Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d45fe405-f255-4bb8-b52e-250922df2625/4bde763c-caf1-3ec2-b5bc-fd3ee03b7310.roa
File:                     4bde763c-caf1-3ec2-b5bc-fd3ee03b7310.roa (raw, json)
Hash identifier:          qIBhQe1ENIhxqvVe6155uZrYtEGhdyBIDBBpLOfI7O4=
Subject key identifier:   FC:9D:A8:1A:8E:CC:C8:5B:28:AA:33:D9:4D:CA:73:69:2D:4F:B9:D8
Certificate issuer:       /CN=d45fe405-f255-4bb8-b52e-250922df2625
Certificate serial:       010D0C9F43285849B66E81F2EC78A7ADB2371B80
Authority key identifier: C7:3E:EC:8C:E8:BE:97:DF:A6:90:0A:3B:9B:63:A4:EE:5B:20:75:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d45fe405-f255-4bb8-b52e-250922df2625.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d45fe405-f255-4bb8-b52e-250922df2625/4bde763c-caf1-3ec2-b5bc-fd3ee03b7310.roa
Signing time:             Thu 01 May 2025 21:13:36 +0000
ROA not before:           Thu 01 May 2025 21:13:36 +0000
ROA not after:            Wed 30 Jul 2025 21:13:36 +0000
asID:                     36744
IP address blocks:        23.136.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d45fe405-f255-4bb8-b52e-250922df2625/d45fe405-f255-4bb8-b52e-250922df2625.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d45fe405-f255-4bb8-b52e-250922df2625/d45fe405-f255-4bb8-b52e-250922df2625.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d45fe405-f255-4bb8-b52e-250922df2625.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:6e:81:f2:ec:78:a7:ad:b2:37:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45fe405-f255-4bb8-b52e-250922df2625
        Validity
            Not Before: May  1 21:13:36 2025 GMT
            Not After : Jul 30 21:13:36 2025 GMT
        Subject: CN=7f8d86ab-2c8e-42cc-8b10-9b23725f7e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:76:b7:67:e5:5e:b5:20:fa:e7:81:03:27:51:
                    73:02:96:f7:90:61:0f:80:ef:5d:48:11:7a:76:08:
                    3c:7f:b2:90:a5:17:06:11:95:18:25:30:c7:f9:1a:
                    29:ab:07:29:fa:d5:33:9a:73:de:49:0c:3c:32:d5:
                    9c:6d:06:02:17:1c:a5:56:fa:cd:4d:43:5c:d2:06:
                    c8:cc:06:db:1d:07:3e:16:30:f9:5e:ee:b3:a7:0b:
                    17:a0:94:ec:c7:b6:a0:b5:b8:89:6e:03:35:0a:bc:
                    67:ba:46:e3:47:8a:5a:09:42:92:c5:f0:fa:70:5e:
                    90:18:a1:f9:a6:b3:aa:3a:64:7b:e5:5b:fa:d8:c5:
                    5d:a1:ee:b1:b5:94:ba:95:02:1b:e2:6c:87:99:39:
                    bc:2e:c5:11:a7:f6:db:16:d4:45:90:d7:2a:3c:a3:
                    01:51:e6:a0:4d:94:4e:8a:e3:62:65:4d:b7:58:04:
                    fa:f9:5a:d6:4b:6b:98:8f:c0:e5:6d:78:9b:8e:f2:
                    b1:24:56:13:c9:63:2e:04:aa:5f:3d:da:d7:96:14:
                    e6:4d:79:97:e2:a6:19:bd:1a:9d:0d:36:a3:99:85:
                    3c:c7:8e:ec:d1:02:aa:85:67:4c:95:84:5b:a0:67:
                    9a:4d:f9:c7:ff:3e:8e:ff:c0:18:98:97:eb:a1:5c:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9D:A8:1A:8E:CC:C8:5B:28:AA:33:D9:4D:CA:73:69:2D:4F:B9:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d45fe405-f255-4bb8-b52e-250922df2625/4bde763c-caf1-3ec2-b5bc-fd3ee03b7310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d45fe405-f255-4bb8-b52e-250922df2625/d45fe405-f255-4bb8-b52e-250922df2625.crl

            X509v3 Authority Key Identifier:
                keyid:C7:3E:EC:8C:E8:BE:97:DF:A6:90:0A:3B:9B:63:A4:EE:5B:20:75:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d45fe405-f255-4bb8-b52e-250922df2625.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:bb:05:ce:47:26:90:65:c8:48:41:e1:0f:40:18:e6:72:91:
         fd:7a:9b:da:b7:d7:6c:92:b0:6c:30:70:a1:23:28:e9:56:85:
         76:b7:d5:2a:ca:ea:13:fb:ae:f2:de:15:5f:bd:fd:84:32:be:
         3a:55:30:56:5c:fc:1d:19:d2:d2:80:4c:da:77:c7:72:46:00:
         68:e1:c5:66:43:67:be:8f:48:4d:55:2e:5c:d0:58:c1:be:10:
         c0:55:f4:40:09:59:5b:25:f8:de:9d:1a:f9:7b:70:da:32:7b:
         41:96:fe:b2:85:95:b5:f1:72:cf:cd:35:cc:59:2d:cc:0a:a5:
         04:c2:50:63:8e:5b:93:db:45:e4:70:37:d4:25:47:90:e0:6d:
         27:fb:8d:09:f2:3b:44:1b:08:40:97:b8:07:a9:50:5b:39:b5:
         19:90:cf:2b:c6:f1:c8:12:2c:5d:5f:b9:c2:01:11:b2:b3:fe:
         e0:f0:c1:38:53:27:05:9b:18:4f:ae:f7:6d:15:3e:9e:1a:94:
         dd:ad:70:84:ad:25:ac:fe:e1:8a:0b:02:ce:6a:39:a3:82:6f:
         1d:4b:1c:3a:b2:ed:58:ae:8e:70:e2:58:dc:c5:b3:3a:96:89:
         10:b7:27:e4:0e:64:1a:94:47:f2:d7:5a:47:25:ca:26:d0:54:
         bb:eb:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:49:34 2025 by rpki-client