Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d27695a-73c7-3751-bc92-207e66c57da9.roa
File:                     8d27695a-73c7-3751-bc92-207e66c57da9.roa (raw, json)
Hash identifier:          /lceUQA4mpneBl2ALwdCw7FxhFufJmhqwsdKmv7hOZo=
Subject key identifier:   47:C3:44:72:8D:6A:AB:82:6A:2E:1A:0B:30:07:EF:D8:F8:A0:87:E0
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BB616B9DD650CAC37560C0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d27695a-73c7-3751-bc92-207e66c57da9.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:61:6b:9d:d6:50:ca:c3:75:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=73a26ca2-000e-4a58-95b7-3a3e51fe9e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:b2:fc:b1:bc:4c:73:97:0d:c1:7b:41:25:
                    11:46:8f:73:c6:a2:d3:ac:f8:ac:dc:fa:5d:2f:00:
                    ab:f8:ba:8e:5a:6d:97:3f:6a:fb:f0:a9:51:38:1b:
                    2c:84:4d:8a:79:22:6a:07:14:b8:87:84:92:7f:00:
                    8a:d9:1d:cb:6f:f6:b5:19:16:f7:83:91:07:ef:25:
                    06:04:7f:7d:05:55:71:b4:29:32:d4:8c:8a:81:94:
                    bb:04:be:3f:f1:0b:d4:aa:55:ba:60:d3:29:09:17:
                    00:35:ff:8e:92:27:d6:d5:f1:df:68:38:35:99:57:
                    10:fd:3c:5d:0b:5e:74:92:a6:c4:85:bd:a4:00:21:
                    f4:6c:bf:a4:8a:b4:ce:a0:13:9b:00:66:83:06:bc:
                    54:f7:72:cd:de:8a:f0:6d:ca:b1:da:c2:df:bf:b1:
                    3d:23:29:66:f0:27:f8:2f:5e:d0:66:57:d9:17:1f:
                    40:f6:62:a3:69:c6:99:f3:b6:47:3e:10:1e:2d:97:
                    61:81:d6:39:1d:13:5a:bf:9b:d4:fb:b3:6a:88:a0:
                    f9:31:c9:1c:7d:9a:2c:17:f4:f8:88:d7:ee:56:7c:
                    5d:9f:63:63:f2:e6:36:74:fc:e9:b9:7b:d6:1d:41:
                    23:b1:f4:4d:11:49:45:59:3b:ce:28:d3:5a:e7:9d:
                    f1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C3:44:72:8D:6A:AB:82:6A:2E:1A:0B:30:07:EF:D8:F8:A0:87:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8d27695a-73c7-3751-bc92-207e66c57da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f4:f3:7c:f3:11:c6:b1:3a:90:2b:13:9c:ed:23:f9:31:8d:
         b1:99:0b:2e:aa:39:7e:36:7d:b1:f3:1d:8d:70:e0:4f:be:19:
         2f:db:aa:9f:d4:2c:e2:46:5f:67:9a:6d:e1:fb:20:2c:25:13:
         01:09:e2:e7:f1:27:9b:ea:e3:03:68:23:26:b1:2d:12:6e:b8:
         53:0a:45:a4:39:dc:0b:ef:c9:39:a6:3c:f3:53:78:7a:0f:75:
         62:6d:71:4f:b0:a4:b7:1f:a9:7f:6a:cf:7c:d9:2b:a2:5a:f5:
         f5:ee:2b:f7:47:d7:5c:66:ca:ff:55:9c:a0:67:7e:45:c4:95:
         e6:82:18:cb:90:59:02:97:aa:4e:ac:65:52:19:48:8c:86:22:
         e6:a9:7b:b0:cf:9a:f8:95:c7:6b:33:d0:c8:d5:ae:3d:6a:62:
         74:85:37:ea:63:de:8e:69:86:4c:c1:3f:7c:5a:19:ff:aa:38:
         f4:08:5a:df:a7:c6:47:3f:7b:a5:b8:de:37:74:e4:6d:6f:7e:
         ad:d7:b7:1c:97:57:ba:3e:45:cd:ee:d2:b7:2b:e1:03:21:5a:
         4d:2d:d3:30:2c:7f:d9:08:3a:c9:8c:b9:26:82:f5:2f:d1:1d:
         51:4c:64:94:50:b6:26:6a:f7:38:91:7b:18:da:6e:90:05:12:
         87:2e:f5:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2FrndZQysN1YMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NzNhMjZjYTItMDAwZS00YTU4LTk1YjctM2EzZTUxZmU5ZTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykCy/LG8THOXDcF7QSURRo9zxqLTrPis3Ppd
LwCr+LqOWm2XP2r78KlROBsshE2KeSJqBxS4h4SSfwCK2R3Lb/a1GRb3g5EH7yUG
BH99BVVxtCky1IyKgZS7BL4/8QvUqlW6YNMpCRcANf+OkifW1fHfaDg1mVcQ/Txd
C150kqbEhb2kACH0bL+kirTOoBObAGaDBrxU93LN3orwbcqx2sLfv7E9Iylm8Cf4
L17QZlfZFx9A9mKjacaZ87ZHPhAeLZdhgdY5HRNav5vU+7NqiKD5MckcfZosF/T4
iNfuVnxdn2Nj8uY2dPzpuXvWHUEjsfRNEUlFWTvOKNNa553xUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEfDRHKNaquCai4aCzAH79j4oIfgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvOGQyNzY5NWEtNzNjNy0z
NzUxLWJjOTItMjA3ZTY2YzU3ZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFP083zzEcaxOpArE5ztI/kxjbGZCy6qOX42fbHzHY1w4E++GS/bqp/U
LOJGX2eabeH7ICwlEwEJ4ufxJ5vq4wNoIyaxLRJuuFMKRaQ53AvvyTmmPPNTeHoP
dWJtcU+wpLcfqX9qz3zZK6Ja9fXuK/dH11xmyv9VnKBnfkXEleaCGMuQWQKXqk6s
ZVIZSIyGIuape7DPmviVx2sz0MjVrj1qYnSFN+pj3o5phkzBP3xaGf+qOPQIWt+n
xkc/e6W43jd05G1vfq3XtxyXV7o+Rc3u0rcr4QMhWk0t0zAsf9kIOsmMuSaC9S/R
HVFMZJRQtiZq9ziRexjabpAFEocu9W0=
-----END CERTIFICATE-----
Generated at Mon May 5 12:57:16 2025 by rpki-client