Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35602ab2-46e5-3408-9c3f-313ec33e79af.roa
File:                     35602ab2-46e5-3408-9c3f-313ec33e79af.roa (raw, json)
Hash identifier:          h+2zRMAntKloTogqiZcfP9z0tXbydEeAyyV2Lf38pzQ=
Subject key identifier:   84:E4:CD:C8:DA:31:74:6B:AC:59:C7:AC:1E:CE:A3:7B:D5:36:B0:AC
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C5817E75578285FCB2BF0D00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35602ab2-46e5-3408-9c3f-313ec33e79af.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:7e:75:57:82:85:fc:b2:bf:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=ecc406b5-8a6d-483f-a528-cf75f0c97a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:37:4f:a5:83:f6:d7:01:b1:75:9f:ad:52:
                    05:b1:4b:4d:aa:cc:8d:43:b2:2c:ba:a3:da:98:46:
                    ba:91:e4:ba:2f:5e:d1:3a:10:97:60:4c:7e:b6:82:
                    73:00:e4:22:56:b4:49:f9:7d:63:06:61:ff:f7:b4:
                    7b:d8:80:de:e8:f1:0a:1a:c2:81:d9:dd:30:33:0b:
                    96:3a:bf:9d:5b:10:a0:35:94:2d:16:5a:c9:48:a3:
                    ce:9f:50:00:cb:6a:69:37:5d:15:d5:03:a1:09:42:
                    c8:63:cf:f2:7e:1d:92:b0:cd:b4:c9:e9:64:70:3e:
                    86:2d:44:2f:f0:83:fa:63:cd:59:23:92:94:2d:2c:
                    63:24:70:79:09:55:48:a0:88:11:47:ce:95:ab:0d:
                    e5:22:b0:92:c7:ff:be:45:12:f7:eb:d5:58:57:80:
                    19:aa:9e:6f:5b:16:9a:3f:48:8d:4d:e3:ae:c0:5e:
                    c8:3a:b3:f5:f7:56:87:9c:25:56:64:ef:12:d5:d6:
                    15:f4:69:73:11:5c:37:65:22:8a:44:4e:5d:c7:0e:
                    95:0a:8a:03:e6:b4:8c:58:40:c9:76:f4:58:31:05:
                    69:0c:fe:ed:5a:66:58:17:6c:61:65:68:8b:30:03:
                    82:10:f0:4b:c4:27:89:ac:db:7e:97:ba:44:f3:78:
                    06:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E4:CD:C8:DA:31:74:6B:AC:59:C7:AC:1E:CE:A3:7B:D5:36:B0:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35602ab2-46e5-3408-9c3f-313ec33e79af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:0a:eb:07:e0:45:4e:82:fd:15:19:db:8e:01:80:bb:89:65:
         f6:77:78:dd:b0:2d:6c:93:aa:b8:39:30:db:3c:ea:80:a8:57:
         74:b8:13:b3:84:51:3a:db:0c:90:45:08:d4:29:39:ea:65:b7:
         01:4c:8d:eb:c4:87:4a:09:30:8f:4f:52:5a:e8:9f:de:45:a9:
         5f:db:91:e1:0d:64:10:3c:e5:3f:82:ec:15:7c:03:de:96:4a:
         de:9d:19:9d:ba:22:fb:66:9d:8a:92:0f:88:ae:fe:56:e9:eb:
         17:dd:9f:31:b0:56:86:1c:e6:8a:46:5b:71:e1:74:d8:17:cf:
         88:bc:26:94:cf:49:5a:56:6f:e5:9a:52:5d:f4:c2:39:be:d2:
         e2:df:ec:51:f1:ef:98:f3:21:30:50:49:62:b2:f5:00:c0:1f:
         26:a2:a9:c5:af:30:e5:ab:e2:8d:d4:ab:8e:d4:07:7e:53:15:
         3f:29:7a:f5:6f:c2:9a:de:9a:ef:0f:66:0c:3c:73:1a:ec:01:
         18:df:a1:30:92:e3:d4:61:60:9d:ef:fe:02:7f:4d:19:8c:aa:
         54:5b:a2:1d:7f:8f:47:63:ef:7c:e7:63:48:fb:99:f0:e0:d4:
         8b:11:12:1c:8e:c6:b4:cb:4f:cd:2d:57:2b:c8:25:93:11:ac:
         00:3f:ee:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:56:41 2025 by rpki-client