Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/fbefcfd6-d05a-3671-bab5-b2929939a916.roa
File:                     fbefcfd6-d05a-3671-bab5-b2929939a916.roa (raw, json)
Hash identifier:          jc2ZRg/zXFKj9Z1JXrtM6aXS1n1rcfzDVGqi8MWOccg=
Subject key identifier:   D7:D2:18:64:A2:C9:D4:84:54:AA:66:F1:F5:50:A6:6E:8E:26:40:20
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F43285849A61F3AEDC10A24C1039FFAC0
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/fbefcfd6-d05a-3671-bab5-b2929939a916.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     401307
IP address blocks:        136.228.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:3a:ed:c1:0a:24:c1:03:9f:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=8cbffb9d-aeb5-4426-8b3d-3197e19bab00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:82:d0:80:43:e2:45:75:61:11:ff:67:b6:0c:
                    a8:99:35:fd:53:7a:10:dd:1d:e8:be:b4:a6:d3:32:
                    53:32:e7:65:f0:25:0c:31:c2:1f:09:98:ce:4b:46:
                    0e:9e:40:43:1f:a9:63:bf:22:1d:8d:1e:d9:7f:18:
                    5a:ff:2f:17:3d:bb:0d:a7:b3:48:01:bf:ed:d2:95:
                    c0:75:bd:0f:e7:d3:b7:06:8c:17:a3:31:89:b3:f8:
                    ff:a1:41:b2:48:fc:9f:bc:65:75:a1:35:3f:7f:af:
                    96:28:9c:4a:4e:77:cb:72:4c:ad:20:b7:f4:98:3a:
                    18:bf:ab:22:a1:26:bf:bb:c6:4d:45:d7:23:b8:9d:
                    4d:7f:a1:27:f1:11:30:37:1c:05:8e:32:0c:85:a9:
                    37:a1:12:dc:a6:34:a9:0a:ae:ec:85:48:80:03:ec:
                    85:c2:81:1e:5e:30:bb:57:2d:30:10:87:49:f0:39:
                    08:e3:1e:83:b2:3d:d0:58:1d:75:61:79:8a:6a:c1:
                    30:59:fc:77:fe:cd:bc:1c:a9:92:ee:82:1b:f1:bb:
                    c8:06:65:c2:d1:7e:73:6d:cc:64:f7:30:68:fc:52:
                    bb:d0:9b:93:f0:20:8a:94:1f:cb:a7:f1:a5:09:92:
                    eb:05:0f:8e:88:70:9a:30:40:a0:8f:21:24:13:80:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D2:18:64:A2:C9:D4:84:54:AA:66:F1:F5:50:A6:6E:8E:26:40:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/fbefcfd6-d05a-3671-bab5-b2929939a916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:1b:c5:3f:95:49:cc:9a:28:98:45:1e:c7:7b:f8:ea:58:ed:
         3f:f0:cf:06:d2:51:6a:7a:fe:01:86:e7:ad:da:b6:db:97:f5:
         3f:09:a5:fa:1d:0d:4e:ba:b7:a1:1c:dc:e2:c3:56:58:08:88:
         54:6b:57:35:fc:9a:80:bc:7a:aa:84:31:2f:1b:28:fc:36:06:
         c1:03:87:15:0e:cc:74:17:8b:42:f5:b0:80:72:b0:96:30:f8:
         87:f1:c3:76:73:54:32:7b:64:f2:42:35:7a:7d:2f:9d:a4:c2:
         14:5d:68:b6:a8:23:97:9b:a5:65:cf:4f:4e:4f:6a:c4:0e:9f:
         39:c2:e7:2c:06:97:cd:7e:36:ef:e7:0c:3a:e5:25:44:db:88:
         98:0a:c7:ef:35:fb:f6:de:12:ca:c6:35:c3:d8:40:1c:e8:b5:
         c6:94:50:25:ea:81:32:99:0b:b8:b5:9b:51:be:85:71:3f:11:
         52:9f:b5:2e:94:41:0e:71:38:08:49:3e:bc:1c:37:63:06:1a:
         68:59:b3:1c:06:49:86:0d:30:30:36:04:91:54:78:ac:7c:97:
         fd:2c:eb:e4:71:44:46:8a:b9:6c:9b:67:39:c5:94:41:1a:c8:
         9d:38:25:b4:c8:7f:7f:ad:16:62:15:e0:0d:39:ac:c0:41:3b:
         76:97:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:54:43 2025 by rpki-client