Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/73b18406-87cb-3c17-b9bd-ae4e3ac5a95b.roa
File:                     73b18406-87cb-3c17-b9bd-ae4e3ac5a95b.roa (raw, json)
Hash identifier:          3NzdRhmRRlvS17f4mE7gVC8ymoRvj5zKd5q0rmB7aA8=
Subject key identifier:   9A:B9:63:01:27:92:FB:87:27:B0:7D:95:C7:DC:91:A0:B0:06:87:A8
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C582274C1C94A9A05A232B70
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/73b18406-87cb-3c17-b9bd-ae4e3ac5a95b.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:27:4c:1c:94:a9:a0:5a:23:2b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e9a52c4a-2c90-41ef-8211-e1582c4a6003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9f:32:2a:b5:7a:85:e0:3d:d4:ec:bf:88:18:
                    d6:11:15:17:60:10:2a:ad:c0:4d:0f:fa:35:84:11:
                    3d:66:76:48:6b:8f:d3:6c:3c:cf:cc:b5:1a:61:06:
                    3c:65:97:1a:c8:6c:d7:e6:c2:aa:b0:1c:e4:82:86:
                    df:da:6e:58:57:0a:b3:17:a7:a5:4b:9e:f5:af:f3:
                    44:22:57:78:f3:ec:48:45:f6:21:7d:90:15:4e:c4:
                    d3:23:23:b4:eb:36:cc:30:cd:f9:8e:e9:c4:7f:3d:
                    f4:9f:ea:3a:ea:fe:1c:c8:f5:3c:ca:04:20:5a:49:
                    54:f2:8f:19:2c:10:ab:f4:ec:d5:5d:f9:c8:b2:34:
                    de:dc:30:10:c9:64:9a:92:9c:5c:e8:74:c9:f3:37:
                    53:e5:33:dd:65:07:26:91:75:ec:df:ac:25:0d:9b:
                    ac:4c:f2:17:df:bc:eb:6e:d4:b9:96:42:26:75:dd:
                    39:56:2e:57:8b:8a:6b:5b:19:7d:3a:79:d4:ef:4d:
                    ff:bc:55:3c:f4:bf:f1:5b:f8:de:e4:1a:82:b7:5a:
                    b2:8a:20:27:21:c0:3f:27:c5:33:45:98:05:d4:d2:
                    d5:1e:c0:92:a8:5e:bd:75:3e:96:0a:1f:fc:a5:e5:
                    58:c6:f3:43:1a:4d:48:47:74:e8:35:e8:2b:f8:7d:
                    bd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B9:63:01:27:92:FB:87:27:B0:7D:95:C7:DC:91:A0:B0:06:87:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/73b18406-87cb-3c17-b9bd-ae4e3ac5a95b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:03:fd:50:74:21:09:be:88:1b:15:e7:12:67:fa:79:17:67:
         fd:86:97:cc:2a:0a:48:21:1f:25:95:75:80:0d:62:8f:34:c0:
         c2:26:30:02:7b:c6:eb:77:ac:02:c0:7a:1c:15:19:eb:d7:1a:
         62:be:01:99:97:e6:37:eb:80:63:25:46:f8:6f:a4:19:86:8c:
         5e:fa:a2:7b:29:b8:4d:c9:cb:12:93:08:37:c9:e9:a5:b4:f1:
         60:c6:f0:8d:23:fb:3a:56:7d:28:72:f2:6a:e5:e3:8f:07:54:
         d4:9c:00:3e:34:7a:5a:e7:e2:59:f7:f6:e7:4a:10:1c:00:42:
         0d:2b:f0:dc:b5:7f:ba:d8:c6:89:24:dc:42:94:1d:eb:f3:b2:
         9f:95:79:ea:c1:c6:7b:14:5f:9e:5a:6f:4b:c2:57:6c:e7:f0:
         d9:cd:21:86:c8:a0:73:3d:7c:91:52:83:f9:6d:5f:2e:4f:50:
         0e:ae:15:fc:e8:bf:90:1a:cf:4e:7d:d5:9e:bb:1a:50:19:7d:
         9e:a9:03:b8:95:d2:f4:1a:de:1f:88:09:56:b0:04:01:40:ac:
         50:7e:d7:c3:0f:b9:d2:12:4d:40:47:2d:2e:c7:47:3c:e2:93:
         66:46:b6:c3:4d:92:2c:c5:14:15:72:a7:41:70:f7:cc:c7:99:
         e3:75:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:55 2025 by rpki-client