Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/86802958-60b7-3f07-8c28-a0fc82712d1c.roa
File:                     86802958-60b7-3f07-8c28-a0fc82712d1c.roa (raw, json)
Hash identifier:          /znaLQFm2FsS1OuJljC10F4uxKdQXvRVxamhdnvpB5U=
Subject key identifier:   7F:03:D3:C0:9B:A2:77:B0:7A:8E:7F:A6:B9:B0:5C:EA:B3:51:19:AC
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BAD12984B7BA32B5BA4880
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/86802958-60b7-3f07-8c28-a0fc82712d1c.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:d1:29:84:b7:ba:32:b5:ba:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=1493641c-1d16-46e0-9877-c2d9b022b5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2b:f1:a0:bd:b8:1b:8b:bc:05:0e:0b:ed:a3:
                    00:1e:78:0f:ff:67:0f:fe:f6:a5:30:e3:c3:48:96:
                    33:1b:08:36:84:83:f6:db:41:52:a2:16:33:82:9f:
                    33:f5:0e:4d:69:8c:44:93:3c:8a:73:db:ec:6a:cc:
                    46:39:2e:db:a3:01:a0:4b:65:d3:17:a9:74:50:6d:
                    cc:df:a7:39:8b:61:67:95:84:c6:23:2e:01:cb:79:
                    1b:5b:52:ea:57:0f:df:07:91:a9:c3:51:ed:15:f7:
                    c6:6c:2f:35:05:ea:88:ae:45:8c:9a:6b:7a:b7:6c:
                    f9:80:98:c4:97:2c:10:5d:cd:be:7a:1e:81:dd:fe:
                    0f:b1:6d:81:e8:d3:2a:3b:c8:07:8c:30:f1:92:6a:
                    4d:27:b6:74:3c:b4:ed:26:07:1f:f1:01:c6:30:5b:
                    3d:c8:53:91:c6:d4:66:ec:a5:0e:8c:12:74:04:5d:
                    f0:bb:68:4c:45:82:a3:3a:93:e6:2c:c5:cb:6f:dc:
                    10:ff:67:98:67:35:c3:02:a6:1a:34:3f:89:1d:4b:
                    36:9a:da:42:56:9f:7a:8c:17:22:44:60:fd:a0:83:
                    e7:a7:b5:34:01:ed:f5:45:de:4b:1f:c7:12:bb:89:
                    63:76:c2:c7:71:4a:b4:66:e9:5c:38:99:bd:7f:0d:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:03:D3:C0:9B:A2:77:B0:7A:8E:7F:A6:B9:B0:5C:EA:B3:51:19:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/86802958-60b7-3f07-8c28-a0fc82712d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:6e:cc:38:50:15:97:66:46:3d:0b:34:0a:7f:f9:b7:40:72:
         ca:c7:34:c7:f0:08:25:b0:e4:3b:91:81:18:53:f6:cc:2e:ec:
         f2:81:95:1d:51:03:bd:7f:e7:32:b5:69:08:05:4e:c0:01:50:
         47:71:9b:0e:5f:84:db:d1:87:0f:eb:ce:e2:1a:a0:3b:74:db:
         f0:47:06:d2:96:63:47:b9:87:ab:2e:aa:bd:4b:0a:f3:57:c0:
         98:e2:b0:e7:dd:1e:b4:d0:a1:b2:1c:23:0c:94:fa:db:7a:5b:
         c2:0d:0f:7b:24:6c:c8:a9:ed:04:17:1a:54:18:c5:ea:5b:42:
         c9:54:90:0a:76:57:77:91:ee:22:d4:06:b7:d4:e2:18:76:2b:
         d8:da:24:8a:71:ba:fd:04:e7:22:49:27:ac:6c:45:14:83:23:
         56:7f:eb:33:45:fe:e8:bd:6e:90:a0:48:17:96:8b:f9:36:b3:
         70:e7:8d:58:e6:a1:20:e0:10:3e:ac:e3:b2:0e:62:48:53:cc:
         34:5e:15:8f:86:10:3a:0d:61:d3:9c:96:41:a8:03:c2:f7:c6:
         55:64:d8:e3:dc:fc:14:d6:97:72:81:74:2a:9f:3f:01:65:49:
         b9:ee:a7:1a:28:38:e7:09:a3:a5:76:46:b9:1d:3e:96:fb:af:
         44:ee:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:45:49 2025 by rpki-client