Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c0d7f58-11fd-34c7-b964-a14648b63d9f.roa
File:                     2c0d7f58-11fd-34c7-b964-a14648b63d9f.roa (raw, json)
Hash identifier:          XvxAD9Y/gXlsS2ktBNqmWRBAb5lZrOOGwxEd9PXgtJ0=
Subject key identifier:   FA:B8:F7:F5:58:99:3E:27:07:F1:41:87:92:3C:84:C2:E8:26:F7:A1
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F43285848A1360C9CE90276559E428F00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c0d7f58-11fd-34c7-b964-a14648b63d9f.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        136.226.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:0c:9c:e9:02:76:55:9e:42:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=acd0d7c6-60b9-4310-bcf2-98f6fb9fde5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a5:06:77:59:1e:9b:97:08:1a:1f:ff:30:21:
                    53:67:47:0d:3f:74:61:71:3c:98:d2:9f:a6:cc:2e:
                    5d:09:61:7c:ff:49:11:32:fc:5d:be:1d:e4:5e:68:
                    f3:e7:e8:83:91:f0:8c:b8:bf:7e:9b:96:e6:34:ec:
                    3d:73:20:dc:5b:d9:ec:6e:1a:5e:27:3e:dd:19:e5:
                    b6:9d:bc:73:5f:8e:60:b2:a4:e9:4d:9e:be:33:0a:
                    0f:3f:4d:9c:52:ff:bc:9f:cd:d7:86:76:73:da:ae:
                    4b:14:0d:ee:51:9f:50:bf:15:36:3a:f7:eb:ac:47:
                    f1:3d:b1:11:8b:66:14:f4:8c:5f:0d:85:26:b7:ae:
                    36:03:8a:e3:ee:e6:fd:89:82:90:9e:f4:1b:bd:00:
                    16:19:64:76:ab:71:7c:6c:5d:fc:32:60:80:ce:17:
                    88:d0:b6:7d:da:a2:7b:90:69:c3:c8:65:92:1a:75:
                    36:a8:7c:5a:51:2f:fd:5f:c7:73:b0:4e:eb:dd:e8:
                    2a:e5:1b:cb:84:0b:9e:1e:4a:a3:56:54:85:c4:19:
                    97:6f:1f:b6:59:1c:3d:35:13:4c:d9:15:db:09:04:
                    47:7b:4b:69:69:ca:1a:54:4f:18:13:6b:a6:82:a7:
                    53:aa:c4:66:a6:7c:89:a9:f3:44:a1:ce:b8:68:d1:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B8:F7:F5:58:99:3E:27:07:F1:41:87:92:3C:84:C2:E8:26:F7:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2c0d7f58-11fd-34c7-b964-a14648b63d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.226.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:b3:fa:a6:e5:0a:29:f5:d1:98:d1:df:56:8a:07:c2:48:ed:
         28:3d:04:b3:4c:1b:c8:58:be:80:d3:c1:35:f0:c6:9d:d6:06:
         6a:4e:db:a9:97:6f:75:8e:84:23:fa:6f:ab:bd:ca:7d:d1:fe:
         af:87:b4:bd:f7:3f:d7:60:14:41:74:b4:0c:03:63:35:b0:f3:
         bf:e4:aa:5b:c4:5e:14:e0:91:e4:f0:e1:da:3b:92:aa:e6:ea:
         3c:b4:e6:d5:40:b8:09:91:ff:01:d1:10:ff:ed:39:18:dc:7d:
         89:dd:0f:30:e0:e6:75:7d:66:2e:ca:87:cd:13:53:7f:c9:89:
         86:f7:7c:67:86:50:d1:83:22:c5:8d:b0:47:6e:f6:50:30:d3:
         6f:d4:9b:a9:ee:4f:69:f4:98:85:ec:2b:f4:92:ea:69:05:27:
         90:5d:45:fb:17:f6:ea:51:97:32:2c:a1:36:93:6a:2c:d4:4a:
         b0:4c:65:02:9e:ef:1d:2d:96:ab:a0:b1:48:43:5e:14:bd:bd:
         6a:da:7b:d1:f6:2f:b3:65:51:ed:80:e6:d5:ab:78:21:2b:e8:
         fb:43:46:f4:ff:b6:3b:39:33:6d:f2:0f:c6:96:24:d6:7c:3b:
         72:bd:29:94:94:20:75:7d:4d:c3:aa:d1:41:b8:d6:eb:11:3c:
         37:47:de:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:41 2025 by rpki-client