Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d9a716a1-b2f0-320b-a1df-ae24b632b117.roa
File:                     d9a716a1-b2f0-320b-a1df-ae24b632b117.roa (raw, json)
Hash identifier:          /cTRuKxw8WfsKjIxrNsdIT2fpF3IezSUKriFaXLSMII=
Subject key identifier:   D1:A0:92:70:09:BD:62:77:BC:45:BB:C1:11:5B:A2:92:72:EA:F6:30
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BACA435F626B2A7A4CF980
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d9a716a1-b2f0-320b-a1df-ae24b632b117.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:ca:43:5f:62:6b:2a:7a:4c:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=c679db49-90fa-420e-8a07-b34825dd6342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:89:9a:30:56:6c:a6:08:1a:c1:dd:44:39:90:
                    c0:44:10:42:5e:24:40:00:8e:c2:87:df:83:26:b4:
                    ba:b0:bb:48:0e:d2:bf:12:1a:78:6f:3a:c0:c3:0f:
                    1b:0c:b4:ca:5f:7f:3d:5a:5f:5d:8d:d1:15:28:e0:
                    03:bc:7d:07:2e:5d:cb:df:f7:78:a5:d2:0a:fa:8a:
                    19:4b:82:05:c6:93:82:54:22:3c:40:25:b6:ef:d1:
                    1c:db:15:1d:e4:d1:82:00:c6:23:52:cd:1c:05:99:
                    d1:9e:f6:9f:e9:9a:9b:63:43:d8:f4:d0:9b:c8:d0:
                    5e:52:fa:79:0f:9b:69:45:2b:2d:b4:c8:6a:96:19:
                    af:64:53:de:5b:e4:f5:20:3f:67:91:e6:0b:0e:63:
                    4b:f6:d3:f1:01:9c:bb:d0:6e:de:4c:75:91:82:06:
                    f0:0a:32:d3:b2:60:77:bd:63:38:9b:ce:26:d3:b8:
                    ea:25:49:ac:05:ef:8a:45:94:bc:d9:8f:34:4a:59:
                    c0:46:44:81:5b:85:3a:f1:ff:8d:03:98:41:91:43:
                    f6:10:13:a4:69:7d:f2:9a:1c:cd:68:4c:71:b6:ff:
                    ec:af:20:14:27:45:0b:8f:60:49:34:22:a6:73:b9:
                    aa:39:7d:8e:bb:55:3e:7a:f4:03:7a:f0:1b:89:55:
                    d1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A0:92:70:09:BD:62:77:BC:45:BB:C1:11:5B:A2:92:72:EA:F6:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/d9a716a1-b2f0-320b-a1df-ae24b632b117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ed:08:58:c0:48:75:41:09:ef:a0:dd:73:39:fb:07:e4:43:
         b4:f9:d3:ad:8c:cf:36:18:7b:46:d6:17:3d:6e:d8:b2:10:e2:
         0f:95:cf:b9:88:bf:d0:ed:33:67:f2:a2:31:fa:ff:c1:ec:89:
         a5:89:a5:1a:20:32:3e:3c:70:e1:4f:dd:cf:45:a5:44:03:6e:
         38:54:a3:37:59:21:6b:a9:0d:60:31:5e:5f:c6:2a:0d:71:6e:
         8e:90:61:a8:eb:9e:34:de:b5:39:7e:87:18:9c:c5:21:ad:39:
         40:1c:0e:e8:41:aa:a8:4a:11:50:08:a7:34:25:1b:ef:28:89:
         40:9b:d0:da:19:3f:76:cd:b5:2a:56:f8:d9:52:f4:ff:e7:ba:
         4e:ba:c7:9c:76:e2:7a:77:86:51:1a:12:59:f6:f2:87:e2:f3:
         6e:4c:65:3f:df:bf:5e:aa:00:de:a2:8f:2c:3e:93:3d:9e:cd:
         cf:7a:d8:c9:70:ec:f2:ac:9d:09:5c:24:92:7e:72:7a:ff:63:
         59:f5:ed:2a:2a:47:b7:a5:02:2c:97:2e:c6:94:42:63:a1:80:
         c6:76:d9:d6:7a:78:fe:7c:89:ec:a6:c4:18:a0:3c:d1:04:b3:
         25:ff:f1:27:59:b6:2a:8d:7c:26:b1:e5:c3:1a:c8:09:d4:c1:
         e1:62:89:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 01:31:49 2025 by rpki-client