Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/648cd264-92c4-3292-a3db-0515ecc7d125.roa
File:                     648cd264-92c4-3292-a3db-0515ecc7d125.roa (raw, json)
Hash identifier:          Wwg3Z7pmYYVvI0esjPNXEryJjMRJAmSdbSzIsZmy1RM=
Subject key identifier:   E5:7B:EF:B2:0A:70:7E:69:FF:51:3C:72:15:F9:E7:32:75:52:6D:0A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C5817E448FEC0BD6643AB100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/648cd264-92c4-3292-a3db-0515ecc7d125.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:7e:44:8f:ec:0b:d6:64:3a:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=c4229e7c-1ddc-42b2-a773-7945ec155ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:68:6a:a6:fe:33:2f:ba:09:56:2a:d3:0b:
                    56:dc:12:1f:e5:06:9a:7f:59:d3:c1:e0:30:b2:52:
                    8b:33:29:2a:9d:e0:48:81:f8:da:8f:30:28:ca:d7:
                    b1:8c:25:63:e3:bc:4e:14:9d:82:eb:c9:d0:55:b5:
                    80:05:ee:6f:2b:b1:9b:80:87:e8:a3:95:5d:f9:d0:
                    03:7e:cc:7c:ae:e5:58:d0:9c:79:a6:78:d6:ae:43:
                    a3:d5:df:6d:bc:3c:82:11:30:e4:5d:9b:5f:97:9d:
                    d2:97:fa:3a:0f:13:43:e3:9f:95:42:e8:f0:eb:4b:
                    d8:e1:3f:36:35:2c:e7:d3:56:7f:6e:3f:2f:7c:98:
                    b1:5f:a8:ee:39:05:fb:7f:e5:ca:c4:4e:48:2e:74:
                    1c:ba:f0:7b:c9:10:07:26:24:20:a3:24:80:00:94:
                    0d:55:34:3a:cc:b6:6f:c9:5b:5f:0b:d0:f2:3d:ca:
                    a3:8b:fc:5b:ef:65:1c:31:7f:7a:74:72:25:3f:2f:
                    d2:1a:e6:e8:c1:65:6d:28:df:ff:de:86:4e:05:1f:
                    49:90:0f:f5:2a:9d:31:7c:a0:50:58:fe:67:7a:55:
                    ce:fd:9c:8f:00:69:f5:8f:c3:09:08:43:38:79:74:
                    59:9d:4b:b9:00:a0:63:de:71:1c:3d:9d:ea:cd:82:
                    b3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7B:EF:B2:0A:70:7E:69:FF:51:3C:72:15:F9:E7:32:75:52:6D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/648cd264-92c4-3292-a3db-0515ecc7d125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ff:64:0e:74:25:d8:bb:52:4b:7e:ba:0b:68:fc:e9:d7:cb:
         ab:b9:dd:1e:6b:89:4f:5e:da:96:d6:e3:1c:7b:0f:3f:a2:71:
         e6:57:79:bd:58:3b:8f:ca:c1:d6:da:1f:e3:d4:bf:70:38:f6:
         69:f7:51:7c:44:d8:f9:d0:8f:e6:24:cf:16:7c:b4:6e:65:4e:
         60:aa:60:56:67:6d:a2:aa:b3:0d:e5:4e:fa:8e:60:00:27:52:
         09:52:40:6b:45:e5:d0:07:85:17:af:37:a6:1a:95:f7:8a:43:
         54:69:74:46:fd:23:0e:f4:6d:53:4b:2c:45:8f:78:3f:e9:ac:
         59:fb:bd:a2:9c:a0:0d:86:d1:8b:f2:e5:ec:1f:09:50:d2:0e:
         7d:74:79:52:7e:9b:76:7d:4d:04:5f:f1:80:de:70:cd:5d:8d:
         a8:e3:b9:8a:1d:31:a9:5a:7b:28:07:ec:d4:bb:1f:95:06:75:
         bb:16:a5:dd:9c:f5:73:73:7a:25:cc:47:87:2e:8a:6e:cf:70:
         9e:ef:8b:ee:8c:4f:99:ac:fa:a7:b9:5b:88:ba:d3:69:3a:dc:
         77:3c:eb:d4:34:c1:93:50:e1:fb:ab:89:a2:68:cd:3d:11:0a:
         a8:a1:c2:2c:28:e7:26:1e:96:cc:57:51:58:67:a2:f5:45:32:
         8b:fe:10:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgX5Ej+wL1mQ6sQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YzQyMjllN2MtMWRkYy00MmIyLWE3NzMtNzk0NWVjMTU1ZWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmNoaqb+My+6CVYq0wtW3BIf5Qaaf1nTweAw
slKLMykqneBIgfjajzAoytexjCVj47xOFJ2C68nQVbWABe5vK7GbgIfoo5Vd+dAD
fsx8ruVY0Jx5pnjWrkOj1d9tvDyCETDkXZtfl53Sl/o6DxND45+VQujw60vY4T82
NSzn01Z/bj8vfJixX6juOQX7f+XKxE5ILnQcuvB7yRAHJiQgoySAAJQNVTQ6zLZv
yVtfC9DyPcqji/xb72UcMX96dHIlPy/SGubowWVtKN//3oZOBR9JkA/1Kp0xfKBQ
WP5nelXO/ZyPAGn1j8MJCEM4eXRZnUu5AKBj3nEcPZ3qzYKzMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOV777IKcH5p/1E8chX55zJ1Um0KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNjQ4Y2QyNjQtOTJjNC0z
MjkyLWEzZGItMDUxNWVjYzdkMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBbwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGb/ZA50Jdi7Ukt+ugto/OnXy6u53R5riU9e2pbW4xx7Dz+iceZXeb1Y
O4/KwdbaH+PUv3A49mn3UXxE2PnQj+YkzxZ8tG5lTmCqYFZnbaKqsw3lTvqOYAAn
UglSQGtF5dAHhRevN6YalfeKQ1RpdEb9Iw70bVNLLEWPeD/prFn7vaKcoA2G0Yvy
5ewfCVDSDn10eVJ+m3Z9TQRf8YDecM1djajjuYodMalaeygH7NS7H5UGdbsWpd2c
9XNzeiXMR4cuim7PcJ7vi+6MT5ms+qe5W4i602k63Hc869Q0wZNQ4furiaJozT0R
Cqihwiwo5yYelsxXUVhnovVFMov+EGg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:28:30 2025 by rpki-client