Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1a27a583-6981-31b8-b9d1-295d24c60a2a.roa
File:                     1a27a583-6981-31b8-b9d1-295d24c60a2a.roa (raw, json)
Hash identifier:          2w/BcqJmy5zB/21m1PKa18ZSzZHuut6XkdzV88x6hMQ=
Subject key identifier:   90:E9:B9:35:86:C2:BF:10:65:9A:4E:FE:E8:B9:A5:E2:04:BA:24:39
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BAC80E7D184333A4581DC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1a27a583-6981-31b8-b9d1-295d24c60a2a.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:c8:0e:7d:18:43:33:a4:58:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=df2e8bd5-4767-441a-aa31-52633c554575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:65:fd:2d:9d:78:62:43:e5:f8:f8:f4:5e:
                    fc:0b:b0:24:3b:22:a9:37:1c:6f:d0:5d:a2:23:be:
                    93:76:98:c7:f1:67:f0:0e:4a:56:54:91:09:54:a5:
                    ba:f4:c8:15:d4:2e:93:87:ab:25:65:87:df:e4:6e:
                    8a:43:7c:3f:5c:a1:c8:84:2a:3b:10:e0:45:23:8b:
                    40:50:61:86:08:9d:ee:02:15:8d:e9:1c:1c:bc:e1:
                    a1:31:df:eb:ac:7f:6a:39:c2:b3:cb:ae:c9:9e:48:
                    dc:2e:99:43:c5:b4:08:90:16:69:c4:17:68:66:aa:
                    47:cc:92:f5:06:dd:6f:bc:ca:7a:db:a6:7d:51:04:
                    7b:cb:b3:64:74:55:c2:c0:bf:b9:8a:7f:1f:e1:e1:
                    42:b2:e9:47:a0:5a:c6:23:ba:5f:76:46:b4:0e:b6:
                    fa:3b:68:48:4e:ff:e7:d7:e2:bf:84:f4:46:e2:c0:
                    35:59:49:07:d8:24:dc:3f:af:5c:a5:09:e3:40:22:
                    2b:be:d1:2f:ee:2f:9e:cd:7a:f1:b8:e0:28:c2:81:
                    56:84:01:45:51:04:1b:bc:46:2a:c4:ba:95:2c:a7:
                    ba:ac:f7:46:16:ce:74:b0:7d:96:32:21:5a:5b:fc:
                    a9:e8:c1:f1:fb:61:8a:61:9e:c4:eb:b6:db:d3:c0:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E9:B9:35:86:C2:BF:10:65:9A:4E:FE:E8:B9:A5:E2:04:BA:24:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1a27a583-6981-31b8-b9d1-295d24c60a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:26:eb:3c:5d:99:ff:c8:f6:f3:84:ca:77:c0:55:b2:31:3d:
         da:79:b4:56:92:a2:26:0a:fc:d4:f3:16:46:c2:ee:1f:83:9e:
         76:6c:c3:a4:a6:46:0f:a9:29:0b:47:33:8b:a8:19:31:8a:6d:
         53:67:60:26:47:10:f6:96:3f:55:d9:06:97:8d:7b:16:e0:94:
         34:ed:d8:d9:51:28:93:bd:4a:81:92:75:07:1d:be:09:b3:c5:
         00:ce:90:4d:8c:56:63:5f:5a:89:04:50:27:31:f6:fc:c9:16:
         f9:31:93:d6:cb:ed:bf:1e:d2:d3:2b:e6:43:98:c1:5d:51:82:
         19:4a:9c:b5:1f:ff:d4:02:ee:c7:20:90:c7:86:b9:21:3c:86:
         36:68:50:a9:97:1c:be:08:90:f7:4d:cf:7b:10:b0:17:22:e8:
         e6:f7:7c:b5:cd:75:33:05:47:7c:d1:4a:c6:28:ca:ef:c0:7c:
         59:06:00:60:ff:bd:2c:fd:9b:39:16:ec:16:d9:92:25:fd:5c:
         30:c1:45:1a:8e:0d:60:49:73:96:38:33:f5:41:54:4d:9f:8c:
         92:41:7f:48:1b:e8:ba:f6:9f:84:6b:4a:51:b2:8f:b7:8a:d9:
         32:73:07:4a:e4:1e:01:9e:78:75:c9:82:00:2d:1f:7d:61:dc:
         94:25:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:32:55 2025 by rpki-client