Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b72352bc-7063-38fb-b1ea-813bf9bdb4ad.roa
File:                     b72352bc-7063-38fb-b1ea-813bf9bdb4ad.roa (raw, json)
Hash identifier:          Rk4gcUxs1SBjopgYFtI442coziMgZPX4InzZSw9JfqA=
Subject key identifier:   E7:BC:62:4A:3F:8C:2F:71:5B:4E:C0:72:37:54:B7:87:3A:65:B3:25
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C5821C540BDB53D079093080
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b72352bc-7063-38fb-b1ea-813bf9bdb4ad.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:1c:54:0b:db:53:d0:79:09:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=986aa86c-432a-462b-9e4f-fa906c7b2c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:42:78:4b:1c:d8:45:28:79:ee:c6:dd:0c:
                    82:5a:4d:31:48:c0:bf:c7:95:af:eb:1e:dc:7a:d5:
                    f3:f9:19:90:3d:e8:34:d2:4e:8b:f2:01:4f:04:fb:
                    6c:48:da:4e:40:e4:9f:8a:45:21:81:f8:e1:f4:15:
                    6f:5d:5a:34:0a:2b:dd:12:88:15:a9:f6:97:81:97:
                    ca:4a:58:fe:1b:63:39:6b:49:5f:53:48:5e:59:44:
                    ec:a1:3f:f1:58:d7:bb:e4:fe:94:a6:99:00:82:a2:
                    c3:f2:c6:dd:c6:d6:89:14:3c:41:fb:19:23:f5:bf:
                    43:df:1d:b0:52:1d:ba:2b:3c:a8:81:6b:d1:70:9a:
                    20:ad:ad:85:78:4a:45:31:78:ec:a9:cf:23:6d:72:
                    00:b8:09:27:da:b2:69:95:65:22:77:02:30:aa:ad:
                    f6:86:13:2d:52:20:e7:55:d5:2d:cc:ae:2a:07:31:
                    30:bd:fd:1f:21:fa:d9:45:14:a2:df:58:af:46:a0:
                    7b:e2:8b:59:e2:1a:eb:b5:aa:0d:54:a5:22:86:cb:
                    17:51:f9:3b:51:b0:d0:5d:68:bd:82:2c:2a:01:46:
                    08:19:df:ff:c6:3e:84:24:2b:9a:c3:b7:f1:cc:b4:
                    97:32:f8:31:73:98:37:ab:3c:4f:6c:13:fb:4f:3f:
                    a9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BC:62:4A:3F:8C:2F:71:5B:4E:C0:72:37:54:B7:87:3A:65:B3:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b72352bc-7063-38fb-b1ea-813bf9bdb4ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:08:70:5b:3f:fc:b3:e3:72:f6:ea:23:55:e6:aa:97:47:7f:
         e1:85:1d:3a:69:11:56:49:83:62:f0:b4:b8:a1:48:c5:82:c0:
         e8:d6:9b:79:3e:a0:10:7e:73:d3:34:24:8f:ae:e3:4c:e3:50:
         7f:2b:4e:c8:4e:a9:44:35:de:39:f7:04:be:27:2c:f9:d3:24:
         4e:b9:5a:af:9d:59:29:9f:b5:d3:5d:ee:e5:fe:fc:3f:2c:ce:
         e9:0a:61:d9:0d:76:c4:b0:8c:6b:ac:a9:8f:bc:54:d7:50:22:
         d2:f1:d8:41:61:8f:e9:f1:9d:53:f6:c8:6f:12:32:52:ff:68:
         c9:7c:a8:bc:1d:3b:ea:34:6f:30:3d:ab:4c:47:77:53:e0:4d:
         ac:3f:a8:03:fe:48:64:54:e1:4e:f1:15:51:e1:00:16:a7:97:
         60:71:bd:b8:8b:f0:9e:03:f9:58:15:f8:28:57:04:0f:cb:e4:
         98:d8:b6:2e:35:d0:87:00:17:92:d0:7a:a1:99:2b:8e:ef:0f:
         dc:9a:b1:3b:ab:19:bb:cd:bd:fa:f4:ea:d0:d8:e8:d5:63:14:
         46:ea:2d:93:42:9f:d0:39:89:bf:57:57:bf:3d:c4:bc:ec:ee:
         d0:19:5c:52:c9:4a:92:c5:b6:56:52:c5:24:03:a3:ac:5e:3c:
         b5:7f:71:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghxUC9tT0HkJMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
OTg2YWE4NmMtNDMyYS00NjJiLTllNGYtZmE5MDZjN2IyYzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhFCeEsc2EUoee7G3QyCWk0xSMC/x5Wv6x7c
etXz+RmQPeg00k6L8gFPBPtsSNpOQOSfikUhgfjh9BVvXVo0CivdEogVqfaXgZfK
Slj+G2M5a0lfU0heWUTsoT/xWNe75P6UppkAgqLD8sbdxtaJFDxB+xkj9b9D3x2w
Uh26KzyogWvRcJogra2FeEpFMXjsqc8jbXIAuAkn2rJplWUidwIwqq32hhMtUiDn
VdUtzK4qBzEwvf0fIfrZRRSi31ivRqB74otZ4hrrtaoNVKUihssXUfk7UbDQXWi9
giwqAUYIGd//xj6EJCuaw7fxzLSXMvgxc5g3qzxPbBP7Tz+pkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOe8Yko/jC9xW07AcjdUt4c6ZbMlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYjcyMzUyYmMtNzA2My0z
OGZiLWIxZWEtODEzYmY5YmRiNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIsIcFs//LPjcvbqI1XmqpdHf+GFHTppEVZJg2LwtLihSMWCwOjWm3k+
oBB+c9M0JI+u40zjUH8rTshOqUQ13jn3BL4nLPnTJE65Wq+dWSmftdNd7uX+/D8s
zukKYdkNdsSwjGusqY+8VNdQItLx2EFhj+nxnVP2yG8SMlL/aMl8qLwdO+o0bzA9
q0xHd1PgTaw/qAP+SGRU4U7xFVHhABanl2BxvbiL8J4D+VgV+ChXBA/L5JjYti41
0IcAF5LQeqGZK47vD9yasTurGbvNvfr06tDY6NVjFEbqLZNCn9A5ib9XV789xLzs
7tAZXFLJSpLFtlZSxSQDo6xePLV/cVg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:25:13 2025 by rpki-client