Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1ddd3ca5-92a0-3d12-b871-566cc636e64e.roa
File:                     1ddd3ca5-92a0-3d12-b871-566cc636e64e.roa (raw, json)
Hash identifier:          BJ+guxRYIvMjJ4djbvMl0HZD0sCQMs2Nzh9Cxo40U5c=
Subject key identifier:   BE:91:CA:96:03:78:5B:66:97:C9:3D:F6:8A:DF:52:7A:52:85:1A:E7
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C5818292A36D9B60F2F26900
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1ddd3ca5-92a0-3d12-b871-566cc636e64e.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:82:92:a3:6d:9b:60:f2:f2:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e45f0adc-30f1-48bd-9c70-e71e472d0469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:6a:f7:58:de:f8:a3:49:04:0b:5d:a7:d4:
                    df:00:c7:85:19:01:56:23:73:e6:80:2e:77:1b:c2:
                    39:99:a3:61:39:c7:f8:03:6b:2b:d3:8e:b9:08:f4:
                    e0:2e:30:1e:dc:07:8f:8c:d0:f9:02:19:91:96:55:
                    f0:f8:4f:49:8e:bf:07:f5:92:7f:38:49:ce:f8:7d:
                    65:4f:e3:b6:46:25:84:f5:7d:5d:9e:e8:bd:ac:2e:
                    53:11:bf:63:7a:47:91:56:c2:69:e0:18:81:eb:65:
                    34:6b:1e:53:67:52:88:81:53:ef:ad:7a:84:c5:cd:
                    29:30:44:12:fe:75:cd:01:3e:40:2a:2f:42:bd:cd:
                    34:ac:e9:f7:ca:7e:2c:4a:4f:35:73:2e:20:b8:52:
                    92:2a:e4:ea:c4:e9:0e:ed:6f:fb:21:f5:c2:24:91:
                    2a:3a:ae:31:72:b0:a5:bf:c7:fc:c0:6e:b0:cd:6f:
                    fc:eb:b8:ea:79:d8:72:a2:c6:c4:3e:d7:87:d2:5d:
                    63:ff:9c:95:c7:ed:83:85:04:4b:91:b4:60:db:8b:
                    f8:b0:55:82:5b:84:b1:e0:50:9e:8e:fb:2f:79:22:
                    bb:6b:ec:90:74:9b:1c:87:e8:b9:60:70:26:cc:91:
                    e5:10:eb:94:7d:d1:19:31:2b:6e:e4:ef:a3:26:4c:
                    47:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:91:CA:96:03:78:5B:66:97:C9:3D:F6:8A:DF:52:7A:52:85:1A:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1ddd3ca5-92a0-3d12-b871-566cc636e64e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:70:83:d5:3d:04:fd:a4:1a:a5:8c:05:83:97:05:35:69:78:
         15:cd:d9:b5:0a:fa:47:7d:74:65:6c:60:f7:8e:5d:97:69:d3:
         bf:f7:14:48:9a:fa:33:7d:d1:8a:f3:c8:e9:20:75:84:db:58:
         1d:23:b7:aa:e7:78:a4:dd:82:98:ba:cb:8a:d9:6c:54:2b:12:
         5f:a9:fb:23:62:68:c7:65:d0:c7:a4:1f:36:ee:54:45:0b:6f:
         00:9a:a3:76:3b:2f:7a:83:b6:c8:ff:be:ce:6d:a4:c7:3a:73:
         43:d6:fc:c5:58:7f:8b:47:44:15:1a:b8:7a:40:33:8c:31:e0:
         f6:91:4c:0e:f5:21:9d:d5:11:45:76:0a:fe:92:51:c6:4a:ca:
         a6:3f:8b:38:4f:79:60:87:94:ab:06:e3:67:51:c5:93:85:86:
         67:84:7a:86:4d:2b:e2:3c:34:07:9b:d0:9d:a3:1a:7d:dc:ad:
         8e:db:86:fb:d1:1c:ff:10:14:0c:64:9f:2d:e1:2d:d0:07:03:
         63:bc:28:c8:4c:e7:3d:7f:e4:48:83:00:5f:d2:f7:9d:5b:d9:
         ac:e8:af:ae:70:65:45:33:25:a8:6e:78:8d:75:2c:5f:e0:51:
         d2:f6:f3:ea:a2:91:b3:aa:a5:d4:a3:4b:c6:f2:02:86:ca:8d:
         20:5f:b7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:31:09 2025 by rpki-client