Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3bb7c0b5-ad6d-3b3e-8db2-fda8d186bffd.roa
File:                     3bb7c0b5-ad6d-3b3e-8db2-fda8d186bffd.roa (raw, json)
Hash identifier:          udCSn4jrNOK3/W5b3EUid0Z2QjgW3v9Imsxb4NSiq/k=
Subject key identifier:   21:FC:DC:42:0B:56:25:6A:9D:3D:B0:EF:91:B4:62:84:18:4E:19:E7
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858499F24AFF69A8F822CF5381B00
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3bb7c0b5-ad6d-3b3e-8db2-fda8d186bffd.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36040
IP address blocks:        136.22.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:af:f6:9a:8f:82:2c:f5:38:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=fd375f13-6b1e-42ec-a5aa-abea2eeb3bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:48:c0:37:45:48:20:21:ec:6b:77:b7:81:
                    b9:cc:9c:94:a2:ae:4c:11:bd:1d:27:48:44:46:a3:
                    fc:07:a8:cd:d8:c6:33:29:f2:68:a9:90:8b:83:f8:
                    f8:b3:64:ba:5a:0b:4a:53:68:d7:69:8c:4c:c4:b8:
                    91:62:36:c9:8d:16:1d:59:89:ae:c1:dd:af:3e:b8:
                    a7:f8:49:16:d5:8b:2f:70:12:34:d9:14:c8:93:dd:
                    56:68:44:65:15:7d:23:4d:7b:71:58:20:5e:06:7d:
                    89:d5:c3:3d:a3:1a:94:3c:e6:6f:b3:a3:1c:17:54:
                    28:53:3d:f2:0b:8e:7a:f4:83:e4:43:63:13:96:07:
                    e4:19:99:eb:18:dd:76:45:b9:ac:c6:eb:bc:d8:30:
                    56:e7:38:04:68:51:38:fa:b5:0b:dd:ef:22:31:ca:
                    49:c3:aa:db:7e:09:2f:56:60:54:c6:81:2b:b3:5a:
                    dc:e5:8a:cf:44:71:67:58:94:29:a3:30:2c:eb:1f:
                    30:99:4d:65:ac:d3:e3:1d:04:8c:95:ba:9f:f2:b5:
                    ed:5d:be:73:c3:2c:a6:02:c7:eb:a5:e7:7a:d1:0a:
                    51:9c:46:38:80:23:af:25:80:18:51:4e:88:09:da:
                    11:f9:17:16:4c:cc:f8:c1:14:f2:db:2b:41:e8:ba:
                    a0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FC:DC:42:0B:56:25:6A:9D:3D:B0:EF:91:B4:62:84:18:4E:19:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3bb7c0b5-ad6d-3b3e-8db2-fda8d186bffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:18:de:17:a0:24:61:2b:49:b1:68:cf:6d:9e:a0:a7:9f:c8:
         85:6c:fd:90:65:1f:c9:44:60:d3:e7:5f:d9:a9:db:89:55:e3:
         e8:f0:6b:45:71:1e:06:21:52:ec:73:eb:86:09:ff:38:ee:2b:
         1a:c5:c9:f3:45:5c:36:29:ed:4e:8c:5e:d0:46:d3:ea:1c:e0:
         73:d8:ce:ed:32:74:5b:27:aa:74:b1:89:aa:b8:87:88:9b:8c:
         e0:47:70:69:f1:eb:34:ba:52:5f:f0:49:c9:d8:66:3f:ae:88:
         88:a2:b4:a2:be:c7:60:28:ba:1f:b2:8f:bd:30:f9:bf:1f:a5:
         4f:21:99:19:51:e2:8b:5f:d0:68:93:d3:64:fa:fd:d9:f2:0c:
         f5:ae:a9:fc:bb:3f:d1:87:01:56:92:b5:fd:46:ca:d3:6c:3b:
         e2:e4:52:a4:c7:b6:48:da:7c:48:b9:29:b0:73:51:99:47:f4:
         69:ee:c5:bd:5d:8a:b7:a4:7d:07:44:8a:53:c7:68:36:f9:6c:
         d0:d1:f4:87:29:37:f4:73:62:6c:e3:ae:1d:0f:ad:e0:8d:01:
         50:52:d7:7e:2d:7b:2d:c3:16:b6:d4:48:08:af:71:e3:a7:a7:
         1c:8f:a1:c8:8e:27:61:09:f4:28:ec:6a:e8:67:ac:85:15:95:
         87:69:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:18:40 2025 by rpki-client