Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f928ff8-08fd-380b-a1fe-36ff2841a4be.roa
File:                     4f928ff8-08fd-380b-a1fe-36ff2841a4be.roa (raw, json)
Hash identifier:          jenSKXr5rmNpYaGCH1qsQGPIfGb+T5mWBvZyBfuWOnI=
Subject key identifier:   96:CB:63:CA:50:F3:85:32:0E:F7:03:85:27:0B:BA:F4:53:6C:4B:5E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848BFEBB7105D8B0EFE3F0F5A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f928ff8-08fd-380b-a1fe-36ff2841a4be.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36492
IP address blocks:        136.22.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b7:10:5d:8b:0e:fe:3f:0f:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=90007f2e-bf07-406a-8565-bf55f8ab0abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ad:90:1f:23:85:81:f7:b4:cb:af:e5:8e:a4:
                    c7:bc:2d:c4:4b:19:2d:b2:f4:f5:5c:4e:58:10:cb:
                    65:57:f5:7d:85:6e:78:81:f8:ec:0d:bd:cf:6a:26:
                    5e:e5:0e:1e:58:d8:fa:8e:28:93:09:b9:06:2b:bd:
                    30:49:43:b8:30:b6:f5:ff:2b:ba:80:2e:06:c8:35:
                    01:72:c5:c0:48:93:91:22:43:b4:a3:a4:20:d0:57:
                    83:75:79:44:16:b0:44:fd:b3:ac:0b:9a:cc:ab:b1:
                    48:3f:13:b3:f1:fe:b1:bd:3b:e1:39:41:69:b9:b1:
                    55:51:96:be:42:7b:bf:a3:d7:14:52:9a:80:6e:53:
                    09:cc:3b:e1:01:46:7b:23:1d:77:3f:ee:25:60:6e:
                    2d:d1:39:b8:c7:61:a5:8a:d3:ab:6f:6f:01:88:78:
                    8d:24:b4:c3:17:e8:49:b0:18:44:4d:a6:6b:f1:c9:
                    e3:e2:2e:18:0d:0c:66:b8:2d:35:e4:2a:9a:5d:b5:
                    f0:46:ff:26:26:ab:e7:c4:ff:b5:ec:3b:40:f4:ad:
                    78:55:f4:13:57:9d:d0:d5:3d:c5:f1:ed:26:f3:59:
                    db:9c:71:24:28:eb:87:fa:1e:08:dc:c1:fc:44:88:
                    c7:03:ec:78:b0:43:b0:13:c4:65:46:28:57:09:9f:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CB:63:CA:50:F3:85:32:0E:F7:03:85:27:0B:BA:F4:53:6C:4B:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f928ff8-08fd-380b-a1fe-36ff2841a4be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:42:2f:c9:b8:c6:73:db:a0:8b:91:04:f6:cf:73:cd:71:1f:
         4b:c9:0d:46:53:05:60:21:45:7b:f2:9d:9b:69:e1:5a:48:e7:
         66:c7:53:8d:9d:a3:06:dd:80:52:1e:c3:e8:e4:3c:63:cd:db:
         2e:3f:2e:27:69:49:9e:7c:33:2e:f0:87:5b:b8:a2:e1:57:75:
         7c:9f:93:2f:aa:d3:8b:5f:7d:99:78:5a:17:6b:ee:5b:98:2c:
         81:46:6b:a0:3e:11:ba:77:91:d3:60:0b:78:38:f9:6e:0a:06:
         47:13:2f:d6:14:37:04:5a:2a:6c:fe:c5:13:4b:cf:bf:93:93:
         ac:59:66:ed:c2:de:6b:7f:7e:21:b9:4c:7a:8f:62:2b:36:54:
         0b:f1:c1:96:61:2b:b6:75:ca:c1:4c:1f:92:ce:e7:f2:7c:d9:
         cd:22:96:42:64:83:e1:26:83:72:01:f0:a8:84:0d:68:f9:f5:
         03:f9:68:b4:8b:19:d4:33:14:23:48:3f:4c:fa:1e:2a:31:b8:
         d4:f4:32:5e:03:d0:c7:6c:5c:6b:80:15:c2:74:f0:a1:30:44:
         5f:96:fa:9c:52:2a:c6:da:ca:cc:d5:08:0e:0e:65:4e:66:3d:
         f8:fa:b9:e9:a6:0c:7f:b2:47:bc:07:7c:87:df:e1:44:a5:c7:
         f7:a3:2f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:41:29 2025 by rpki-client