Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03c8fabe-e528-3da2-a792-bb61b7aa9d3d.roa
File:                     03c8fabe-e528-3da2-a792-bb61b7aa9d3d.roa (raw, json)
Hash identifier:          5PxOJJpJ8q0xUmjZFeG1yX9+gYpxixY3TipHD0kQcqM=
Subject key identifier:   B6:36:0D:D7:64:BA:3A:76:04:A5:4A:7E:E3:1C:F2:AB:98:FF:97:C1
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C581853957957E2159A6D380
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03c8fabe-e528-3da2-a792-bb61b7aa9d3d.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:85:39:57:95:7e:21:59:a6:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=7b9364d3-3b3f-4c93-a06d-31d32b37c97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:e4:72:c7:00:fc:e8:70:4b:f5:43:47:d5:
                    d5:eb:e0:22:e0:fc:3c:0d:61:0e:f6:2c:b1:47:c8:
                    62:d8:ce:ef:bd:61:21:73:c5:05:54:cf:ca:d7:a7:
                    76:c8:12:51:e2:38:e0:13:54:4a:bd:92:37:94:7b:
                    e8:77:eb:97:93:0b:61:63:b4:c9:d8:e0:f3:2d:d6:
                    a2:48:e4:de:3f:1e:99:3f:8d:29:e0:3f:29:f5:fc:
                    bf:cb:63:4e:7f:a0:31:d6:c9:d5:17:9b:2c:42:ea:
                    98:81:71:e8:4b:93:ba:a9:6f:07:89:e9:96:d9:d5:
                    da:8c:1e:1a:67:b2:3c:8f:a9:33:ff:b9:1e:3e:16:
                    db:e3:a2:51:00:f5:c2:f5:d5:a5:1b:cd:a3:39:4e:
                    68:26:7b:cf:fd:65:69:cc:d0:2d:f9:59:9f:20:a6:
                    08:39:9a:38:ee:69:fd:4b:5c:99:a4:ae:8d:5f:f0:
                    b7:2e:10:cc:f5:04:97:84:25:61:4c:75:d5:a7:ea:
                    a5:2d:00:b7:d3:95:68:6b:a4:c3:0b:03:bf:22:90:
                    72:0d:c0:5d:96:72:7c:bd:f3:71:d6:66:f4:23:59:
                    10:af:9a:4d:e0:84:1f:cd:8f:9e:c4:8a:c0:56:43:
                    b3:78:4b:81:c6:a8:8e:ae:1e:c4:3d:62:e0:4e:66:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:36:0D:D7:64:BA:3A:76:04:A5:4A:7E:E3:1C:F2:AB:98:FF:97:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03c8fabe-e528-3da2-a792-bb61b7aa9d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:2b:ed:54:4a:2d:b1:57:47:e3:c8:ce:b4:02:f0:60:05:0c:
         31:d2:25:3d:6c:75:08:e4:af:b6:45:4f:81:ad:83:68:67:08:
         cc:36:d5:ca:ce:2d:45:3f:95:fe:10:a2:da:0f:05:5a:35:9a:
         40:8a:1e:d6:e8:89:fa:b1:10:ed:a1:9b:07:f0:d5:f1:0b:4c:
         6b:9b:79:a7:50:7e:db:43:cd:9f:c8:ba:f4:d3:9c:88:63:25:
         9f:de:da:c6:f4:ba:a9:2a:15:24:b0:ce:9e:ef:83:75:bc:fc:
         8b:11:29:37:92:fd:49:39:a4:42:5f:19:4c:5e:2b:37:5d:0b:
         2e:ee:5b:b8:38:fa:27:c7:fd:6d:f0:df:40:e1:48:2e:76:ff:
         7f:a7:02:d9:58:6b:ee:9c:22:6c:0b:fa:79:e7:9c:74:9e:fb:
         7f:76:bc:a4:04:84:75:f3:67:ea:a0:9e:7f:b7:a1:10:3b:fa:
         b6:d4:08:df:45:7b:41:df:b4:6c:88:d8:60:85:51:fb:ba:5a:
         9b:3d:84:8d:db:89:2e:f3:fd:dc:5a:ef:ec:9b:96:0f:19:18:
         dc:f1:33:bb:4f:a9:43:3a:4a:1f:22:b0:a6:ab:54:54:be:da:
         4e:73:ff:62:d7:e3:9f:c7:7f:97:da:5b:43:b8:5f:5f:f6:1c:
         cd:6c:cc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:19 2025 by rpki-client