Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa
File:                     0aace9ba-23a4-31b7-b17e-fca13712192f.roa (raw, json)
Hash identifier:          UqFUSTyAtQgAT/do6vIOs1S+NTjDgxvORMMqHhIxBh8=
Subject key identifier:   98:56:D0:5B:0D:F3:D6:58:47:26:D1:CF:D3:AA:FE:3E:FC:C4:C2:C8
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BB68CC4C75547F5DE5D100
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:68:cc:4c:75:54:7f:5d:e5:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=a4431e18-7451-4eb5-b2f7-3084c21c0e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:34:04:95:f0:5d:04:6d:f9:9d:92:91:22:f7:
                    00:f7:f6:3b:bb:b0:90:0c:de:38:01:84:45:22:3e:
                    6b:2d:99:04:7c:c7:8d:d7:69:34:94:58:ad:0c:ed:
                    35:13:71:f4:0f:db:03:e4:f4:6c:ec:25:82:69:e5:
                    a5:7b:fb:b4:92:bc:e2:e8:24:2c:3b:88:69:6b:e0:
                    f2:c5:1a:c8:42:d2:48:79:3f:55:e8:fc:59:cf:cb:
                    f9:50:a2:35:e3:cf:0b:18:94:13:ee:e6:c8:26:0a:
                    c0:a9:23:da:0a:76:91:12:33:75:26:4e:05:81:2d:
                    f2:2b:ee:f6:75:d3:da:79:3a:e5:b4:e3:e2:ba:c1:
                    fb:e6:ea:eb:cf:6a:b1:7e:c7:3f:3c:9a:ad:11:a8:
                    df:da:99:de:fb:0a:f6:d6:b5:94:ad:6c:00:dc:c4:
                    7e:85:2f:d8:af:5d:75:89:ec:43:96:4d:53:f8:5e:
                    05:69:1a:56:f0:a3:b1:54:17:92:09:c2:79:56:4b:
                    f4:96:a7:07:b7:85:f3:e1:e0:7b:aa:12:77:77:72:
                    10:d2:73:af:cb:01:c9:9c:7e:38:d1:9b:85:91:e6:
                    8e:ec:b0:f1:a6:1f:6a:6a:3c:2d:77:c0:6c:ec:b3:
                    72:e9:ad:13:8f:98:ff:5b:66:35:23:83:13:5f:7e:
                    6d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:56:D0:5B:0D:F3:D6:58:47:26:D1:CF:D3:AA:FE:3E:FC:C4:C2:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:02:71:3b:6a:ae:cb:22:a4:a7:2c:e6:f0:a6:cb:3d:d6:bf:
         d6:31:a1:16:3f:d5:3e:a5:40:fa:ec:3e:03:30:a3:87:73:58:
         5f:e7:f5:7a:cc:6a:55:63:06:ea:4b:33:68:d1:f1:e6:f8:45:
         4f:52:f8:7c:53:7b:36:66:be:b7:2e:c6:13:43:6c:66:7f:15:
         57:ca:2f:9b:26:26:d2:5f:01:3b:e0:a2:ed:c3:bc:e3:fd:28:
         72:9a:4f:2f:65:42:3f:d5:ec:13:47:58:08:72:e7:64:47:3b:
         97:75:36:bb:5b:00:62:a9:3e:49:d2:47:15:56:85:85:71:97:
         7c:7a:90:07:82:56:26:ae:ce:ee:b4:a5:6e:13:32:90:6b:93:
         68:bd:44:e8:ab:17:51:24:fa:35:e4:39:64:71:7b:98:14:c8:
         10:7b:40:6c:1b:90:4e:86:19:e0:89:58:03:3e:ef:bb:3e:06:
         f4:1c:a5:f5:04:fd:b5:7a:1c:22:bd:14:66:f3:49:98:ee:ca:
         e1:5a:d8:e0:71:d9:ce:9d:09:0e:93:78:ca:49:dd:d4:5f:d6:
         4e:b8:14:fc:21:38:55:a5:16:84:a3:f7:ef:bb:0d:2e:bb:21:
         3c:e1:06:f8:18:35:7e:f2:d9:b9:59:15:0e:bf:ca:69:6d:66:
         64:f3:94:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:12:55 2025 by rpki-client