Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa
File:                     53960a1b-a057-314e-9200-bfba1423d151.roa (raw, json)
Hash identifier:          rjH0ca/BwCYkXqbpluR7kpwMhhRTToUNQPcOtdgMoBw=
Subject key identifier:   E9:0B:D4:4B:45:39:AF:BE:83:3D:BF:0D:F6:09:AF:9C:F0:84:BC:49
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848BFEBB9AA99FD01D5A6FC8A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36492
IP address blocks:        136.22.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b9:aa:99:fd:01:d5:a6:fc:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=b83cbfe6-d681-400b-b9b6-f0ceff8114f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2e:2e:63:15:47:94:93:e1:d8:1a:85:14:2d:
                    0f:ad:49:7a:85:cb:6f:93:c6:52:92:c0:c0:aa:02:
                    b6:ec:46:71:2f:c5:22:cf:19:36:c7:d2:35:4c:ea:
                    f4:41:a4:7b:ba:22:36:8c:24:1d:4a:35:75:fd:dd:
                    ee:13:77:07:22:a3:29:58:47:92:6a:2c:74:61:76:
                    c2:33:31:ea:9b:14:f6:24:80:95:c2:72:4e:ed:5a:
                    65:80:cf:ab:b9:35:52:59:d6:7e:69:cd:b6:f9:bb:
                    42:c1:0e:20:67:39:02:2d:37:38:22:5d:c5:7d:13:
                    89:ff:47:d5:52:31:3a:7b:23:b8:ab:60:18:88:e2:
                    ad:2e:af:4f:ac:09:5e:98:fc:32:29:24:d9:ba:38:
                    0e:16:d8:e6:bd:6d:7d:1f:e8:0a:a4:ae:e0:2a:41:
                    d1:2a:52:55:57:32:6d:f3:26:a6:41:24:45:52:ec:
                    a8:14:d4:36:ea:33:e0:62:cd:75:9e:33:11:0d:0d:
                    64:02:90:2e:0b:ec:0c:3e:70:06:b1:30:00:15:32:
                    b6:0c:f3:85:98:ee:9b:0f:7d:36:4f:02:d1:96:13:
                    98:59:9b:36:68:4d:4e:ae:60:bd:18:1b:7d:db:5e:
                    96:14:81:c1:2c:13:c5:65:ec:7e:3c:19:3d:7d:18:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0B:D4:4B:45:39:AF:BE:83:3D:BF:0D:F6:09:AF:9C:F0:84:BC:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53960a1b-a057-314e-9200-bfba1423d151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:95:42:25:a9:16:93:ce:90:2a:64:24:b3:b9:3e:8b:ef:98:
         b5:8c:96:44:60:22:e2:a9:5f:6a:ce:0b:a7:3d:a7:3e:9e:2f:
         d3:ad:0d:e9:49:f3:9d:4c:36:7f:7e:b0:41:45:52:5d:40:e1:
         0c:df:8f:fb:df:ab:51:65:12:b8:2c:2d:94:98:2b:f5:23:a4:
         8c:52:2e:e3:4c:e4:1e:57:91:45:97:94:dd:49:95:19:ac:f0:
         c9:b0:4c:8a:86:4f:da:32:0a:ff:b1:53:f8:07:2a:a6:90:58:
         71:74:46:f4:da:75:e1:81:95:dd:14:9b:c5:5a:4e:e2:8b:d2:
         14:10:e8:06:62:1a:41:39:aa:5d:25:83:ed:ef:b4:96:39:89:
         f7:55:5f:98:6a:d7:83:bc:24:87:d8:66:c3:1e:53:f6:12:e5:
         1d:c8:e5:c6:91:9e:9c:50:0e:23:a1:d0:87:7a:5e:cc:cb:81:
         47:b3:a0:43:23:df:ec:86:f9:87:25:e5:76:8c:79:bf:2f:72:
         46:3f:ff:ea:ed:02:f3:47:11:e5:7f:65:a3:d1:c7:5a:0b:e1:
         9f:63:54:09:3f:27:0a:79:a0:ad:53:44:b2:7a:b4:ee:00:5a:
         d5:01:7f:c3:cc:06:94:9b:5d:9c:0c:c3:2b:ca:77:c0:3d:cb:
         9d:ad:30:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:50 2025 by rpki-client