Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fd549013-e60f-380f-843a-ac541320c21f.roa
File:                     fd549013-e60f-380f-843a-ac541320c21f.roa (raw, json)
Hash identifier:          KZb75WW10EB+xN28Rfv2r4ANbZQHZlHiV7jxdCX5CVU=
Subject key identifier:   17:50:D4:AA:3A:A8:A9:9F:45:C6:28:33:19:15:44:45:16:F4:4E:F6
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C58204E15C2123934BDD8A40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fd549013-e60f-380f-843a-ac541320c21f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        136.22.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:04:e1:5c:21:23:93:4b:dd:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=0dc87999-bcfc-42f2-af50-f378e8bff083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:bf:7b:02:bd:74:cd:cf:bd:f7:b4:ee:27:
                    ff:b8:86:37:fb:df:5f:09:ed:1f:aa:bc:ab:01:be:
                    75:79:6c:35:6b:23:2a:a9:cc:41:3b:68:e8:e5:67:
                    a3:e3:87:05:8f:bc:1e:6d:6a:a3:f8:5b:be:ba:c3:
                    e5:aa:25:d6:33:ae:fb:a6:30:e6:9e:4e:82:6b:a9:
                    ac:31:ee:16:51:8c:64:53:52:1d:86:43:27:3e:a1:
                    b9:50:85:2a:ca:fc:46:15:e3:91:67:a2:20:20:65:
                    ef:d5:20:b3:cb:12:cf:d2:f2:38:b4:79:09:6c:e5:
                    44:ac:3b:c2:71:08:ce:a4:ff:11:c0:33:f1:d7:bb:
                    a5:72:f0:10:00:a1:de:4b:7a:92:5c:40:42:a8:c6:
                    6f:14:d0:f3:66:6c:fd:84:98:bb:1f:e5:0b:a5:f5:
                    d4:68:a2:dc:6c:44:6c:e8:60:99:66:7d:df:1a:28:
                    94:6c:6a:ed:36:2d:db:0b:9c:44:a0:9b:e4:b7:3f:
                    38:f4:39:73:1b:4a:45:b1:01:91:ea:9b:5e:ba:22:
                    94:0d:79:79:6f:9d:16:e5:ba:7d:ba:18:bb:3e:19:
                    22:43:1c:51:e5:da:f4:8b:81:83:20:68:0a:ab:ac:
                    67:d6:1b:e3:0a:70:bd:9e:3f:38:2a:d5:cc:5b:63:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:50:D4:AA:3A:A8:A9:9F:45:C6:28:33:19:15:44:45:16:F4:4E:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/fd549013-e60f-380f-843a-ac541320c21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:1a:ec:d3:5a:9b:81:0d:7f:e0:07:f3:ec:30:0e:90:53:1e:
         b4:ef:65:f1:22:48:ff:29:d4:0b:ab:42:f8:dc:e8:cf:b5:bb:
         57:61:93:54:c1:e9:5d:5c:a7:a7:5b:f1:7b:2e:8b:91:7a:66:
         3d:da:e2:88:7a:14:8c:66:7a:60:bd:88:ed:9f:2e:28:2c:79:
         28:6a:27:10:71:f5:a3:a0:26:a7:bc:b2:6a:f5:14:17:20:c2:
         d6:a2:3c:af:48:f7:84:7b:37:d7:0b:c0:f0:20:88:17:fd:67:
         03:10:b5:04:83:c0:6e:3c:ca:56:a8:cc:48:f2:0c:00:0a:f3:
         9a:4c:16:3c:46:05:c4:6b:6c:65:df:b7:61:b8:67:d5:e9:8c:
         22:f8:cd:52:5a:81:b0:62:ec:11:f1:83:6c:02:58:12:4f:53:
         37:e1:ed:b9:cf:47:78:ac:a3:41:b3:c2:93:50:12:a4:17:c6:
         f6:b3:79:53:ce:8f:bd:44:20:d2:a7:36:ec:d7:86:19:c9:21:
         e5:e8:e4:eb:eb:ea:b3:2c:ed:7d:ee:01:d2:ec:03:a9:82:6e:
         aa:14:98:a6:38:7d:d8:d9:d8:d9:0f:05:08:84:1f:d2:c6:e2:
         b6:d5:42:23:fb:9c:2f:21:ea:34:f1:75:b5:31:3f:3e:5c:5e:
         b1:57:b6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:31:23 2025 by rpki-client