Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1ddd3ca5-92a0-3d12-b871-566cc636e64e.roa
File:                     1ddd3ca5-92a0-3d12-b871-566cc636e64e.roa (raw, json)
Hash identifier:          YLmnr2l2AS24MtA5odUJyPx1OEH8Oi/XCgw8Dss5T7o=
Subject key identifier:   7E:58:71:87:C4:A3:0A:4F:A8:15:84:FB:8B:EB:F4:A8:A1:8F:BA:5F
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BACD43848072D0B43D0040
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1ddd3ca5-92a0-3d12-b871-566cc636e64e.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:cd:43:84:80:72:d0:b4:3d:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b9d664cb-e559-4ea7-aae9-368f6da34d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:68:4c:52:c1:7e:97:44:06:a6:d3:b8:94:e2:
                    6d:29:1a:4e:dc:fe:f0:9a:91:6c:13:53:9d:e3:4c:
                    42:cc:5d:6b:29:c6:93:d6:e8:6f:ba:26:0e:03:4e:
                    0f:50:fe:54:30:f6:20:7e:ec:58:68:81:9a:1e:98:
                    c8:c6:6e:27:30:61:95:ea:f0:ac:c1:7b:85:94:fa:
                    a5:5a:0f:d2:05:f5:6b:7a:d0:e6:75:d5:74:7d:ee:
                    ca:4a:47:df:f2:4b:2b:fa:d0:27:58:0c:10:3f:13:
                    a2:43:71:bd:76:89:c3:ce:b4:8e:91:61:44:4c:49:
                    a9:85:30:51:de:17:47:ba:fe:2d:22:26:9d:a0:36:
                    a0:9c:51:93:ad:11:4e:da:54:3c:02:e9:e6:79:28:
                    dd:5e:91:7d:05:6d:94:74:fe:bf:33:b9:9d:f4:dd:
                    94:34:a0:f3:26:f9:26:d6:3a:a7:62:ca:21:63:2c:
                    11:6f:8b:2e:c7:39:56:74:d4:45:ab:2b:30:35:3a:
                    ea:ff:9b:5c:fb:9f:d5:88:a9:e5:13:fd:84:20:09:
                    a5:57:bd:d4:aa:40:fa:a8:98:b9:fd:e0:34:c6:36:
                    f0:63:70:74:f2:c3:51:6b:e7:98:cc:3e:7e:a4:51:
                    8f:fe:f1:71:9a:b7:2f:52:70:47:c3:96:82:3d:95:
                    ed:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:58:71:87:C4:A3:0A:4F:A8:15:84:FB:8B:EB:F4:A8:A1:8F:BA:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1ddd3ca5-92a0-3d12-b871-566cc636e64e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:43:bb:18:39:27:a0:ba:5e:e0:3a:e3:be:a1:a2:52:13:dd:
         f7:5c:2a:99:c9:22:f8:73:ef:c5:29:5b:72:85:a2:82:2a:ad:
         8f:b0:fe:9c:64:ef:d3:2c:fd:29:38:2c:6f:bb:79:9b:5d:85:
         44:2c:97:5b:12:86:f1:e9:80:a3:12:8b:4b:25:74:5b:31:ef:
         fe:10:a2:ee:ef:31:40:7d:de:ec:4d:88:79:e9:d7:cd:22:00:
         4e:d9:8f:b2:a5:76:77:6a:93:6f:69:cc:91:68:da:11:25:da:
         a4:54:95:af:09:2c:c7:db:8c:d8:d3:30:9f:25:33:ab:df:3b:
         97:3a:f5:fb:57:81:86:03:1b:d9:a9:f9:30:c3:e0:0e:fa:a1:
         d2:bb:49:bf:7d:78:66:da:d3:ac:a1:0e:5e:9e:44:99:c3:0a:
         46:39:01:ec:bd:6b:b0:de:8a:44:b4:95:6a:b7:8e:48:4b:17:
         c5:fd:d0:eb:b6:e9:21:11:da:9a:ac:e6:b4:93:54:06:0e:74:
         40:37:f8:02:de:aa:2c:05:64:05:98:9b:ca:45:fe:5e:2f:7c:
         c1:ef:9f:2d:81:df:bb:f5:5c:ca:2d:0a:1d:04:4c:3e:ed:9a:
         1c:53:ac:b4:83:dc:9e:94:04:af:07:ad:49:7f:af:ee:51:e1:
         d4:f6:2f:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus1DhIBy0LQ9AEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
YjlkNjY0Y2ItZTU1OS00ZWE3LWFhZTktMzY4ZjZkYTM0ZDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWhMUsF+l0QGptO4lOJtKRpO3P7wmpFsE1Od
40xCzF1rKcaT1uhvuiYOA04PUP5UMPYgfuxYaIGaHpjIxm4nMGGV6vCswXuFlPql
Wg/SBfVretDmddV0fe7KSkff8ksr+tAnWAwQPxOiQ3G9donDzrSOkWFETEmphTBR
3hdHuv4tIiadoDagnFGTrRFO2lQ8AunmeSjdXpF9BW2UdP6/M7md9N2UNKDzJvkm
1jqnYsohYywRb4suxzlWdNRFqyswNTrq/5tc+5/ViKnlE/2EIAmlV73UqkD6qJi5
/eA0xjbwY3B08sNRa+eYzD5+pFGP/vFxmrcvUnBHw5aCPZXt3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5YcYfEowpPqBWE+4vr9Kihj7pfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMWRkZDNjYTUtOTJhMC0z
ZDEyLWI4NzEtNTY2Y2M2MzZlNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZDuxg5J6C6XuA6476holIT3fdcKpnJIvhz78UpW3KFooIqrY+w/pxk
79Ms/Sk4LG+7eZtdhUQsl1sShvHpgKMSi0sldFsx7/4Qou7vMUB93uxNiHnp180i
AE7Zj7Kldndqk29pzJFo2hEl2qRUla8JLMfbjNjTMJ8lM6vfO5c69ftXgYYDG9mp
+TDD4A76odK7Sb99eGba06yhDl6eRJnDCkY5Aey9a7DeikS0lWq3jkhLF8X90Ou2
6SER2pqs5rSTVAYOdEA3+ALeqiwFZAWYm8pF/l4vfMHvny2B37v1XMotCh0ETD7t
mhxTrLSD3J6UBK8HrUl/r+5R4dT2Lwc=
-----END CERTIFICATE-----
Generated at Mon May 5 09:55:36 2025 by rpki-client