Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e6578d58-4946-38e2-9d4c-27f0b8decf0c.roa
File:                     e6578d58-4946-38e2-9d4c-27f0b8decf0c.roa (raw, json)
Hash identifier:          5oYy1InYajCwMhqDO8+oNFqmnSZKtf4PYi20+2euv8I=
Subject key identifier:   96:77:04:37:2A:15:3E:9C:1B:C5:CE:BC:CA:B1:0F:FC:54:93:08:FA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849BDDA3615BF80DF4C57AFE580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e6578d58-4946-38e2-9d4c-27f0b8decf0c.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:36:15:bf:80:df:4c:57:af:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=a3193929-88d6-464d-be0c-1afc5d878e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:63:63:9b:f2:8e:e9:49:d6:9e:04:a9:b0:
                    32:14:01:8f:d8:3b:15:e4:11:3a:f0:bf:23:c8:9b:
                    24:a0:d9:ff:c7:ac:97:b5:62:5a:a0:43:1e:ae:9d:
                    43:f4:a7:08:1e:6a:83:3f:e8:dd:f0:41:10:f8:66:
                    c0:c6:55:0e:43:3f:ca:be:ce:fd:70:20:3e:0a:99:
                    5c:b3:f7:2a:f5:3f:08:e7:27:42:21:0e:1c:8c:2b:
                    c4:da:ba:4b:0d:f3:09:f9:96:b0:c5:cc:a0:bd:30:
                    8f:a0:22:79:6b:6c:47:93:bb:eb:6e:6a:41:8e:20:
                    c3:e7:bf:ba:c3:f1:0d:d8:eb:07:53:bc:c3:75:3e:
                    49:3c:ff:d8:54:28:1a:b8:e4:85:d0:40:b8:a3:03:
                    b0:90:31:18:c8:06:3d:1a:dc:aa:e3:7f:14:45:9b:
                    cc:c6:09:f4:f3:ec:f9:94:4b:fb:05:eb:08:de:2c:
                    67:92:55:2c:d4:9e:21:6a:4f:60:04:e9:01:02:ca:
                    6e:70:01:ec:ec:23:24:06:c7:4c:26:99:d2:1f:14:
                    44:a2:6d:3b:7a:13:9a:be:97:c5:bf:7d:48:2b:c3:
                    ff:91:af:5d:35:5a:5c:45:db:94:6c:3d:2d:76:04:
                    c0:fb:21:b5:b4:07:15:cc:57:64:ce:be:d1:8e:b8:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:77:04:37:2A:15:3E:9C:1B:C5:CE:BC:CA:B1:0F:FC:54:93:08:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e6578d58-4946-38e2-9d4c-27f0b8decf0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:52:4b:ed:9f:d0:00:b8:38:16:9b:de:81:e2:cd:de:d6:f7:
         87:d2:6c:9e:9a:2c:c5:54:63:15:35:63:aa:21:8c:d8:d9:fb:
         01:aa:77:d0:bc:73:d1:2a:6d:74:51:7e:32:9b:4d:45:94:be:
         ad:1e:79:2b:06:f0:9f:a7:09:7a:45:72:55:3a:6b:46:51:62:
         04:eb:c8:b5:db:84:a6:5b:fc:3c:da:d8:0f:34:44:14:6a:02:
         a1:75:da:20:a7:8b:60:dd:75:cb:3e:08:d4:f9:4d:19:30:77:
         53:f9:a0:a6:5e:a2:a7:41:24:d8:99:5d:3d:3d:e0:17:1c:ce:
         99:ed:55:ea:39:78:93:a6:cb:78:dd:b5:aa:08:44:6f:8c:55:
         1f:1e:fc:5f:3f:65:5c:c6:94:30:68:07:5a:cd:3e:10:bc:02:
         fe:c5:a1:52:21:6b:df:92:e2:ae:35:3c:c0:47:9f:79:7d:af:
         42:75:56:d3:85:bb:c1:89:09:01:ea:8a:d5:7a:c5:3d:26:1a:
         f4:79:dd:28:ae:40:45:9d:91:a6:38:b9:8d:59:08:d2:46:f6:
         59:b8:50:e8:63:fa:88:72:53:c8:9c:68:54:1e:20:cc:a9:f2:
         a5:c4:44:f7:c0:fc:75:4d:bc:dd:e8:c3:87:a0:2d:74:64:b1:
         65:dc:57:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jYVv4DfTFev5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk
YTMxOTM5MjktODhkNi00NjRkLWJlMGMtMWFmYzVkODc4ZTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweNjY5vyjulJ1p4EqbAyFAGP2DsV5BE68L8j
yJskoNn/x6yXtWJaoEMerp1D9KcIHmqDP+jd8EEQ+GbAxlUOQz/Kvs79cCA+Cplc
s/cq9T8I5ydCIQ4cjCvE2rpLDfMJ+ZawxcygvTCPoCJ5a2xHk7vrbmpBjiDD57+6
w/EN2OsHU7zDdT5JPP/YVCgauOSF0EC4owOwkDEYyAY9Gtyq438URZvMxgn08+z5
lEv7BesI3ixnklUs1J4hak9gBOkBAspucAHs7CMkBsdMJpnSHxREom07ehOavpfF
v31IK8P/ka9dNVpcRduUbD0tdgTA+yG1tAcVzFdkzr7RjrhYjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJZ3BDcqFT6cG8XOvMqxD/xUkwj6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZTY1NzhkNTgtNDk0Ni0z
OGUyLTlkNGMtMjdmMGI4ZGVjZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBZQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1SS+2f0AC4OBab3oHizd7W94fSbJ6aLMVUYxU1Y6ohjNjZ+wGqd9C8
c9EqbXRRfjKbTUWUvq0eeSsG8J+nCXpFclU6a0ZRYgTryLXbhKZb/Dza2A80RBRq
AqF12iCni2Dddcs+CNT5TRkwd1P5oKZeoqdBJNiZXT094BcczpntVeo5eJOmy3jd
taoIRG+MVR8e/F8/ZVzGlDBoB1rNPhC8Av7FoVIha9+S4q41PMBHn3l9r0J1VtOF
u8GJCQHqitV6xT0mGvR53SiuQEWdkaY4uY1ZCNJG9lm4UOhj+ohyU8icaFQeIMyp
8qXERPfA/HVNvN3ow4egLXRksWXcV2o=
-----END CERTIFICATE-----
Generated at Mon May 5 20:41:15 2025 by rpki-client