Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a2ab2f-70fd-390f-bc46-686b48b6e74d.roa
File:                     53a2ab2f-70fd-390f-bc46-686b48b6e74d.roa (raw, json)
Hash identifier:          tAbNA3hf0GRBmg7IVTu/ukI246kpic7td1pqQfUTYD8=
Subject key identifier:   CE:F0:B3:30:90:84:3E:98:30:A0:FA:DE:0F:04:9E:53:34:3C:03:BA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848BFEBD74CBCE48FA37AA49440
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a2ab2f-70fd-390f-bc46-686b48b6e74d.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36492
IP address blocks:        136.22.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d7:4c:bc:e4:8f:a3:7a:a4:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=1549e1fe-a6fb-46e9-8b05-25d0fad05cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0c:dd:49:a1:da:c6:5b:0f:76:9e:da:63:68:
                    d6:4c:c9:f5:c7:49:d5:27:2f:7a:db:b6:12:be:d3:
                    ae:bf:d7:d7:2a:22:be:26:4f:3c:76:62:02:ff:89:
                    53:3d:3f:c1:62:5a:fd:da:58:fe:d2:ee:7a:9e:7f:
                    ed:0f:72:4c:2b:8c:75:bd:da:d3:bd:ca:06:c4:4a:
                    59:89:97:0f:ea:d2:81:49:8a:04:1a:ef:f6:12:5d:
                    5c:39:2a:a8:cd:d6:de:7d:33:6d:c3:92:7e:27:49:
                    12:a1:94:35:85:16:06:af:12:8e:95:0a:5f:f7:cb:
                    81:aa:af:56:17:9c:03:08:d5:90:d5:7d:86:92:71:
                    02:3a:bc:5c:6a:16:46:6c:61:ee:4e:1f:a4:74:e0:
                    eb:de:47:ae:bb:43:b3:52:eb:1e:09:67:0e:92:9f:
                    65:34:dd:92:b1:48:a2:6c:0c:44:88:96:41:7d:69:
                    1c:e6:6d:67:21:f7:73:2d:68:c1:16:b2:0d:5a:aa:
                    c2:ea:ea:32:5d:c3:c9:be:0e:c3:56:75:44:0d:b4:
                    a4:47:32:63:73:45:4d:bd:59:fd:d7:6f:7a:3f:b6:
                    a8:b5:24:d5:49:a5:01:dd:13:01:cb:00:43:20:5f:
                    02:00:94:17:66:55:70:e9:78:db:ef:48:96:c2:3a:
                    12:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F0:B3:30:90:84:3E:98:30:A0:FA:DE:0F:04:9E:53:34:3C:03:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a2ab2f-70fd-390f-bc46-686b48b6e74d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:df:f8:2c:5e:c0:af:af:fa:33:80:ba:33:5c:eb:f3:1c:45:
         3b:63:8e:13:b0:69:07:e4:9e:f3:98:c3:f5:f7:27:da:0d:11:
         fd:fd:47:ff:58:eb:2c:a7:03:6b:e4:1e:ca:33:d5:0b:4e:02:
         53:46:8d:a4:d5:c1:0a:34:bf:83:ff:ba:bc:b0:2e:ac:c3:e9:
         a4:aa:4c:1e:54:20:41:db:23:9e:c4:23:00:45:c8:b7:d7:69:
         18:d4:3f:cf:b9:b3:bd:8d:72:50:29:81:b1:bd:59:99:2e:44:
         4e:cc:df:57:87:96:5b:7f:eb:b4:8c:02:48:9f:ba:8c:ea:9f:
         b9:ba:8f:62:70:b5:84:19:e0:46:21:52:31:48:44:07:f7:2d:
         6e:89:08:19:55:53:9c:71:c0:0f:40:bf:da:72:60:eb:79:ea:
         ed:93:9b:31:60:d3:7f:2c:8d:e4:a3:1b:15:cc:fc:18:72:06:
         c1:aa:b4:be:15:56:88:ac:eb:d0:52:6e:92:5f:ee:0a:e3:00:
         54:20:a4:e4:1e:04:87:f9:b8:cb:4e:cb:f4:e0:4b:dc:73:65:
         59:b7:7e:b5:06:0b:b6:d7:15:c9:a3:af:b7:04:be:c4:dc:c9:
         cc:a8:8a:7f:20:b3:8b:5d:52:5d:d5:f4:1e:09:5a:eb:d2:0a:
         c8:7d:5d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:57 2025 by rpki-client