Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/e37d7cb2-62cb-3ef8-a826-a5952bfe174c.roa
File:                     e37d7cb2-62cb-3ef8-a826-a5952bfe174c.roa (raw, json)
Hash identifier:          LZEzpffSGDOV7/IWEmEL/0yrL1y+0IvgNXZPFvKVtFM=
Subject key identifier:   64:84:5C:71:46:A3:62:C6:F1:74:2E:51:EC:6C:EC:86:C0:CC:95:C5
Certificate issuer:       /CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Certificate serial:       010D0C9F432858493B5351810180DD0E63EAEB80
Authority key identifier: AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/e37d7cb2-62cb-3ef8-a826-a5952bfe174c.roa
Signing time:             Tue 18 Mar 2025 18:54:24 +0000
ROA not before:           Tue 18 Mar 2025 18:54:24 +0000
ROA not after:            Mon 16 Jun 2025 18:54:24 +0000
asID:                     23294
IP address blocks:        76.165.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3b:53:51:81:01:80:dd:0e:63:ea:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
        Validity
            Not Before: Mar 18 18:54:24 2025 GMT
            Not After : Jun 16 18:54:24 2025 GMT
        Subject: CN=57ab38ac-51bb-4766-a69b-577184c79699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:b8:8d:56:ad:45:05:6a:39:ad:af:9c:ce:
                    ef:82:c8:09:cc:b1:f2:bc:97:91:1d:59:da:35:a6:
                    a2:a8:ce:4f:ee:22:00:63:4e:38:c8:23:b2:2e:4a:
                    30:38:1d:00:54:ff:30:b3:46:23:1c:f3:3e:56:68:
                    06:ba:8b:bf:a2:3a:a7:58:47:08:b2:7d:fd:1d:e9:
                    17:ac:79:46:1a:ff:02:9f:d4:48:6c:7e:2b:e8:10:
                    de:5b:d1:a1:8c:1c:e8:f1:31:fa:ab:77:c1:f6:27:
                    c6:26:44:1a:32:f8:74:86:7c:51:14:b1:4e:35:06:
                    56:79:a4:b6:19:f7:a4:53:b5:83:52:f8:47:1c:db:
                    01:30:32:f9:5d:80:64:ae:83:fa:fa:5e:48:19:eb:
                    97:ce:3b:cf:9f:45:99:c6:68:2f:1f:bc:bb:64:35:
                    cb:05:2e:a4:7f:60:a9:6f:60:fa:60:84:5b:0b:b6:
                    a5:d3:76:ab:ec:8d:ed:57:90:97:c0:bc:77:9a:f9:
                    86:b6:39:6f:05:e5:79:0a:8a:06:6a:a4:43:b0:20:
                    86:ff:8a:1f:e7:cc:b2:52:50:b2:53:17:26:d3:1c:
                    42:b0:2a:9d:4f:8c:44:bb:6a:7f:62:f3:da:e6:77:
                    04:8b:a8:91:8b:47:1a:e2:a8:67:33:22:4c:cc:2f:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:84:5C:71:46:A3:62:C6:F1:74:2E:51:EC:6C:EC:86:C0:CC:95:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/e37d7cb2-62cb-3ef8-a826-a5952bfe174c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl

            X509v3 Authority Key Identifier:
                keyid:AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.165.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b4:01:26:86:97:8d:89:08:e7:f4:fb:7a:f3:e5:7f:a5:5a:
         98:1e:89:87:ba:17:c4:95:60:b2:74:1a:53:f6:b9:88:32:9a:
         5f:26:50:d5:36:66:41:23:b2:c8:ef:5a:20:16:c9:65:c8:ba:
         00:33:f5:f4:87:61:c4:fd:ad:fd:9b:c1:57:18:ed:e1:d3:56:
         55:18:ba:50:2c:fa:48:00:e9:55:14:1d:b7:c6:26:85:f6:3a:
         11:33:39:5d:66:26:77:a8:53:eb:0a:d2:17:49:bb:69:3f:bb:
         b2:fb:4b:31:d1:82:f5:37:e6:51:df:3d:7e:ad:17:6c:31:47:
         13:a5:f3:5e:0f:21:02:5f:75:64:d8:58:96:a8:b4:0e:45:c9:
         52:2e:60:74:3f:8c:a8:7d:5e:09:d7:4e:1e:a8:4c:da:e6:c8:
         32:14:e3:20:86:b5:c5:d3:13:53:1b:38:41:60:3d:be:23:85:
         1b:6b:0f:a5:0f:53:0b:f1:3a:a5:17:37:6f:3b:a3:dc:8d:ea:
         97:c9:b4:68:9c:f4:47:b7:0a:f5:25:0f:02:41:ca:b8:7a:dc:
         bd:2c:08:89:b2:bf:03:11:52:03:85:35:c7:f6:e3:98:7b:50:
         41:a6:4b:83:99:2f:eb:d7:d0:6e:55:f8:cc:49:ec:be:77:3d:
         f2:30:93:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:58:37 2025 by rpki-client