Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d6bee523-7479-3949-a6ec-a19887a4db7a.roa
File:                     d6bee523-7479-3949-a6ec-a19887a4db7a.roa (raw, json)
Hash identifier:          vy8Ffxd75Xt1yh8TSu1Z9utYRoZm47hioszvTE0CNr0=
Subject key identifier:   A9:0F:3A:87:F2:C4:10:4C:5E:84:59:AF:EA:CE:E7:2C:8D:D7:35:01
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858499F24A266FCADD733B714C380
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d6bee523-7479-3949-a6ec-a19887a4db7a.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        136.22.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:a2:66:fc:ad:d7:33:b7:14:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=e3c2cf8f-b2f5-4d0e-ab0e-8bfa071041d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f6:0b:47:2e:57:32:cc:05:39:62:35:ff:b5:
                    91:be:df:90:79:10:0d:57:c0:d4:f2:c6:fe:5c:f8:
                    9a:bb:55:3c:67:93:e4:95:f1:56:88:21:27:bd:8b:
                    f6:46:f8:ec:4e:3e:c9:d2:2e:d9:93:4f:a0:78:50:
                    e6:b0:3c:7e:65:2c:5d:21:e0:62:13:da:e2:cc:0a:
                    81:4f:77:37:12:3f:3c:29:99:56:24:7a:48:84:5f:
                    e7:00:83:aa:59:ca:39:62:4f:a5:a5:b6:a8:c3:8b:
                    64:a7:e5:15:7b:6b:e8:55:2f:68:65:f0:88:57:1c:
                    15:08:04:f3:0a:4b:c9:55:73:43:b6:86:7c:11:3d:
                    93:95:f8:e7:83:ab:af:ca:78:94:8b:93:4c:32:7f:
                    c7:f4:bb:a3:e1:b0:69:8d:85:74:4c:2c:89:17:53:
                    d1:89:3e:34:2a:d3:05:fa:c3:ce:12:45:18:e4:f5:
                    59:f0:f3:d7:80:71:df:a9:fc:a0:90:f3:52:82:a8:
                    da:fa:46:01:a1:24:0e:e6:cb:ce:0a:1f:5b:0d:6d:
                    8f:c4:40:14:db:ac:d7:a4:00:c1:28:5c:75:d4:f7:
                    43:8e:9a:40:3a:18:5c:33:61:7a:27:4b:ad:95:07:
                    af:71:01:46:91:56:43:3b:c5:e0:b1:a0:b2:37:64:
                    2e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0F:3A:87:F2:C4:10:4C:5E:84:59:AF:EA:CE:E7:2C:8D:D7:35:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d6bee523-7479-3949-a6ec-a19887a4db7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:31:ee:65:b5:07:0e:88:8c:bf:f7:ac:0d:a1:09:67:b9:4d:
         22:3b:42:6b:7c:c3:b3:ef:9a:0b:ba:51:dd:e9:d9:dd:33:52:
         42:f8:1d:87:fa:76:00:d2:08:e6:40:3f:e6:2a:0c:a6:40:c3:
         04:cb:47:70:69:ca:63:c9:5f:92:a2:65:a9:0e:37:62:aa:94:
         57:7c:08:6f:a0:06:9f:49:f6:5d:8c:e6:ce:28:e6:2d:21:76:
         6e:2f:b9:ed:ba:80:4a:c1:c7:30:59:b9:59:c4:cd:fa:d8:d9:
         7f:66:2b:27:5f:06:16:30:44:55:b4:eb:5a:0f:80:78:49:bf:
         52:f3:09:cc:e9:e7:56:02:5c:3b:8b:68:8f:97:70:17:98:ed:
         02:b1:cc:96:43:a8:34:a2:e0:98:4d:3c:16:dd:67:55:bf:7d:
         23:86:1a:42:33:39:8e:01:57:f2:c0:a6:ad:c3:77:bf:56:e4:
         16:ed:36:14:d1:66:cb:2c:48:e1:af:9d:1b:a0:87:ce:a1:65:
         c6:3a:2a:15:89:7a:e7:8d:14:ee:fa:20:88:c1:9d:20:f0:a8:
         0d:d2:a6:4f:8b:83:2a:f0:06:35:2d:97:72:84:bd:82:84:a8:
         43:c0:e5:30:7d:c0:e3:c9:47:6f:df:67:b3:e2:c1:28:30:de:
         a9:ad:63:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:06:20 2025 by rpki-client