Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d377f5a8-30b1-3dd8-a568-0eaa7fcf4c31.roa
File:                     d377f5a8-30b1-3dd8-a568-0eaa7fcf4c31.roa (raw, json)
Hash identifier:          DON4lQVaAhatDSj8+YuBtzRIe/arbshoyCbHwwWdu6U=
Subject key identifier:   FD:81:15:01:34:3B:6A:91:3B:D8:3D:38:74:2E:6E:A3:4C:91:FB:3D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858499F24AD13AC0DBBFD7A86FF50
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d377f5a8-30b1-3dd8-a568-0eaa7fcf4c31.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        136.22.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:ad:13:ac:0d:bb:fd:7a:86:ff:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=d796ad2d-56d2-4dff-b1c6-0ce3d628e19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:09:15:de:42:b8:17:49:13:63:9b:ae:8e:22:
                    aa:dc:08:be:3a:1d:c6:39:43:c1:f4:ca:a9:ab:65:
                    f6:3f:1d:1b:cc:1e:9c:a3:cd:ca:7d:07:22:05:ee:
                    94:7c:34:ae:72:dc:10:55:48:17:90:a9:84:71:44:
                    e9:18:9c:fd:06:42:07:0f:9c:96:65:e3:c0:c3:65:
                    95:e6:45:95:37:13:33:61:30:f0:ff:64:33:27:bf:
                    51:b6:48:39:3c:b7:f0:36:9f:df:75:79:f5:d1:25:
                    37:6c:93:79:0c:2e:f4:d0:ff:0f:dd:aa:d5:d2:ca:
                    48:8a:08:93:1d:d0:ff:6c:00:9f:ba:60:40:21:49:
                    32:40:fd:bf:0f:16:33:8b:75:8d:66:97:b5:7e:84:
                    90:89:11:3e:f4:5d:92:c5:53:54:c8:75:d3:c7:4c:
                    12:24:aa:6c:14:fb:04:91:ff:5b:db:39:e8:6e:98:
                    6c:ef:4e:3c:88:ee:3b:d8:63:a4:e1:73:dd:f9:55:
                    fd:7b:d3:59:31:63:f5:e0:70:bb:c1:78:8b:7f:05:
                    a0:97:e3:42:9c:e2:a3:6c:d8:07:87:bf:fe:9a:7f:
                    47:ea:9f:5f:6f:53:ed:53:b8:12:f4:be:6b:3f:81:
                    ab:de:7f:cb:c7:3b:e5:8e:4b:b9:8a:0a:95:8d:1c:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:81:15:01:34:3B:6A:91:3B:D8:3D:38:74:2E:6E:A3:4C:91:FB:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d377f5a8-30b1-3dd8-a568-0eaa7fcf4c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ea:26:93:5d:c8:e3:5f:2c:27:b9:29:58:33:75:e6:7d:cb:
         d3:83:f3:14:d3:ba:0d:4d:c9:3b:20:57:bf:2b:b0:28:8b:1b:
         d3:70:52:5a:ac:0f:27:d1:4c:72:e7:87:63:cd:c2:db:6f:61:
         4b:3a:a8:e6:73:5c:a1:f1:a2:b0:a7:81:b7:21:ac:aa:89:dc:
         b7:65:1f:03:b1:85:dd:f2:74:a9:51:96:11:57:be:c5:df:9a:
         d5:fa:f2:a4:5b:29:e9:5c:ca:f5:cb:12:ca:6a:1c:81:13:41:
         7f:12:bc:d9:68:13:22:2d:05:97:2f:16:c3:08:bf:12:66:a9:
         8b:d4:57:10:77:7b:51:58:13:df:af:83:44:01:82:58:5c:6b:
         36:ee:74:6c:c0:c5:68:d5:0b:17:1f:3c:9c:ea:e2:cf:78:1c:
         ce:28:f2:35:f6:85:a3:5b:d0:69:bb:90:fe:00:e1:60:5c:c0:
         d4:31:97:b0:69:de:76:70:05:c6:b4:4a:1c:da:27:85:78:dd:
         5c:4f:0f:c9:4d:1c:95:6f:d1:01:a4:07:74:a3:bd:73:57:ec:
         ff:d0:2d:8b:b6:70:3a:91:e1:53:6c:f8:2e:e5:98:f8:cd:4d:
         ca:59:54:50:d4:64:67:98:7b:00:a7:1a:56:4e:e8:28:c9:0a:
         cb:ca:ed:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:45:25 2025 by rpki-client