Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa
File:                     fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa (raw, json)
Hash identifier:          wQ9Ul8BpeefYocY9WKPDslyvSbipZzNb+ZGGTh7LLbo=
Subject key identifier:   DB:32:09:35:31:6B:DE:0D:3A:F0:1D:0F:F1:AB:D1:EC:49:0C:51:BF
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C58185A5BDC334B36FDBDB60
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:85:a5:bd:c3:34:b3:6f:db:db:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=51d1e3ae-81df-4713-8534-729a9c364f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b8:c8:e3:11:66:0e:fd:1f:7b:53:7e:30:b7:
                    d5:cd:f9:c3:3f:69:07:ff:e8:71:71:e1:25:52:1e:
                    e3:73:ea:11:3d:e2:ac:b7:eb:e9:7b:ef:8c:7a:48:
                    6c:4b:96:64:0d:d0:00:0e:dd:05:f9:2e:e7:11:2f:
                    b7:d2:28:db:55:45:81:7f:4c:ba:91:a1:71:ec:c4:
                    eb:1e:4b:25:fa:c5:e1:7f:64:fd:1d:08:4a:d6:3f:
                    28:9d:b3:73:01:f1:c3:36:35:10:49:37:f2:e9:59:
                    c2:ca:76:a3:4b:05:a0:ac:d4:17:e3:a2:64:fa:09:
                    21:db:1a:24:81:09:c7:6f:11:24:e9:25:4a:ca:e5:
                    31:98:03:09:67:4b:bb:ff:98:42:f7:03:65:27:37:
                    fa:f5:91:31:21:d0:42:7a:47:1f:9a:9f:06:f5:86:
                    b1:02:ff:a8:9b:d5:87:5d:00:d6:50:41:8f:e6:7e:
                    49:b9:3e:ee:2b:ec:c7:0f:7d:46:d9:3b:3f:1b:a6:
                    13:f5:64:1c:03:b5:af:ec:7c:5a:28:1a:69:01:65:
                    c3:27:3d:ca:35:35:f6:f0:be:df:30:a5:6f:4b:6b:
                    73:fe:27:05:ce:7e:d0:23:c0:7c:32:47:e2:cf:07:
                    6b:29:f1:e6:1d:60:e4:26:2f:64:68:da:78:f2:96:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:32:09:35:31:6B:DE:0D:3A:F0:1D:0F:F1:AB:D1:EC:49:0C:51:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fb98c44c-c5b6-3d70-a0c8-cb22d0a7471c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2b:21:7e:f4:55:16:6a:68:3d:f9:27:4c:12:5e:36:7c:af:
         96:72:c6:9b:29:bc:f5:07:86:3e:e4:e9:83:ef:dd:7e:d6:b0:
         b4:6d:43:43:9c:f0:b0:92:5f:26:cf:16:9c:9a:38:8b:89:85:
         8d:f7:9f:b8:d5:e6:50:32:f6:39:96:a1:6a:c0:5e:91:f7:b1:
         1a:6f:1f:1d:dc:ae:23:ce:f9:c0:c4:54:c8:ff:3f:04:36:d7:
         8d:49:22:92:2e:7a:ab:d7:fa:9f:cf:40:79:c9:7e:50:f6:0d:
         b9:d5:3e:0c:a6:2a:17:9f:e6:1e:fa:e4:0e:24:ef:0e:03:61:
         95:c5:78:fb:64:5e:d6:5a:28:3c:31:fe:ff:a7:bc:13:8f:8a:
         0c:d0:58:bd:e4:59:59:a8:47:7d:cd:8e:62:01:4c:6a:8e:44:
         dd:71:c4:a6:41:17:34:70:81:f4:ef:a7:6b:84:c2:68:a3:9b:
         d4:bf:a5:7c:81:4c:cf:ba:29:83:2b:67:5a:c6:5c:b9:1b:91:
         fb:1d:80:ba:d2:12:f7:fd:bd:21:1b:80:ac:5f:ec:2b:1b:3b:
         43:ae:82:9d:a9:c9:b7:41:58:4c:7d:38:45:22:b3:46:2c:9f:
         19:a6:50:66:2b:2b:1f:7d:b3:d5:e2:0e:9d:57:d9:0e:29:60:
         bb:04:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:05:34 2025 by rpki-client