Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/71436686-1660-35f5-9a1e-467ae9f4dc32.roa
File:                     71436686-1660-35f5-9a1e-467ae9f4dc32.roa (raw, json)
Hash identifier:          IYKdV6ImmlZbPdrX4AMbMZO5GdbWrzlkGbuLZpctL/8=
Subject key identifier:   B6:14:9C:B0:83:FA:73:8D:B9:E1:26:EB:45:BE:58:A3:5D:AA:E1:F5
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C5821CC4C9BFDF1267C6F790
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/71436686-1660-35f5-9a1e-467ae9f4dc32.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:1c:c4:c9:bf:df:12:67:c6:f7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=f153e46f-096f-4295-b76c-91b337590d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:63:d5:16:bf:33:56:1f:fe:15:c6:55:70:
                    68:d2:6d:de:77:6d:7d:cc:12:17:e7:61:f8:6d:4a:
                    a8:9b:8a:4f:6c:0c:7c:51:ae:2b:2f:f6:a0:46:e4:
                    fb:f9:8f:10:d1:34:af:68:52:70:25:1b:a2:72:1a:
                    2d:94:39:06:c6:cd:4e:d7:62:be:de:0e:0a:e9:63:
                    f5:ce:f1:66:f0:a7:b3:6f:35:2f:86:8a:36:62:05:
                    a1:36:cd:74:90:bb:11:75:83:29:6c:48:52:b5:04:
                    25:34:be:5d:b2:df:e4:71:03:f9:cb:c5:4f:d4:d4:
                    18:fd:a1:eb:83:d0:31:5d:2e:69:c8:b2:9b:85:40:
                    b8:51:59:96:5e:78:ba:f1:1a:51:0b:e2:b5:af:91:
                    90:ab:88:ea:7c:31:36:36:a2:be:5a:c5:16:e6:91:
                    b5:5b:6d:cf:23:b5:20:b8:ee:e0:40:11:32:ab:45:
                    24:67:35:1a:fc:a9:b0:5e:32:4f:23:d0:13:a2:64:
                    21:a3:4c:5a:b8:6d:ca:f8:2f:0a:8a:97:d2:ea:11:
                    de:f2:37:c1:cb:43:f5:b7:24:db:f8:e6:93:29:fa:
                    d5:5c:52:e9:b7:af:e1:84:a8:72:a6:0d:5f:4f:07:
                    46:3f:5c:13:65:63:c0:0c:bf:76:d0:ec:c2:3e:76:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:14:9C:B0:83:FA:73:8D:B9:E1:26:EB:45:BE:58:A3:5D:AA:E1:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/71436686-1660-35f5-9a1e-467ae9f4dc32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:0e:fa:eb:05:8c:c2:8a:a9:42:0d:e1:2d:f3:4a:75:39:0f:
         7c:ff:f4:3b:a5:97:1e:2e:fc:b0:5a:84:3c:a6:4a:bb:5a:99:
         73:5b:56:35:ee:ed:b5:80:db:82:75:32:c1:fe:e8:9f:2c:eb:
         e7:6b:a3:38:81:de:bc:0d:45:5f:75:b5:8e:f0:55:39:0f:d0:
         6c:f6:5e:ed:67:89:56:4f:30:7e:89:7f:d8:aa:8b:39:5d:b1:
         2a:3a:2f:96:8e:89:87:48:5d:4a:86:e7:67:2f:a5:99:74:85:
         9f:b1:9f:cb:d4:94:dc:86:dc:e1:ee:f4:af:98:9e:f5:71:9a:
         9e:fe:78:39:e4:ea:b8:1a:1b:ea:6e:61:f5:ef:05:95:58:f3:
         85:3a:a9:03:a5:30:2a:e3:8b:6f:c9:83:d9:de:f3:71:43:a8:
         74:62:dc:a0:ac:25:64:05:bc:0b:f5:0e:18:96:81:7a:76:76:
         b8:83:c2:fb:90:16:5d:4f:e0:ce:07:2b:0c:6e:21:ef:bf:c0:
         12:46:a1:62:64:0f:7c:17:ac:11:85:23:a5:b5:fd:79:9e:1d:
         d2:3e:84:c6:2d:db:5b:c4:b7:46:d9:82:0c:5e:10:8b:2d:27:
         cb:c8:ea:5b:81:bc:12:e3:87:64:63:f3:e1:b6:fb:3f:24:fa:
         9c:27:8f:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghzEyb/fEmfG95AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjE1M2U0NmYtMDk2Zi00Mjk1LWI3NmMtOTFiMzM3NTkwZDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh95j1Ra/M1Yf/hXGVXBo0m3ed219zBIX52H4
bUqom4pPbAx8Ua4rL/agRuT7+Y8Q0TSvaFJwJRuichotlDkGxs1O12K+3g4K6WP1
zvFm8KezbzUvhoo2YgWhNs10kLsRdYMpbEhStQQlNL5dst/kcQP5y8VP1NQY/aHr
g9AxXS5pyLKbhUC4UVmWXni68RpRC+K1r5GQq4jqfDE2NqK+WsUW5pG1W23PI7Ug
uO7gQBEyq0UkZzUa/KmwXjJPI9ATomQho0xauG3K+C8KipfS6hHe8jfBy0P1tyTb
+OaTKfrVXFLpt6/hhKhypg1fTwdGP1wTZWPADL920OzCPnZvNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYUnLCD+nONueEm60W+WKNdquH1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNzE0MzY2ODYtMTY2MC0z
NWY1LTlhMWUtNDY3YWU5ZjRkYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAO+usFjMKKqUIN4S3zSnU5D3z/9Dullx4u/LBahDymSrtamXNbVjXu
7bWA24J1MsH+6J8s6+droziB3rwNRV91tY7wVTkP0Gz2Xu1niVZPMH6Jf9iqizld
sSo6L5aOiYdIXUqG52cvpZl0hZ+xn8vUlNyG3OHu9K+YnvVxmp7+eDnk6rgaG+pu
YfXvBZVY84U6qQOlMCrji2/Jg9ne83FDqHRi3KCsJWQFvAv1DhiWgXp2driDwvuQ
Fl1P4M4HKwxuIe+/wBJGoWJkD3wXrBGFI6W1/XmeHdI+hMYt21vEt0bZggxeEIst
J8vI6luBvBLjh2Rj8+G2+z8k+pwnj9k=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:39 2025 by rpki-client