Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/361e1e70-90ea-33af-9d97-8dd31e29ee40.roa
File:                     361e1e70-90ea-33af-9d97-8dd31e29ee40.roa (raw, json)
Hash identifier:          ZOAqLkSb87jqcGkPSxh6YyTPUk+PPBGFYAXeOTp7p8E=
Subject key identifier:   47:6E:44:01:D7:38:FB:B1:AF:C0:B0:C2:09:C0:E8:F7:8A:8B:CE:66
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C581FF078EC8E81962E58780
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/361e1e70-90ea-33af-9d97-8dd31e29ee40.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:ff:07:8e:c8:e8:19:62:e5:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=86899b2d-d432-42f4-9b20-26aa1e55724f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:b0:5d:98:1c:17:32:7b:3b:a3:8a:29:71:
                    78:59:c0:6a:fe:cc:a7:ef:41:ef:ac:fc:ba:7d:00:
                    f6:9f:f3:f3:39:50:e6:55:e1:fa:8a:f6:1a:81:53:
                    23:92:7a:9d:3f:db:14:9f:b1:b3:8a:32:fd:48:43:
                    d0:16:95:35:89:33:f4:81:78:62:c2:44:1e:cf:18:
                    27:de:61:21:02:ab:5f:93:33:06:51:43:b3:ca:d5:
                    4d:7d:18:d4:15:33:d7:8d:6a:95:02:b4:38:13:79:
                    9a:4d:1e:f7:7a:88:c1:b4:ac:9b:b2:73:24:27:11:
                    77:ad:63:ca:93:10:c0:67:20:36:a6:44:a2:10:c8:
                    05:e6:49:bd:dd:32:0b:53:f1:4e:b1:fe:f9:2e:72:
                    5a:f9:a7:8e:b4:1d:45:0e:c3:1b:c7:21:64:d3:f3:
                    96:c0:68:a8:de:72:c5:41:59:03:09:03:31:85:17:
                    2b:82:78:11:80:43:d9:74:18:4e:57:ae:bc:19:b4:
                    19:27:fb:5b:d1:b7:30:d7:3b:af:ab:df:60:c9:31:
                    9d:e4:b5:de:d4:cd:0d:2a:5a:7b:3d:72:b7:c3:dc:
                    8e:5c:6e:98:a2:d0:a0:0d:7b:a9:93:86:c3:57:c9:
                    d1:a0:d2:be:12:29:42:ad:09:e2:9a:f6:a8:eb:bc:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6E:44:01:D7:38:FB:B1:AF:C0:B0:C2:09:C0:E8:F7:8A:8B:CE:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/361e1e70-90ea-33af-9d97-8dd31e29ee40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e7:2c:7c:cb:de:e9:cc:f8:e6:9b:90:7f:b2:ba:36:96:10:
         17:19:ca:86:12:4a:46:9c:e3:24:8f:6e:cb:62:ff:7f:89:bd:
         20:16:4d:82:04:8b:14:1f:9a:cb:39:a6:3a:d6:f2:10:62:1d:
         d6:83:11:65:3c:7b:77:a6:cc:cb:07:2e:bf:43:c2:a7:ba:e9:
         d0:32:33:66:0b:d4:5d:61:5f:49:8a:7b:01:a1:0f:59:46:6c:
         e6:01:eb:74:70:67:f2:57:61:75:f1:9b:63:38:3f:65:1d:b9:
         c6:e4:49:19:15:44:a9:e0:de:56:4e:92:3d:1c:d3:1f:25:db:
         be:70:cb:e0:6d:4f:9a:e6:c6:e5:a4:59:11:11:f0:67:6b:eb:
         a0:8a:c3:2f:a6:16:f4:d9:57:ef:26:be:64:71:cd:f7:9b:dd:
         43:3a:0d:c5:a7:9d:7a:67:4c:8e:68:6c:31:be:94:72:73:c3:
         d6:74:bd:cf:63:9e:e6:6d:40:5f:e0:95:6c:83:de:13:65:95:
         1a:e1:a1:7d:04:34:5a:ef:3d:a6:7a:67:fa:97:6e:15:4d:f4:
         c7:38:d9:4b:75:a9:4e:80:f7:97:ed:52:c7:b1:f4:2a:46:ff:
         3a:6d:d9:81:17:4b:84:af:a7:6c:12:fa:dc:ce:c6:37:ab:f4:
         b4:26:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:47:40 2025 by rpki-client