Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0ed93904-088d-3adc-8458-ec68eb898aea.roa
File:                     0ed93904-088d-3adc-8458-ec68eb898aea.roa (raw, json)
Hash identifier:          3CcqIxQyiruJpB/ELpGQm5yiEnvohmtGs5ERq1TLJBc=
Subject key identifier:   67:14:BE:5F:58:A0:9C:15:92:69:26:81:C4:D8:F5:54:CC:BA:81:E3
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C5818ADCF52B7DC61C613BC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0ed93904-088d-3adc-8458-ec68eb898aea.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:8a:dc:f5:2b:7d:c6:1c:61:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6894863a-e990-43cb-8624-d9fac1bb142f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1a:65:aa:0d:95:bb:7a:a3:4a:cb:22:b8:a0:
                    de:d8:67:b3:b0:94:e7:97:36:f9:a2:1f:b7:4c:ff:
                    df:cb:2f:8e:32:6d:a8:a3:f1:9f:87:93:54:21:b3:
                    1c:78:03:52:a8:25:7a:03:5a:dd:d0:b6:b8:17:42:
                    92:76:39:c2:41:3e:76:7e:00:3f:0f:3d:e9:8a:46:
                    12:0a:0b:6a:26:0f:2e:12:d7:2b:a0:54:6f:25:6a:
                    0e:28:71:a6:71:56:47:dc:58:82:e8:b3:6d:7e:b4:
                    8e:85:bd:ff:da:36:71:f0:8d:cd:50:d5:2d:c1:2e:
                    69:99:6c:1e:78:68:09:d5:d4:65:cc:d6:9a:1d:7f:
                    a7:39:df:45:01:01:3b:83:8b:41:38:19:18:f8:84:
                    17:28:26:73:42:07:6a:93:f3:fc:99:a4:15:01:3f:
                    8a:f0:fe:60:f7:a8:ae:93:e9:9c:70:9d:ec:84:97:
                    0b:a8:eb:1f:d8:0c:6e:bf:ed:9d:e7:41:50:06:8c:
                    ef:59:86:62:e6:1b:04:d4:a1:0e:37:a0:03:45:c4:
                    9f:34:b3:6c:17:d6:eb:eb:bd:a3:93:3b:af:0a:67:
                    b5:73:ac:6b:0f:5e:5b:16:0d:d0:1f:e9:6f:84:b5:
                    e7:71:5d:f1:f4:aa:bc:e4:da:31:d0:f6:0c:37:41:
                    6e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:14:BE:5F:58:A0:9C:15:92:69:26:81:C4:D8:F5:54:CC:BA:81:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0ed93904-088d-3adc-8458-ec68eb898aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e0:78:17:ad:72:dc:8d:4a:bb:74:b0:af:37:12:e1:40:4d:
         47:1c:d9:7c:33:f8:82:75:30:9f:c9:8e:69:15:d0:d9:ca:42:
         9d:5a:d1:5e:93:37:57:25:44:af:86:c0:23:da:95:2b:00:3b:
         c1:2a:ba:fb:29:42:90:93:ac:3a:38:ca:ca:a2:16:e1:7a:53:
         43:d6:a6:9f:cd:f0:08:5b:66:ff:37:74:19:49:03:e7:3c:fb:
         6c:39:a3:ef:ec:de:2f:d9:c1:41:8a:5e:71:27:f9:8f:29:d4:
         9b:7b:2c:23:68:ab:b3:7e:ba:e5:79:c7:24:a8:24:83:1a:93:
         36:78:a3:7d:50:5a:6d:82:9f:c6:df:99:a9:2c:52:22:40:c1:
         fd:e4:1d:97:fb:ca:22:42:8b:cd:09:f1:eb:d2:4f:1e:1b:10:
         b6:4d:86:64:1a:60:b5:68:0e:43:84:60:36:e7:de:ef:c4:92:
         50:34:64:73:21:04:a7:86:d6:d9:4b:79:63:43:0c:6a:72:8d:
         d8:7c:9c:32:59:23:2d:b3:4a:3d:25:4a:72:57:99:5e:29:81:
         da:19:b2:53:7d:b6:1d:37:96:a3:50:79:bd:ef:33:5a:7a:da:
         9a:4a:fc:8a:9f:c4:34:fd:e6:f7:79:a6:20:1f:f4:eb:9f:58:
         31:e4:44:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:35:20 2025 by rpki-client