Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7d7036c2-0cee-38d0-8d90-7b68f646c679.roa
File:                     7d7036c2-0cee-38d0-8d90-7b68f646c679.roa (raw, json)
Hash identifier:          qEVPa0az8/j+T1PBmJz8P4Ur6xsXKK8grbFU8K3bf4w=
Subject key identifier:   A3:0E:B2:55:55:BF:E4:BD:04:5B:C8:13:9B:FB:B3:F9:B7:6E:8E:0D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C58219FEA84A2304150E7EC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7d7036c2-0cee-38d0-8d90-7b68f646c679.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:19:fe:a8:4a:23:04:15:0e:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=c3ff3035-c450-4816-8ab5-784315643f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:07:63:4c:30:1e:c0:63:9b:ac:f0:98:5d:8a:
                    de:c6:f2:d5:d3:53:2a:aa:26:4a:f2:eb:36:1e:80:
                    49:8f:39:94:45:db:97:e3:33:75:62:04:28:7c:80:
                    3e:65:e3:da:6f:74:25:d4:fb:c9:b9:56:31:8e:cd:
                    b9:52:3d:df:51:6e:73:d5:94:af:aa:b5:a3:8c:ba:
                    79:80:29:82:4c:b8:1d:14:0b:88:17:ea:09:a6:94:
                    ca:f8:64:3a:32:7d:01:a1:33:c4:3c:b2:07:25:17:
                    34:b3:a1:eb:3b:c5:7d:89:3e:51:5b:fc:eb:1d:14:
                    67:3a:98:4e:fc:2b:93:eb:9f:78:2d:06:e2:2e:22:
                    80:53:e7:de:7f:15:76:af:87:17:d6:8c:41:0b:5c:
                    a8:b7:24:a5:94:08:9b:10:98:32:ca:d7:b9:80:bc:
                    a4:b1:e4:6d:20:84:76:4b:24:53:7b:ce:75:db:4c:
                    a0:7a:d2:2b:3d:3b:d1:c6:bb:fb:90:4c:8d:7b:8a:
                    58:84:49:cd:68:54:f3:11:bc:24:f8:2b:55:30:e0:
                    eb:66:a7:d3:e8:ef:c7:b8:4d:ba:d1:ed:9f:8b:01:
                    6c:4a:45:9b:ab:53:e2:c2:4a:6c:63:bf:a2:28:ac:
                    89:b3:58:11:cc:d6:97:f9:2b:96:11:7f:13:dd:95:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0E:B2:55:55:BF:E4:BD:04:5B:C8:13:9B:FB:B3:F9:B7:6E:8E:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7d7036c2-0cee-38d0-8d90-7b68f646c679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ef:7e:dc:39:ce:92:37:47:5c:d9:9a:6d:8e:20:18:76:8a:
         4b:36:31:0d:02:90:c3:5b:cd:cb:35:ec:c0:ea:62:00:83:c9:
         e6:61:9d:82:b8:cb:fa:7e:73:6e:54:f2:48:b1:88:c9:01:e0:
         cb:ce:93:70:3d:b5:54:8f:76:35:0e:82:1d:23:05:04:a3:18:
         e5:7c:18:54:0e:62:69:74:83:d8:91:0b:8c:9b:fa:95:d7:ad:
         1a:e1:4b:33:db:af:6d:10:02:35:ef:36:d0:ee:9c:95:29:61:
         94:3a:78:c0:72:48:c3:4e:3c:b1:e1:2b:ca:55:4c:74:65:6a:
         0b:2e:71:f5:4f:8f:c6:75:6f:ff:55:4a:d7:83:c8:4a:99:2e:
         24:e9:63:a9:8c:d2:af:2c:57:37:b5:3c:3a:d4:e1:1f:dd:91:
         86:31:c7:5c:fe:db:51:ff:e4:89:af:13:23:73:7d:76:1b:e2:
         6d:c8:62:b1:7e:d2:90:82:38:44:fa:21:d7:dc:92:f9:67:49:
         f6:d5:3a:ae:23:c1:37:54:06:f6:11:11:6a:55:d8:74:8e:5e:
         d3:39:c3:30:a0:f0:f5:31:f8:02:c0:f0:20:08:32:61:70:66:
         f7:d3:df:24:95:af:b8:1f:a8:b2:b6:92:f3:08:f0:41:7e:71:
         06:87:4a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:17 2025 by rpki-client