Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1874d847-1229-3448-8d81-30a2059e41a0.roa
File:                     1874d847-1229-3448-8d81-30a2059e41a0.roa (raw, json)
Hash identifier:          VyTxdUDqbdLwVuLBnMK7huEuIo4PU6OpMLbWrSfNoOQ=
Subject key identifier:   58:E7:F2:E5:8C:02:74:7F:4D:40:CE:DF:BB:18:9E:E0:DC:6C:30:1A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BB76FE8CA15F4A83A20CC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1874d847-1229-3448-8d81-30a2059e41a0.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:76:fe:8c:a1:5f:4a:83:a2:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b27c57d7-707e-467d-8777-6abbb7b9a0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:36:51:79:29:b6:51:de:ef:ff:1b:fd:bf:4f:
                    24:31:08:f4:7d:c0:df:dc:99:28:e9:fb:46:4e:2c:
                    7d:0e:a9:b1:5b:2b:e5:e2:2a:9f:2e:9a:bb:ae:00:
                    6e:60:52:c0:b4:2c:db:37:61:14:f5:4c:47:f1:e1:
                    77:19:e5:1f:dd:f6:40:77:f0:9a:35:19:83:39:ac:
                    24:9a:16:c3:62:2a:90:66:fb:97:33:08:a5:c6:67:
                    bd:62:24:28:84:0e:24:78:78:10:57:45:f9:d9:a1:
                    31:98:79:5f:21:ec:67:c3:0f:08:59:fb:0a:fc:ce:
                    96:6c:b3:78:4e:a1:91:95:ef:68:5c:28:59:d1:a6:
                    db:d1:0d:b3:7e:5f:72:f3:43:c1:41:63:81:63:72:
                    57:db:fc:f0:95:e9:bc:62:08:90:b1:0c:fb:16:69:
                    5b:7b:52:e2:e1:6f:4b:52:c9:86:63:c6:0b:f8:af:
                    bf:fc:e5:0d:92:91:7b:81:0a:e0:58:c4:fd:ce:5e:
                    6c:56:7d:9a:93:dd:2c:ee:09:da:4c:65:3b:f7:cb:
                    01:d7:2c:dd:50:73:bf:fa:43:03:61:b7:86:ae:11:
                    9a:78:0b:1c:e9:b7:0b:d8:b3:46:89:05:2e:b9:16:
                    b0:e8:69:8d:f3:39:01:09:db:48:31:c6:8d:62:03:
                    d6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E7:F2:E5:8C:02:74:7F:4D:40:CE:DF:BB:18:9E:E0:DC:6C:30:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1874d847-1229-3448-8d81-30a2059e41a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1f:fd:b4:e0:cb:54:2d:77:0f:72:2b:74:32:45:e6:8e:13:
         ce:ad:9b:94:33:d8:d9:ed:c3:90:99:e7:d3:29:9f:8f:d1:18:
         64:ae:15:06:06:e8:e2:10:96:91:8e:9d:bf:8f:58:b8:b5:81:
         00:2e:a7:41:92:c2:a7:f8:e3:42:40:a3:c2:97:35:0d:2b:d8:
         3b:3d:14:5d:55:92:4b:9c:7b:bd:e5:e2:5e:f5:bb:9e:b7:1c:
         77:d2:4a:ea:45:4f:cf:43:56:81:49:f1:9c:36:47:84:29:1c:
         1a:b9:f5:e2:62:a3:af:3d:b9:5b:6d:6d:01:11:61:0e:a4:f1:
         92:19:52:7b:d3:f6:4a:03:4b:51:0f:e8:3d:20:ae:0b:32:a7:
         74:77:cb:43:41:1a:57:0d:f7:ce:d4:58:45:40:4e:79:ac:44:
         63:8b:f3:76:f5:37:ff:85:cd:38:fc:82:1c:fa:ad:d4:f3:7c:
         3f:a1:bd:0e:92:6f:ed:bd:56:13:67:dd:c6:d9:e8:da:a9:d0:
         86:4b:93:a5:24:20:62:e1:6e:5a:22:13:cd:bc:73:ff:e4:54:
         63:c9:5c:60:58:b7:a7:3a:87:e9:00:24:28:03:6a:79:f1:b2:
         43:32:48:4e:44:c1:c2:f8:7c:61:fe:7c:b3:b8:6d:c7:43:88:
         bf:00:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:39:15 2025 by rpki-client