Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b20c18e0-f1c3-3bc3-84d1-94afec9727dd.roa
File:                     b20c18e0-f1c3-3bc3-84d1-94afec9727dd.roa (raw, json)
Hash identifier:          gA3LlM4ZCSuI2tfWBA3+hAkj6n/iztOE1r7JsqHDIBM=
Subject key identifier:   26:A2:CA:7C:4E:DD:C7:EC:D5:A7:24:C5:DB:45:CB:26:51:6B:87:93
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C58219A4A9547464EDF775C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b20c18e0-f1c3-3bc3-84d1-94afec9727dd.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:19:a4:a9:54:74:64:ed:f7:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=3e4cc4d2-4862-4ab3-b403-13f5c1b662ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:14:1a:ae:45:f0:7c:80:83:57:aa:4b:3f:
                    f3:e7:cf:ac:6d:68:46:a3:23:22:6b:22:48:83:5a:
                    bb:e8:b7:6a:77:04:da:7c:0e:ee:29:ef:0b:5a:c9:
                    9c:c7:2a:43:73:75:36:59:7a:65:4e:9b:67:09:e9:
                    c9:b6:31:0f:d2:79:a8:37:f3:64:22:0e:81:9d:6d:
                    0b:cf:d8:d1:d1:1f:59:18:21:34:7e:17:88:8f:88:
                    fd:d5:41:e8:eb:24:92:17:9f:fc:23:da:ca:26:74:
                    26:26:1d:f4:71:f5:cd:89:1c:83:d0:49:2d:0e:d5:
                    af:ec:89:f4:64:5b:91:4d:4d:fc:0d:47:d2:96:41:
                    38:1f:e8:02:45:39:2e:97:97:ce:8c:de:16:7b:6f:
                    d6:37:31:3b:99:83:f1:0e:2e:36:55:98:fc:c5:1c:
                    bc:f2:d6:78:52:42:b4:23:9c:80:17:10:79:9e:b5:
                    5e:6e:82:35:97:ee:be:8b:15:9c:67:06:ae:45:c1:
                    7b:e5:45:e4:87:be:65:08:5c:3d:c4:0d:57:d8:db:
                    3a:75:0e:83:09:ba:28:c5:28:fe:d2:47:47:ae:d6:
                    23:0a:84:b2:86:fc:53:54:fb:1f:b9:82:9c:07:11:
                    6b:c6:58:83:f3:76:78:c5:0d:b3:1d:ea:27:ab:6e:
                    88:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A2:CA:7C:4E:DD:C7:EC:D5:A7:24:C5:DB:45:CB:26:51:6B:87:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b20c18e0-f1c3-3bc3-84d1-94afec9727dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c3:7e:ed:3f:cb:05:90:5e:47:0d:d1:59:24:34:d1:8e:50:
         96:50:96:20:3f:33:e8:14:f7:cd:fc:27:03:fc:0c:5c:ee:24:
         5a:83:e1:c3:6a:f0:51:b7:89:0b:c7:76:8b:a3:68:eb:85:13:
         2e:c6:dc:ba:a2:26:77:76:ba:ee:15:e3:84:6a:43:c4:c1:5f:
         33:17:61:ae:c0:bb:d8:48:82:06:2e:9b:23:6c:b7:0b:71:a8:
         47:1d:ea:fa:e4:c2:36:ed:ec:29:7b:7c:c7:ea:54:63:5c:ff:
         4a:c7:b4:5e:34:6b:11:5c:a5:1f:c0:cf:86:78:a1:44:5c:57:
         f7:ed:05:c4:62:ff:2e:63:92:b3:1b:93:23:e7:72:6f:2e:b4:
         2f:19:29:5f:4a:67:42:06:3f:c0:97:2c:31:bd:87:8a:19:af:
         be:84:71:db:e5:af:19:7b:99:0f:9a:80:11:4e:9b:82:25:96:
         a4:f8:0f:00:63:ee:e7:ee:98:8c:23:53:1d:07:5b:f2:c9:18:
         60:e0:6c:67:e2:a5:80:58:cb:5d:58:66:77:a7:9d:de:0c:09:
         2c:ec:e9:47:41:43:1a:cd:e7:fc:30:c0:fd:f5:09:fa:17:ae:
         9b:99:01:45:c9:3a:92:a1:df:a3:64:a3:a4:d2:9e:7e:0f:22:
         cd:6b:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:31 2025 by rpki-client