ2ZnW58HPY2pl4H+uauMF
B1Q6jn5CpJhpQeIM2Bs3EmDf3SWIpe5WrstzVS7xeh31Il/7KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKkmcBQblms1NNGy/3cy6R7E6hDLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0
N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZDcyOTJmNmEtZGY4Ny0z
MTg0LThjNjctNTY2YzI0YTcyNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0
NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1
ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj
OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOTsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE99MHTRkcViSugt0C2snwJG1giMtkzNH/SjZKHr4KcJ2erB8w4MCyj3
fJMRwaEI1KRH44ukYGF5EoWEG3rd9gq+R4f1ZB/vejsdgIoQ9YbJRkJCiHDZYwOq
7i9+o0Vx6Huw/8W1dazJjRIVTcwzhLjVm/HJxrmC5D3bt3/Pah8qBHD0Gk2ldQyc
/HYqcNcjdX0jlPlYq3BumAAEt9P2CAsCjWt0iphAKrvzzS36PkGCdw6h4atJpkPx
OHFXnM3f0kaKW7kM4r6L2MoXjb+HEcTxdPICV1nkKmPenqx8rJSzLt/35YWVCaa3
mG/Nqy+QU0Iziv9YVb3c6Ge5rK+3Pyo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:43:27 2025 by rpki-client