Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c13eba82-2afd-3f36-8a3c-5cea5bd5c228.roa
File:                     c13eba82-2afd-3f36-8a3c-5cea5bd5c228.roa (raw, json)
Hash identifier:          5Z51sltfrnL0d7mWdeAjparm4z+OtxPnviMcka2+xcU=
Subject key identifier:   F4:69:06:21:71:08:90:83:00:F3:74:52:B8:75:36:48:29:9C:B4:EA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A784D116D3775D3483564380
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c13eba82-2afd-3f36-8a3c-5cea5bd5c228.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        64.9.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:d1:16:d3:77:5d:34:83:56:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=b499211a-071e-46b5-93d8-2eff97be71fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a2:5d:89:f0:16:f2:5a:dc:2e:ea:7d:a9:b5:
                    54:50:4e:c4:0a:15:16:4d:bc:ac:eb:b7:bc:77:44:
                    f7:ea:4d:e1:66:64:b7:94:e5:0f:4d:e3:a2:5e:ca:
                    f4:d1:e8:7a:a3:c7:15:31:b3:0d:ee:75:d7:64:da:
                    66:e0:88:c9:2d:2b:b1:fb:1f:1a:53:c5:0e:7d:7b:
                    54:6a:9e:80:98:53:62:6e:7f:38:2f:df:c0:00:60:
                    8a:fa:f9:13:b4:e4:28:cc:39:14:7a:94:40:58:77:
                    c8:fd:83:3b:42:f7:57:b4:75:01:a2:14:77:36:11:
                    05:47:a5:6a:37:80:41:dc:8e:d5:34:a2:fe:4d:de:
                    8b:4b:09:50:94:f7:1d:3c:b2:c1:5a:c4:cd:35:a0:
                    63:d5:d4:d0:67:73:a6:72:36:2f:7b:ff:9d:d7:6d:
                    ef:de:cb:3f:29:ed:78:ec:a7:ca:fa:58:28:9d:49:
                    76:7f:61:6c:f1:8c:3e:e0:b7:32:16:a2:38:29:8a:
                    5a:33:ad:b8:e0:cd:43:67:89:8d:e0:9e:6f:84:7d:
                    c8:41:42:d2:6c:b8:a4:9f:b7:45:e3:15:55:97:04:
                    34:32:b0:02:61:cf:01:28:c3:95:a8:eb:40:23:87:
                    a7:b6:16:fc:93:65:62:0a:ea:44:90:5b:bf:30:82:
                    15:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:69:06:21:71:08:90:83:00:F3:74:52:B8:75:36:48:29:9C:B4:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c13eba82-2afd-3f36-8a3c-5cea5bd5c228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0b:12:48:12:75:d7:5a:9a:76:bb:36:fc:6f:7d:97:6a:52:
         07:d9:fb:56:8c:fc:20:13:01:d9:14:cd:ae:88:86:f5:66:3a:
         8f:fd:71:34:ef:ec:89:10:94:dc:3f:22:41:4d:ba:c5:3e:fe:
         c2:53:12:a3:81:d4:94:42:82:04:70:16:99:54:39:6c:40:83:
         8c:24:de:f7:36:6b:70:73:f1:67:16:6a:51:2e:d9:54:99:96:
         75:97:02:65:1f:9f:1c:8d:77:3a:51:11:6b:da:db:f9:f4:29:
         c4:d9:50:02:0b:c5:70:43:d5:7d:5c:a5:20:9b:bb:6d:cf:0a:
         27:0d:6b:0c:6f:e0:cf:d1:ca:1a:f6:1d:88:ef:10:6b:22:0b:
         09:7c:f2:64:2a:1d:3a:a7:90:2b:68:40:c9:6f:bc:aa:28:b0:
         b1:27:10:49:82:19:38:ad:9c:8a:d2:34:46:4e:f0:64:0b:b0:
         5f:56:d1:75:9e:a7:0f:1f:54:3a:48:cf:d5:5b:98:b1:a7:7c:
         f6:36:89:15:0b:a2:55:42:8c:55:39:1b:23:f8:a1:1a:60:5d:
         db:42:44:f4:49:a7:f1:37:77:44:0b:2a:c0:cb:6e:4a:62:07:
         04:9f:bd:d5:5b:fd:45:b8:d2:cb:87:08:9d:a8:8c:b1:04:b4:
         72:1b:82:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:06:57 2025 by rpki-client