Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f55040b7-64ec-3f07-8eda-64c7b515cec0.roa
File:                     f55040b7-64ec-3f07-8eda-64c7b515cec0.roa (raw, json)
Hash identifier:          NwSSjb0K9PasCewDkfdJLb7upjyTH+Qb+6KiXszKo2o=
Subject key identifier:   BB:EB:04:11:0B:D9:6E:3A:FB:67:A4:23:92:77:0C:7F:BB:7D:00:F5
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C58189C1F7ECE3FA80478AA0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f55040b7-64ec-3f07-8eda-64c7b515cec0.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:89:c1:f7:ec:e3:fa:80:47:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=953c1027-d771-4f51-bf8c-a1c292c778cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:c1:ad:bc:78:70:31:1f:c3:53:94:5a:1b:
                    3c:07:5b:b0:11:a1:de:3d:86:14:89:56:82:87:d9:
                    08:24:77:b9:d1:5f:61:bc:4b:52:81:97:aa:cd:7e:
                    57:2f:94:ed:0c:7c:04:d0:31:43:94:4e:df:2b:16:
                    fa:70:f1:8b:85:e7:e1:c0:39:a8:31:2c:ac:41:0b:
                    2a:ea:31:94:22:c7:46:17:cb:b7:2a:97:59:be:ee:
                    97:47:19:a2:bf:74:7d:0e:a6:51:d9:f2:d9:24:84:
                    8a:ce:08:83:ee:c3:f8:3b:27:32:32:57:4d:4e:21:
                    90:9a:47:3a:ef:e1:0b:e5:7c:ee:1b:f5:cd:8b:0e:
                    92:9b:84:ef:36:90:b2:d4:75:ef:8d:60:b6:0f:36:
                    be:ae:c0:77:87:c5:8c:b8:2b:d0:17:b2:7a:de:c7:
                    97:9d:25:b3:27:cf:7c:fe:33:40:cc:50:e5:25:54:
                    c0:79:40:52:50:ba:c4:09:a8:a0:40:d5:f6:9c:e0:
                    17:f4:b1:58:da:2b:af:8b:ab:53:15:e3:d1:62:0e:
                    d1:c2:7a:09:82:48:96:f3:6f:30:12:12:50:66:38:
                    c7:ed:c7:b9:3b:27:66:58:13:b6:e4:3b:de:19:f8:
                    98:46:2f:41:dc:f4:a2:aa:23:fc:6c:82:79:b4:0f:
                    54:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EB:04:11:0B:D9:6E:3A:FB:67:A4:23:92:77:0C:7F:BB:7D:00:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f55040b7-64ec-3f07-8eda-64c7b515cec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c9:49:97:5a:8d:be:01:33:c6:98:d2:4b:27:72:85:91:36:
         45:94:a9:c0:ac:83:83:42:f5:9e:a5:bb:76:e9:a7:35:0a:a0:
         ef:0d:a5:ef:e1:3d:34:34:1c:d2:6f:e1:48:3c:0b:96:d7:f0:
         78:af:6b:a3:56:5a:dd:b3:41:48:24:39:dc:43:35:ef:59:96:
         de:f8:13:1b:7f:a7:23:49:a9:80:a0:34:dc:33:ec:ea:27:11:
         b0:06:cd:22:96:94:af:06:ee:49:9c:08:ce:3c:54:6c:5e:d7:
         b1:1e:58:ea:de:dc:69:49:b4:6f:b7:8a:04:53:52:71:d3:34:
         7d:28:4a:49:8c:90:c1:14:0e:03:be:2b:5e:4d:48:ea:31:0c:
         37:0e:8d:93:6b:b2:bb:2e:e3:71:40:8c:32:ed:41:c6:7c:20:
         a1:33:af:04:54:e0:58:31:d4:af:64:11:c3:0c:e2:9d:78:e9:
         16:db:38:37:3b:01:52:17:a8:47:70:d5:05:5f:44:e8:4a:ad:
         d2:45:fe:84:7e:a9:6b:21:63:1d:0e:69:c5:3d:a2:ad:ad:cf:
         15:94:e1:b7:d3:d6:7b:fc:f8:3b:f1:78:21:8d:47:e4:98:6f:
         69:69:16:2e:b7:16:5e:39:3a:8c:d5:12:ab:66:8e:7b:d0:3d:
         db:7e:41:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:29 2025 by rpki-client