Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5acfaeed-f100-3db9-a539-8672c113d070.roa
File:                     5acfaeed-f100-3db9-a539-8672c113d070.roa (raw, json)
Hash identifier:          PlDmyljrH7GUA6baWQindqr3uE4CAjw23XRNMmHMC7I=
Subject key identifier:   B5:0C:F1:5D:AA:4F:A7:E7:55:0B:9A:21:86:16:64:2C:F8:BE:8D:37
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C581767E773BB2F4151CBD70
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5acfaeed-f100-3db9-a539-8672c113d070.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:76:7e:77:3b:b2:f4:15:1c:bd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=597ae320-e3ee-4052-852f-1816c910b320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:28:54:ea:ba:0f:33:a8:20:83:cb:25:89:3b:
                    ca:ec:93:49:7e:6b:dd:99:51:41:7c:6d:e5:52:8d:
                    49:07:ac:f1:22:13:22:38:8d:4d:ef:11:28:1f:80:
                    9c:59:25:61:1c:ac:93:e3:bc:eb:45:2c:47:30:6a:
                    e7:d5:e4:d0:ad:8f:17:92:39:8c:da:fd:ba:7f:a1:
                    cc:8e:ba:df:2c:ba:66:7f:d2:32:a7:d2:2e:c5:c0:
                    df:27:fa:82:7e:d1:26:f4:ec:28:a4:a2:c4:c9:af:
                    dc:8f:39:c3:b6:80:7a:1f:38:30:6e:8b:9e:82:8e:
                    cd:cb:6a:73:df:58:66:e8:49:52:29:1f:30:78:05:
                    44:37:f9:ef:2c:8d:2d:50:17:85:0e:01:ac:62:69:
                    41:73:91:90:56:a5:8c:0b:d9:42:3d:98:d9:0d:90:
                    f8:0c:34:53:7d:c5:0f:58:1e:b1:cd:62:01:d2:68:
                    1b:40:a8:72:53:67:47:07:3f:40:5d:73:47:a4:3d:
                    0a:be:92:0d:8e:30:8f:e3:ea:ea:f9:1e:a9:1c:03:
                    ee:47:04:70:24:7a:34:9a:23:bb:79:c9:ef:4e:7e:
                    78:05:b2:dc:9c:02:ba:26:0d:da:8b:3a:b3:dc:eb:
                    63:4d:ac:e0:55:b0:39:f0:38:65:46:c1:0e:4d:a7:
                    19:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0C:F1:5D:AA:4F:A7:E7:55:0B:9A:21:86:16:64:2C:F8:BE:8D:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5acfaeed-f100-3db9-a539-8672c113d070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:dc:98:bd:11:62:73:97:f5:e5:26:c3:a0:73:cf:ad:72:03:
         7c:02:f9:76:45:5a:5d:66:f1:7f:c2:fe:c5:67:e3:d1:76:98:
         2c:16:37:76:d6:11:70:a4:fa:6f:73:d9:b0:8d:eb:8d:8b:d6:
         d5:0c:49:78:65:53:57:2b:1d:34:10:ea:38:3e:0a:8c:ad:a0:
         c6:9a:04:a5:8d:49:9e:22:bf:9a:ca:e9:53:d9:49:b0:77:e6:
         58:6b:2d:34:44:15:96:9a:0b:68:42:6e:7e:8b:73:a0:fd:bb:
         57:4e:c1:c9:3b:50:78:f4:27:45:f5:11:dc:37:2a:c4:8d:98:
         78:5b:fd:35:38:a8:eb:82:cc:07:57:2d:c0:b5:e7:21:8c:69:
         36:ff:62:3e:ae:0c:f1:ee:fb:c2:e4:72:a6:56:ee:54:0a:5e:
         ab:c4:37:30:6d:b1:fa:dc:4a:c8:20:cb:31:99:3f:c7:32:0e:
         e0:89:a0:11:ea:e7:bd:f4:b7:ed:0c:fc:a0:22:5e:15:93:07:
         17:89:b4:fb:01:33:df:cc:e9:2a:b8:aa:ad:81:44:94:16:42:
         7c:38:6f:40:5c:a0:03:8f:5c:f2:23:7b:3c:1b:b9:f7:6a:b4:
         d9:df:de:b6:41:60:c4:e2:c4:a0:be:0a:86:90:49:21:a3:8d:
         dc:00:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:27 2025 by rpki-client