Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53e45d29-98de-3842-be08-03d7250c0a6d.roa
File:                     53e45d29-98de-3842-be08-03d7250c0a6d.roa (raw, json)
Hash identifier:          HRx330DcTA0WMmR7juwspLj2+f1ecGYUq9oqV/sgg64=
Subject key identifier:   37:87:E6:73:49:1D:DD:76:96:62:A8:FA:92:C9:67:4B:87:6B:FB:D7
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848BFEBD786BAF74E2DDE8AC8A8
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53e45d29-98de-3842-be08-03d7250c0a6d.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36492
IP address blocks:        136.22.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d7:86:ba:f7:4e:2d:de:8a:c8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=cd0ccd16-d365-46ba-abdf-14ba87bce0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:29:fc:b4:15:48:57:fa:e4:f5:40:33:b0:9e:
                    8c:6d:ae:7e:6d:31:db:9b:ce:97:09:8c:7d:73:9d:
                    d4:dc:58:ba:5c:d9:b6:80:59:af:d6:ef:2e:83:29:
                    4a:d7:75:2a:1b:b0:bf:b2:ae:30:1c:ed:0e:84:1e:
                    97:63:db:6a:cc:8f:2a:0a:81:1a:53:22:66:79:86:
                    0e:58:82:f2:b0:c4:8d:34:91:b7:b1:cf:48:1b:db:
                    64:de:92:b0:89:03:86:08:31:03:f0:98:5f:7d:8e:
                    96:26:42:ba:1c:b3:e9:b1:60:19:3a:07:0e:55:f0:
                    4b:ae:0d:86:b5:e6:bd:53:95:42:1f:2a:f0:e5:61:
                    71:87:83:94:af:ad:22:98:24:0e:d2:be:b3:4a:af:
                    19:41:ae:a9:a9:b1:7a:72:fd:9a:46:18:ae:73:e1:
                    63:fb:d6:b4:2d:6e:74:15:65:3d:ca:00:24:23:37:
                    08:86:47:fa:d6:38:c4:2d:5c:f0:0a:de:6a:53:01:
                    2f:b3:64:63:af:33:b3:8d:6f:dd:49:71:ae:37:0b:
                    e5:bd:43:c7:6e:56:6e:d6:8a:51:a2:49:26:85:2c:
                    e4:7a:c2:bd:9c:de:06:91:6b:16:a6:40:3e:b8:8c:
                    ab:57:0d:4e:4d:38:2d:b4:4a:47:98:0a:33:2b:5a:
                    c9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:87:E6:73:49:1D:DD:76:96:62:A8:FA:92:C9:67:4B:87:6B:FB:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53e45d29-98de-3842-be08-03d7250c0a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:dc:db:14:a0:d2:19:63:e9:ab:70:e2:3e:cf:9a:10:8b:3b:
         d1:c1:99:2d:b9:a3:8e:4c:d2:63:58:96:94:13:1d:39:9e:db:
         84:a9:76:b7:05:a0:01:34:96:33:6d:68:ad:b3:ec:e8:40:e3:
         a4:57:49:0d:ca:f6:89:7f:ea:24:4c:9a:2a:6d:66:56:bd:88:
         80:15:c5:57:67:15:05:fc:a1:c9:fc:bd:68:a7:41:21:47:f5:
         9a:7e:c9:a6:d0:c4:13:b8:66:ed:b2:0b:b3:2a:43:76:17:4f:
         9d:a1:93:31:6b:40:79:61:cc:4d:3f:7b:a5:f5:bb:02:f8:6f:
         f7:e0:39:d3:1a:ab:6e:99:b0:60:22:8b:86:bd:ff:64:71:58:
         c2:5f:b7:2f:98:f3:c8:9f:43:44:e0:48:3a:b6:cd:3c:9a:1a:
         8e:7b:37:66:ea:ec:e4:56:f9:75:b0:2e:b4:6b:53:2f:dd:fd:
         e4:f6:4c:fc:cc:a0:d5:14:e0:56:94:11:7e:59:8f:06:b6:c3:
         e7:b6:da:0d:d3:b2:cd:be:aa:b4:6f:f8:96:44:11:11:0f:65:
         89:33:05:51:64:4a:06:a4:87:5c:8d:6e:7e:a2:70:c6:6f:0a:
         e6:3c:6b:fc:06:18:bc:a1:04:82:f0:94:2d:89:8e:c0:9d:e2:
         1d:26:b1:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69eGuvdOLd6KyKgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
Y2QwY2NkMTYtZDM2NS00NmJhLWFiZGYtMTRiYTg3YmNlMGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yn8tBVIV/rk9UAzsJ6Mba5+bTHbm86XCYx9
c53U3Fi6XNm2gFmv1u8ugylK13UqG7C/sq4wHO0OhB6XY9tqzI8qCoEaUyJmeYYO
WILysMSNNJG3sc9IG9tk3pKwiQOGCDED8JhffY6WJkK6HLPpsWAZOgcOVfBLrg2G
tea9U5VCHyrw5WFxh4OUr60imCQO0r6zSq8ZQa6pqbF6cv2aRhiuc+Fj+9a0LW50
FWU9ygAkIzcIhkf61jjELVzwCt5qUwEvs2RjrzOzjW/dSXGuNwvlvUPHblZu1opR
okkmhSzkesK9nN4GkWsWpkA+uIyrVw1OTTgttEpHmAozK1rJ2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDeH5nNJHd12lmKo+pLJZ0uHa/vXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNTNlNDVkMjktOThkZS0z
ODQyLWJlMDgtMDNkNzI1MGMwYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZ2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABvc2xSg0hlj6atw4j7PmhCLO9HBmS25o45M0mNYlpQTHTme24SpdrcF
oAE0ljNtaK2z7OhA46RXSQ3K9ol/6iRMmiptZla9iIAVxVdnFQX8ocn8vWinQSFH
9Zp+yabQxBO4Zu2yC7MqQ3YXT52hkzFrQHlhzE0/e6X1uwL4b/fgOdMaq26ZsGAi
i4a9/2RxWMJfty+Y88ifQ0TgSDq2zTyaGo57N2bq7ORW+XWwLrRrUy/d/eT2TPzM
oNUU4FaUEX5Zjwa2w+e22g3Tss2+qrRv+JZEEREPZYkzBVFkSgakh1yNbn6icMZv
CuY8a/wGGLyhBILwlC2JjsCd4h0msaY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:15 2025 by rpki-client