Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/41b5d0e4-b603-3b36-8902-f9dc4b63ee1a.roa
File:                     41b5d0e4-b603-3b36-8902-f9dc4b63ee1a.roa (raw, json)
Hash identifier:          shkOJ2jr7i2gXRaR3lwMfRsrmdiXI2fpMb/cPUMxVGM=
Subject key identifier:   A5:39:C3:61:30:C3:BA:57:18:74:1C:81:90:7B:D6:CA:DB:A5:45:E2
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F43285848E59BBE9FBFA9CE64685D86E8
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/41b5d0e4-b603-3b36-8902-f9dc4b63ee1a.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        136.184.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:be:9f:bf:a9:ce:64:68:5d:86:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=0cb7b754-ae3b-4de3-b462-7c9107b9c6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:80:44:45:0b:12:ad:55:ed:2e:6b:3e:16:
                    81:10:cc:dc:93:42:86:b8:4b:aa:f3:73:8b:43:9e:
                    20:48:0e:21:b8:b1:e2:09:6c:1f:78:cc:a6:74:65:
                    16:de:99:cf:72:ab:31:46:0e:eb:34:36:2a:70:57:
                    84:35:f1:e4:7a:b6:ce:5b:20:79:18:68:20:94:8a:
                    2a:7f:90:55:f3:df:33:57:ae:e0:0b:4b:fc:cf:5c:
                    dd:68:2c:ae:49:81:0a:6b:3c:40:bc:db:73:19:4c:
                    a0:20:78:f4:c2:52:60:0e:22:54:bd:77:b1:a5:85:
                    37:0f:2d:02:2a:3e:ab:94:12:7e:e4:60:dc:76:94:
                    72:85:4f:66:3e:48:02:4d:41:5d:36:33:5a:b6:7b:
                    a8:5e:d7:67:dd:c5:1f:20:25:77:41:ea:b5:12:f2:
                    86:5e:69:bf:c2:45:88:08:0f:b3:23:0c:4b:a6:2d:
                    26:57:50:e0:64:88:ca:bf:f5:b5:2b:77:f7:a7:60:
                    4c:f2:c0:80:31:10:74:2f:3b:28:10:ce:1b:27:ca:
                    91:93:fa:13:eb:a4:36:3f:f9:80:c9:cb:24:49:da:
                    d8:fa:e3:af:88:17:ae:b3:09:95:a5:98:ea:39:47:
                    ac:2b:3a:8a:0c:b8:d2:2d:43:a0:6b:69:d9:02:f3:
                    69:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:39:C3:61:30:C3:BA:57:18:74:1C:81:90:7B:D6:CA:DB:A5:45:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/41b5d0e4-b603-3b36-8902-f9dc4b63ee1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d4:b5:c9:d3:77:13:26:67:77:11:3c:c9:1f:87:83:a9:cf:
         7f:25:49:92:cd:30:77:c9:f2:86:c6:21:2b:ee:a8:a9:21:c5:
         ab:15:69:69:bf:14:92:93:30:12:d5:f1:f3:e8:f3:81:e1:eb:
         69:1a:7c:fd:bb:08:f0:19:2e:ef:f6:71:a2:eb:e8:dd:3e:53:
         db:80:2b:b0:59:2d:98:1d:f3:a9:9d:61:f9:de:e9:92:93:5a:
         d6:da:95:d3:a4:50:e5:82:c2:a7:36:21:99:cb:cb:e3:db:c2:
         8b:de:9b:53:60:2f:07:10:b4:9a:4c:c2:30:d1:e9:2f:0e:f8:
         59:a1:d0:11:8f:ec:d5:03:38:09:1a:8a:25:6b:79:bb:db:d5:
         fd:e6:f9:8d:0a:2e:9e:52:1c:19:7e:e7:af:d9:96:49:dd:08:
         f0:40:fb:15:b2:96:ed:de:67:5d:13:70:8f:d4:c1:f0:7a:36:
         2e:6d:ed:28:4c:6e:13:ba:38:04:66:69:e5:1a:df:95:06:fe:
         99:e9:7a:f0:15:b9:d3:21:eb:8d:dc:86:3d:35:1b:ab:88:17:
         8a:26:37:e5:3f:6c:cb:61:94:c1:94:5f:f4:25:ff:70:43:43:
         59:00:ed:62:2b:43:5e:82:7b:2d:fb:17:08:c3:3c:15:25:2f:
         42:16:dd:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm76fv6nOZGhdhugwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzM3MDM1ZjAtZDVkMS00NWQwLWI2NDctN2EyM2Y5ZTNk
NTRjMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
MGNiN2I3NTQtYWUzYi00ZGUzLWI0NjItN2M5MTA3YjljNmE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd6AREULEq1V7S5rPhaBEMzck0KGuEuq83OL
Q54gSA4huLHiCWwfeMymdGUW3pnPcqsxRg7rNDYqcFeENfHkerbOWyB5GGgglIoq
f5BV898zV67gC0v8z1zdaCyuSYEKazxAvNtzGUygIHj0wlJgDiJUvXexpYU3Dy0C
Kj6rlBJ+5GDcdpRyhU9mPkgCTUFdNjNatnuoXtdn3cUfICV3Qeq1EvKGXmm/wkWI
CA+zIwxLpi0mV1DgZIjKv/W1K3f3p2BM8sCAMRB0LzsoEM4bJ8qRk/oT66Q2P/mA
ycskSdrY+uOviBeuswmVpZjqOUesKzqKDLjSLUOga2nZAvNpjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKU5w2Eww7pXGHQcgZB71srbpUXiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcw
MzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIzZjllM2Q1NGMvNDFiNWQwZTQtYjYwMy0z
YjM2LTg5MDItZjlkYzRiNjNlZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzM3MDM1ZjAtZDVkMS00NWQwLWI2
NDctN2EyM2Y5ZTNkNTRjLzMzNzAzNWYwLWQ1ZDEtNDVkMC1iNjQ3LTdhMjNmOWUz
ZDU0Yy5jcmwwHwYDVR0jBBgwFoAUQxtL6ZGGkmChwHIkxJcDv+hKMW8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcwMzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIz
ZjllM2Q1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLjiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnUtcnTdxMmZ3cRPMkfh4Opz38lSZLNMHfJ8obGISvuqKkhxasVaWm/
FJKTMBLV8fPo84Hh62kafP27CPAZLu/2caLr6N0+U9uAK7BZLZgd86mdYfne6ZKT
WtbaldOkUOWCwqc2IZnLy+Pbwovem1NgLwcQtJpMwjDR6S8O+Fmh0BGP7NUDOAka
iiVrebvb1f3m+Y0KLp5SHBl+56/ZlkndCPBA+xWylu3eZ10TcI/UwfB6Ni5t7ShM
bhO6OARmaeUa35UG/pnpevAVudMh643chj01G6uIF4omN+U/bMthlMGUX/Ql/3BD
Q1kA7WIrQ16Cey37FwjDPBUlL0IW3fQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:37 2025 by rpki-client