Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75731bf7-6155-3e00-aa35-25b8cdafddf6.roa
File:                     75731bf7-6155-3e00-aa35-25b8cdafddf6.roa (raw, json)
Hash identifier:          Dg89NspZ9rdUod1eDPp0uHCEujKgOYeh3g6oEpYxYqs=
Subject key identifier:   65:B4:E6:36:B0:93:BF:E9:7B:6B:97:E0:17:C0:25:A1:03:9A:B9:BF
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C58171075360F681B89580C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75731bf7-6155-3e00-aa35-25b8cdafddf6.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:71:07:53:60:f6:81:b8:95:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=8be23dce-0554-4b3d-b27c-0de794eacf0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:40:cf:3a:0c:45:30:50:54:a9:fe:89:df:
                    fe:a5:ea:b2:3f:d9:b6:ea:a3:0f:c1:21:24:c2:df:
                    66:b5:88:92:d8:93:81:39:46:c7:be:78:86:72:c7:
                    5c:48:9b:39:e9:17:40:fc:d1:8f:d7:e8:50:05:c3:
                    08:5e:1c:22:6f:af:bc:32:52:bc:eb:6b:19:72:15:
                    34:0f:d0:15:af:2e:37:c1:1b:07:4e:50:ee:8b:07:
                    95:f4:bb:a4:aa:59:48:05:65:11:8f:42:56:01:56:
                    a7:c7:a8:de:02:bc:df:91:38:d1:f9:c2:a1:0c:32:
                    1a:9a:0b:60:28:92:a3:91:f2:a1:ee:02:9c:1a:b6:
                    1b:b6:51:22:b1:32:a2:4d:a5:a9:86:26:ee:43:9a:
                    1a:aa:b6:3d:59:d8:b3:37:57:c1:9f:62:81:1d:f2:
                    44:67:2b:fd:14:56:ed:b9:84:1d:fa:4d:28:e9:89:
                    22:69:cb:06:a5:10:fd:36:5f:ed:b2:45:8d:2c:c5:
                    0a:9f:66:ee:dd:eb:5e:81:82:88:f3:64:85:f3:c0:
                    d3:78:d7:a4:33:e8:b0:c0:6d:26:65:cd:fc:04:a8:
                    b9:26:8d:7b:4b:06:c2:cb:0b:ac:a4:65:a3:90:0e:
                    17:c6:3e:f9:42:a7:e1:05:10:86:81:44:14:a3:27:
                    a7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B4:E6:36:B0:93:BF:E9:7B:6B:97:E0:17:C0:25:A1:03:9A:B9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/75731bf7-6155-3e00-aa35-25b8cdafddf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:07:5c:85:3c:70:1c:08:12:1c:5e:11:b8:15:d3:cd:78:75:
         78:db:1a:37:73:ff:38:78:8a:89:75:a4:01:60:0c:d6:4f:b2:
         74:29:7c:58:59:43:06:5c:be:f7:f5:f4:3a:2e:68:36:b7:6e:
         fd:02:45:6c:22:4f:9d:1f:33:1d:06:d2:28:9a:20:50:93:e1:
         d7:ce:b4:ac:f4:96:5a:36:ac:3a:35:8d:ca:9a:a9:3b:39:c8:
         4e:65:aa:dc:13:bf:7a:ee:67:7f:91:fd:15:8f:e0:67:42:c1:
         54:57:19:2d:fb:da:d8:2e:30:8f:cb:bc:8e:0b:d1:71:5b:20:
         88:46:66:43:c8:09:b6:46:41:69:73:ea:ab:ed:63:5e:86:5e:
         b1:a5:82:2d:07:29:06:00:b6:f9:72:6c:60:6e:20:4e:d0:34:
         e3:ff:10:6b:11:31:75:f2:b7:96:7b:54:39:90:1d:55:86:75:
         05:10:00:38:a1:51:35:13:48:d8:af:ca:be:94:55:c1:d7:f2:
         30:3f:29:d3:05:8e:6f:02:9d:27:b0:87:27:11:5f:ef:19:78:
         52:80:14:5d:26:62:99:8b:8a:04:5f:a3:2d:08:af:a4:69:fd:
         4f:19:e8:43:3e:6d:1d:90:1f:fd:98:d4:e4:e5:99:75:7f:29:
         71:94:db:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXEHU2D2gbiVgMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
OGJlMjNkY2UtMDU1NC00YjNkLWIyN2MtMGRlNzk0ZWFjZjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWlAzzoMRTBQVKn+id/+peqyP9m26qMPwSEk
wt9mtYiS2JOBOUbHvniGcsdcSJs56RdA/NGP1+hQBcMIXhwib6+8MlK862sZchU0
D9AVry43wRsHTlDuiweV9LukqllIBWURj0JWAVanx6jeArzfkTjR+cKhDDIamgtg
KJKjkfKh7gKcGrYbtlEisTKiTaWphibuQ5oaqrY9WdizN1fBn2KBHfJEZyv9FFbt
uYQd+k0o6YkiacsGpRD9Nl/tskWNLMUKn2bu3etegYKI82SF88DTeNekM+iwwG0m
Zc38BKi5Jo17SwbCywuspGWjkA4Xxj75QqfhBRCGgUQUoyenxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGW05jawk7/pe2uX4BfAJaEDmrm/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNzU3MzFiZjctNjE1NS0z
ZTAwLWFhMzUtMjViOGNkYWZkZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBb6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJMHXIU8cBwIEhxeEbgV0814dXjbGjdz/zh4iol1pAFgDNZPsnQpfFhZ
QwZcvvf19DouaDa3bv0CRWwiT50fMx0G0iiaIFCT4dfOtKz0llo2rDo1jcqaqTs5
yE5lqtwTv3ruZ3+R/RWP4GdCwVRXGS372tguMI/LvI4L0XFbIIhGZkPICbZGQWlz
6qvtY16GXrGlgi0HKQYAtvlybGBuIE7QNOP/EGsRMXXyt5Z7VDmQHVWGdQUQADih
UTUTSNivyr6UVcHX8jA/KdMFjm8CnSewhycRX+8ZeFKAFF0mYpmLigRfoy0Ir6Rp
/U8Z6EM+bR2QH/2Y1OTlmXV/KXGU25Q=
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:23:07 2025 by rpki-client