Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa
File:                     ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa (raw, json)
Hash identifier:          Gxmz2zbcYfBEED5jKs6Q7VQDK5BpvRJBWIs5ZYldjjk=
Subject key identifier:   8A:B7:5B:0D:89:FE:3C:2F:3D:9A:A5:6E:65:56:DF:B2:62:EA:F8:2A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848BFEBD2E6472E0E8E5455CB00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36492
IP address blocks:        136.22.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d2:e6:47:2e:0e:8e:54:55:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=c3ee61df-ee8f-42b1-a824-2815ffbf044c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:f8:29:f6:a6:94:a8:3c:14:e7:2e:32:8c:
                    bc:8f:f4:83:f1:a7:81:cb:5a:7e:7a:17:2b:9d:67:
                    18:52:d5:aa:05:58:dd:96:14:a8:ee:42:79:b4:b4:
                    be:bc:86:f1:4a:73:ef:25:4a:a6:47:48:fd:6e:61:
                    e5:b3:e3:85:c5:6f:89:b1:db:e7:cc:52:be:b8:3d:
                    4d:cb:fc:98:ca:90:50:b8:ac:3f:d7:3c:5b:19:07:
                    e7:f5:74:76:0a:ae:92:6a:21:a0:a6:dd:48:e6:ea:
                    66:72:96:8f:2c:60:76:10:28:73:f1:95:d7:7a:0a:
                    1d:fa:c8:48:6d:6b:97:6e:52:dc:aa:b8:ba:69:a9:
                    be:2f:6f:91:d4:a5:e4:29:fb:c6:19:e8:8c:94:95:
                    9e:7a:76:c5:4a:e1:ab:90:00:7b:f7:c1:16:a6:72:
                    bf:1b:d6:fd:cd:39:7b:0d:fb:05:8e:61:7f:53:6a:
                    c2:a4:d8:44:41:0b:ed:25:2f:fa:e9:70:3a:5f:06:
                    e3:a2:cd:32:3c:53:e6:0f:65:6d:92:48:e6:7d:04:
                    03:1d:9e:c8:47:23:e4:7c:d4:df:16:95:2c:e8:ab:
                    e8:99:09:60:b3:63:31:04:5f:9c:8d:b5:eb:b3:de:
                    cb:a1:79:ae:99:d9:67:6e:0d:3e:c0:87:f5:38:2b:
                    74:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B7:5B:0D:89:FE:3C:2F:3D:9A:A5:6E:65:56:DF:B2:62:EA:F8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/ff253cf0-eff5-38bb-bb2e-ca1350a36efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:1a:f2:f0:5b:4b:3e:13:95:10:50:fa:c7:cd:86:4d:02:ad:
         21:32:74:d3:c6:d7:72:53:0d:6b:d1:0d:71:6c:66:1c:b7:66:
         0c:46:66:62:fc:27:52:65:e7:fa:5b:e1:c0:66:00:d2:d5:21:
         1e:7f:df:87:90:9f:28:63:60:c4:fc:c6:33:72:94:b6:ca:79:
         fd:c3:57:7a:4d:71:6a:6d:98:b0:14:ed:7a:ac:33:c7:a6:cb:
         32:78:46:9d:18:28:bb:c3:ad:77:28:71:cb:50:77:2d:50:da:
         05:66:3d:c5:3b:f7:ee:27:8f:4d:46:31:2e:1e:38:4c:1b:98:
         66:76:3c:07:ad:04:e1:0f:e9:a0:82:07:a3:02:e9:5f:cc:da:
         4c:63:67:95:96:34:1b:19:a6:d4:b9:81:41:ab:cd:16:a4:64:
         ff:a4:f8:6b:60:e9:82:3a:67:27:d0:af:fa:ba:e2:1a:7c:bf:
         46:ab:d7:9a:3e:8f:a8:be:cc:40:ae:85:4a:91:4a:24:7d:b5:
         07:f7:44:71:f4:de:13:5e:4a:4c:ee:7e:60:50:ab:b4:58:e9:
         cd:bd:1b:d3:63:bd:37:76:a9:aa:11:8c:02:80:7d:01:09:ad:
         f7:80:b3:d9:2d:f7:23:49:11:75:e7:56:f4:80:9a:4e:01:a4:
         98:ea:eb:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69LmRy4OjlRVywAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
YzNlZTYxZGYtZWU4Zi00MmIxLWE4MjQtMjgxNWZmYmYwNDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+j4KfamlKg8FOcuMoy8j/SD8aeBy1p+ehcr
nWcYUtWqBVjdlhSo7kJ5tLS+vIbxSnPvJUqmR0j9bmHls+OFxW+JsdvnzFK+uD1N
y/yYypBQuKw/1zxbGQfn9XR2Cq6SaiGgpt1I5upmcpaPLGB2EChz8ZXXegod+shI
bWuXblLcqri6aam+L2+R1KXkKfvGGeiMlJWeenbFSuGrkAB798EWpnK/G9b9zTl7
DfsFjmF/U2rCpNhEQQvtJS/66XA6Xwbjos0yPFPmD2VtkkjmfQQDHZ7IRyPkfNTf
FpUs6KvomQlgs2MxBF+cjbXrs97LoXmumdlnbg0+wIf1OCt00wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIq3Ww2J/jwvPZqlbmVW37Ji6vgqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZmYyNTNjZjAtZWZmNS0z
OGJiLWJiMmUtY2ExMzUwYTM2ZWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBZoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAa8vBbSz4TlRBQ+sfNhk0CrSEydNPG13JTDWvRDXFsZhy3ZgxGZmL8
J1Jl5/pb4cBmANLVIR5/34eQnyhjYMT8xjNylLbKef3DV3pNcWptmLAU7XqsM8em
yzJ4Rp0YKLvDrXcocctQdy1Q2gVmPcU79+4nj01GMS4eOEwbmGZ2PAetBOEP6aCC
B6MC6V/M2kxjZ5WWNBsZptS5gUGrzRakZP+k+Gtg6YI6ZyfQr/q64hp8v0ar15o+
j6i+zECuhUqRSiR9tQf3RHH03hNeSkzufmBQq7RY6c29G9NjvTd2qaoRjAKAfQEJ
rfeAs9kt9yNJEXXnVvSAmk4BpJjq66Q=
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:25 2025 by rpki-client