Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2aef19a-1b96-3d5f-8377-c38afbaef6ac.roa
File:                     d2aef19a-1b96-3d5f-8377-c38afbaef6ac.roa (raw, json)
Hash identifier:          hEwwr4iwryiTxL5JHSh+V7/0ajIZxuPOsn/QePIdzlk=
Subject key identifier:   5F:8D:EC:56:DD:AC:B5:11:93:E9:08:43:57:58:F2:44:A8:7B:07:A6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848E2D1A6503829D3F822D6B280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2aef19a-1b96-3d5f-8377-c38afbaef6ac.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     6939
IP address blocks:        136.0.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:a6:50:38:29:d3:f8:22:d6:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=ccf6a732-15b9-4fce-9184-bc608c68d291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:11:ec:93:85:db:6d:31:d9:02:90:ab:37:63:
                    0c:00:cc:1b:0d:37:99:b4:48:b2:40:d1:97:58:96:
                    6d:e8:dc:9c:38:ef:39:12:6a:52:da:f0:33:eb:c4:
                    47:b3:7b:3e:e6:bd:f6:4e:3f:82:42:ab:bd:89:3c:
                    0e:78:36:51:8e:c3:04:a6:13:ae:99:4e:95:f2:8e:
                    d6:1b:94:f0:f7:b3:09:f1:1c:99:49:a1:66:c1:98:
                    ab:d1:82:ab:7a:de:5e:69:ad:f3:dd:d2:65:bf:c6:
                    b5:93:86:ae:3e:1d:5b:42:db:e2:52:f2:19:ee:06:
                    dc:06:af:1c:19:40:a2:a3:0b:6b:4d:c1:cd:63:fc:
                    b1:27:42:a3:00:63:f3:19:9b:fe:4d:2b:fc:e3:1c:
                    d3:ba:7a:bf:8b:0b:6b:b1:e0:1e:dd:82:2d:2b:73:
                    12:7a:4e:18:02:64:12:10:89:f8:fc:db:16:c2:21:
                    7e:58:24:57:b9:40:1a:32:9c:9f:9a:69:a1:f3:da:
                    e4:05:14:f3:fc:3c:c7:af:2f:bd:d6:d5:93:cd:53:
                    1b:68:dd:7e:6b:c8:c1:4a:8e:85:ca:a5:6e:b7:9b:
                    1c:5c:0a:8a:12:54:4b:d3:12:be:69:d8:96:1b:f2:
                    35:4b:1b:93:ee:a8:56:2f:b4:c5:85:1a:0f:62:b8:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8D:EC:56:DD:AC:B5:11:93:E9:08:43:57:58:F2:44:A8:7B:07:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2aef19a-1b96-3d5f-8377-c38afbaef6ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:6e:63:d1:84:b7:4a:7d:d3:f0:86:3e:25:f0:0a:ed:ce:
         09:17:4d:40:f1:a5:dd:e1:04:79:ab:90:fb:42:b7:97:c8:0d:
         7c:98:12:60:19:13:e7:5a:16:93:63:37:30:de:3c:a3:19:ff:
         58:52:f1:69:8d:8b:48:5c:a9:96:fd:f7:81:ad:a2:f3:f0:f1:
         2c:d6:40:80:68:6c:80:d9:17:73:54:7e:cc:ce:8c:c5:c1:90:
         dd:3d:4e:22:98:a0:ba:cf:31:3e:93:16:c6:42:ba:ef:69:c8:
         7e:cb:12:99:96:31:9a:cd:c1:f4:25:e4:29:db:75:aa:86:75:
         ab:ca:9d:3a:24:92:c1:d8:42:4f:0d:ab:7f:73:18:bd:69:48:
         ce:e1:63:12:c0:a3:2b:b3:22:b9:1b:f5:d0:c4:9f:fd:47:55:
         aa:97:e6:9e:4f:ff:b0:54:3b:b3:4d:66:b0:c8:77:97:b1:0a:
         6e:68:42:1d:e6:02:58:75:17:ce:42:6c:0a:6f:4d:10:0e:72:
         93:d7:2c:c6:af:db:c2:a4:d0:25:a6:3c:6e:6c:29:e3:0a:7a:
         a4:03:2b:7f:84:56:fc:e5:d0:34:80:6e:24:ef:3a:49:86:7d:
         e5:b8:a3:ed:e8:7c:0a:41:85:c9:4e:db:be:67:8f:7a:a8:57:
         00:bc:4a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:48 2025 by rpki-client