Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7de72217-a5ed-3f99-8532-8233575f8ade.roa
File:                     7de72217-a5ed-3f99-8532-8233575f8ade.roa (raw, json)
Hash identifier:          9OJXPDsweXpSgETuENPf6z6N7k3BqSKwkFpEoVyYvGg=
Subject key identifier:   6E:29:35:57:AB:65:19:64:D5:C2:39:71:F4:60:9A:84:29:3E:9E:F9
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BAC3A182EF60126032F380
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7de72217-a5ed-3f99-8532-8233575f8ade.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:c3:a1:82:ef:60:12:60:32:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=9ec49c66-0068-4a13-b742-dd74fb422e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c4:e0:4a:cf:2d:ac:36:50:15:5a:25:ce:29:
                    e8:ec:22:6a:5c:79:0f:f4:02:c0:ff:16:b1:1e:63:
                    3d:ed:cf:2d:9f:50:10:bc:a6:a6:c7:69:8c:50:73:
                    7e:e4:16:ce:fb:68:1a:ad:93:0f:51:a7:3e:9c:0f:
                    cb:9f:93:e4:f4:4c:ec:6f:05:e0:a9:c8:1d:52:ee:
                    8c:f0:eb:9c:bb:94:1d:a0:80:8d:ea:95:1a:8b:3f:
                    be:ac:dd:d3:9e:72:b5:ff:00:8c:97:7c:b9:27:97:
                    22:c9:91:12:56:6b:d0:69:bf:66:14:cc:42:00:5d:
                    55:73:93:5a:bf:f4:01:cf:c9:d5:ec:88:bf:1b:9d:
                    7e:3a:54:51:52:ec:76:28:aa:53:37:55:3e:e0:35:
                    dc:b4:4c:99:01:c4:76:55:15:13:f4:3d:39:b8:2c:
                    92:aa:65:cb:49:69:bd:83:70:91:b0:e6:f0:96:7e:
                    db:d4:0f:cf:2b:a0:be:ca:9e:52:2b:e3:68:27:79:
                    47:d4:13:33:05:63:14:c0:2f:08:2f:fb:8f:e8:60:
                    de:e0:17:57:cb:a5:74:9b:f9:5e:64:a4:fd:23:31:
                    20:88:3f:fe:25:a7:8a:ae:be:88:06:21:04:74:5b:
                    68:0f:94:5d:0f:32:e8:c1:e8:a1:ab:b7:74:d9:2c:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:29:35:57:AB:65:19:64:D5:C2:39:71:F4:60:9A:84:29:3E:9E:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7de72217-a5ed-3f99-8532-8233575f8ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4d:4c:96:d5:2f:f8:ca:83:bd:bf:53:57:93:bf:ac:b7:e1:
         c3:c4:73:9a:c0:6d:25:35:86:ee:5c:1f:f8:1a:61:a5:70:b8:
         c1:b6:8a:32:ca:cd:a3:97:c5:cc:4c:dd:80:c8:60:c7:f9:3d:
         a6:41:45:7f:93:d5:b0:40:63:6e:9f:48:02:e5:dc:a5:47:ce:
         9a:ba:08:71:18:34:c2:9a:32:93:0e:30:6d:5f:a1:66:e4:1a:
         4e:ab:e3:68:62:09:e0:71:2f:83:dc:e8:6f:2c:f7:94:e5:de:
         db:04:57:3e:29:06:27:5b:7a:92:eb:27:61:30:3a:f2:b5:03:
         45:6e:41:fc:d9:41:e4:97:cf:84:54:97:28:7f:88:cb:41:77:
         bd:aa:6d:6c:af:ae:82:3e:f4:bc:4e:65:24:8d:4a:85:cf:26:
         da:88:7e:1b:ba:99:2f:4f:35:09:fe:6b:04:e2:00:27:80:82:
         90:cb:15:be:0c:9b:ea:c5:08:7e:60:db:73:fb:92:20:02:a0:
         59:09:28:d9:ce:2e:ed:db:d5:33:27:bf:8e:7f:ac:60:8d:05:
         c1:ba:5e:79:65:ba:8b:9d:2c:c3:f8:cd:54:21:02:87:0b:a8:
         bc:a4:40:6d:fd:e8:06:cb:72:a7:ad:70:fd:46:d0:ab:ee:a8:
         82:1c:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:52:31 2025 by rpki-client