Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cee63ea6-f91a-38df-9d9a-434245d19f95.roa
File:                     cee63ea6-f91a-38df-9d9a-434245d19f95.roa (raw, json)
Hash identifier:          U61hw3oVwewzvSWXsHEV++DBxwZDc0hDDJSlMa735TM=
Subject key identifier:   13:55:B2:37:0F:9B:D6:50:2A:1E:3F:59:6C:40:38:50:1E:FA:C5:23
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C5816F6FA78883AB1E0BE6C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cee63ea6-f91a-38df-9d9a-434245d19f95.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:6f:6f:a7:88:83:ab:1e:0b:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=662dde1c-0f64-4e61-9291-ec7ce0e19f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:b3:9d:dc:34:a3:d0:1a:31:8c:d0:e3:82:
                    7d:ce:b8:ce:e8:60:56:dd:43:5b:d0:32:89:ca:82:
                    6c:8a:f2:7f:33:eb:51:22:53:bf:bb:bc:0d:7c:af:
                    5e:07:fc:f6:95:8b:84:5e:44:1f:a3:9b:3f:a3:31:
                    b7:13:59:73:b2:f3:c9:87:90:82:53:c2:00:fe:7f:
                    cc:eb:d2:ef:ee:c1:d0:44:a7:85:4e:b4:5d:ae:b7:
                    cc:2c:9b:08:d1:c6:34:9c:97:e9:e9:43:3b:c5:9d:
                    f3:53:e8:0c:ba:de:d9:6f:da:c0:92:6b:2a:71:cd:
                    ce:77:e4:66:ef:30:ce:b0:6e:c8:45:7a:8c:e6:b8:
                    26:97:3e:9e:83:c2:e8:45:7b:a5:32:3d:c0:65:66:
                    74:c4:f1:e4:66:d8:84:0c:22:6f:ca:73:63:03:00:
                    00:0d:74:c5:42:b9:28:a4:9f:91:50:bf:15:0c:26:
                    d7:b2:c2:0a:5c:9a:1a:7d:66:f2:0f:31:a7:e2:58:
                    91:37:ef:df:99:c8:52:8c:27:98:59:80:ca:8e:ff:
                    80:db:29:66:22:71:d1:33:61:91:f3:94:d5:e2:76:
                    d1:f2:0f:70:e5:66:bf:09:ee:23:36:b8:b9:e0:fc:
                    95:9d:d7:7b:17:94:5b:bc:be:17:26:06:21:10:98:
                    1a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:55:B2:37:0F:9B:D6:50:2A:1E:3F:59:6C:40:38:50:1E:FA:C5:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/cee63ea6-f91a-38df-9d9a-434245d19f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:96:4b:28:57:15:0d:5f:f1:e6:27:fa:24:46:81:7d:f6:39:
         77:86:87:56:a0:1e:77:33:f6:40:ab:64:63:8a:87:51:d0:d3:
         51:b3:d3:8e:97:6a:9d:95:a8:58:17:b4:c6:74:20:be:f1:a8:
         46:0c:c9:4e:9d:9a:af:82:6c:a7:76:6f:b6:3d:96:9e:b0:1b:
         bc:cf:3a:c9:fc:43:b1:1b:f3:e3:f0:0d:c9:dc:a3:36:f2:4a:
         b5:96:03:4d:87:89:c5:42:5d:9b:fa:f8:c7:21:8f:e7:ef:e6:
         85:78:eb:3e:f6:8b:fc:73:ba:41:42:25:1c:fb:a2:be:a0:3f:
         d4:54:5a:b2:43:ac:81:62:e0:83:8c:ff:e2:63:a2:41:59:18:
         84:7d:49:88:6c:5d:b0:9a:ae:bf:6d:8e:f8:39:44:70:63:c4:
         99:f9:69:24:1d:0f:da:30:6b:21:a2:39:1b:0a:0d:51:64:d4:
         29:80:06:7f:1a:b9:af:04:7e:50:d5:37:0d:32:b8:c0:0b:6e:
         c8:22:59:e6:ef:c2:9f:5c:f1:63:a7:1f:7d:b3:f9:91:7e:f5:
         96:35:85:a8:cb:2f:40:97:fc:20:ad:1c:82:60:e0:c9:0d:a2:
         3f:8b:c5:96:40:cc:05:4e:a5:d0:f0:77:69:07:a1:f0:02:21:
         c8:e0:34:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:44 2025 by rpki-client