Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/da7f4729-e05f-3e1a-8770-0da9b2748dd1.roa
File:                     da7f4729-e05f-3e1a-8770-0da9b2748dd1.roa (raw, json)
Hash identifier:          6HLpX9VXnpPsYN8Vz/sqtvihDvq6WrajplyOrmxUGA4=
Subject key identifier:   F7:2A:20:92:E7:E3:72:C8:BD:9D:97:E1:39:A0:7A:1B:95:1F:49:D9
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F43285848CB16502BBDDD543E8A5A6E00
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/da7f4729-e05f-3e1a-8770-0da9b2748dd1.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     14241
IP address blocks:        136.228.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:50:2b:bd:dd:54:3e:8a:5a:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=a4620d2d-4f19-4637-9df4-4e9c22037064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:3d:b5:df:cd:1d:70:f8:1d:d2:d5:b5:b3:
                    ce:08:28:ec:d6:54:2b:65:f9:eb:29:cf:ff:b7:7d:
                    10:74:f0:fc:1c:dc:b9:73:0a:89:ca:ea:f9:f0:3b:
                    9a:9a:cc:09:cc:b3:84:2a:fb:e7:e5:3f:b8:29:0c:
                    5b:53:67:a9:d9:82:b6:39:88:c0:ae:2f:92:39:dc:
                    1c:92:87:a6:1f:60:90:bd:60:4b:77:bb:e2:bc:fa:
                    5b:11:b8:0c:95:a7:e0:f2:a9:07:86:a8:5f:f5:c0:
                    6b:be:1a:4a:bd:77:30:b8:1e:44:1b:5b:d1:ff:10:
                    f5:0e:32:90:8b:bd:c9:2a:ad:fd:f9:e1:43:f0:8a:
                    ea:93:12:7e:20:c1:71:60:f3:05:30:b8:bd:a4:2a:
                    5a:8c:95:6e:99:b1:7f:54:cb:d5:94:00:64:46:11:
                    81:5a:39:a0:35:42:5f:29:db:a9:53:c9:df:ee:89:
                    75:ee:22:16:06:fa:0a:6b:02:e4:5e:cb:f9:81:5b:
                    99:ac:df:db:b3:a4:3b:56:76:79:f2:ee:ae:03:78:
                    99:04:44:95:ae:24:0d:42:86:99:37:67:8e:2d:4b:
                    bc:9b:15:6b:39:03:e5:04:9c:ab:35:85:b9:99:41:
                    28:09:5d:86:2a:48:74:78:2f:27:26:95:4e:18:e1:
                    13:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2A:20:92:E7:E3:72:C8:BD:9D:97:E1:39:A0:7A:1B:95:1F:49:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/da7f4729-e05f-3e1a-8770-0da9b2748dd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:3a:33:70:8a:16:92:16:ed:39:e4:c7:55:ab:52:d4:d4:d2:
         20:83:38:2c:cd:95:1c:14:76:52:8b:18:05:2b:04:ed:fa:a1:
         e7:2f:20:73:d4:62:74:e2:42:9b:26:8c:dd:c4:b0:cd:d8:c1:
         d5:34:9c:1a:d7:02:1f:12:9e:1c:73:db:f8:3f:65:ac:78:39:
         11:4e:55:43:15:4a:5e:48:ba:a1:15:53:68:c3:05:74:bf:1f:
         9d:d6:2f:71:ca:ff:e4:5d:3f:36:8a:18:6c:0f:f9:2b:7e:e0:
         b6:95:35:5a:e9:69:d8:b4:6a:56:9f:df:fa:3b:8d:3a:17:96:
         38:5b:ee:77:c2:27:cf:c8:e3:0f:86:ad:b5:3f:11:91:de:ef:
         97:a1:99:7c:e6:a0:b9:2e:b3:14:94:67:75:e1:49:be:23:97:
         b6:b6:ac:cd:f8:92:5a:49:11:86:c9:e2:27:cc:98:ca:f9:f4:
         0b:04:11:6b:c2:54:46:16:26:7b:bc:c1:6b:fe:84:59:a7:74:
         cb:81:cb:f2:ef:37:ea:55:a3:18:b2:71:83:1b:99:ab:7b:a1:
         79:e7:e9:35:78:fc:e7:fe:da:56:b9:da:6e:60:18:cc:43:e7:
         52:31:16:6e:27:91:f3:93:47:49:86:35:ff:c3:dd:ed:b3:8c:
         b1:83:37:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:10 2025 by rpki-client