Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/20e18d0a-156e-3bf7-9098-76d1fa863f2a.roa
File:                     20e18d0a-156e-3bf7-9098-76d1fa863f2a.roa (raw, json)
Hash identifier:          R78jA8R11mx8qSElGu3Tqsbnts56lLSgCzajHrFoaWE=
Subject key identifier:   84:81:F5:2E:B4:E9:D8:AE:64:32:56:70:B4:F4:A7:0D:5C:E0:F1:40
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BABF44C56A2FD30A6BE600
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/20e18d0a-156e-3bf7-9098-76d1fa863f2a.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:bf:44:c5:6a:2f:d3:0a:6b:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=db07e159-d8d7-4142-ab73-a134438a2eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:1f:c4:e7:9e:60:a0:4f:2e:5a:d4:03:a2:04:
                    c3:e0:7b:5b:cf:92:2c:52:4f:9e:99:12:2f:c2:59:
                    01:23:15:72:14:22:be:7f:b1:cd:b7:ad:ce:26:1b:
                    c1:c4:36:5a:71:6a:f0:71:1d:ae:37:2b:29:1c:59:
                    36:f8:de:f9:5d:97:b8:54:2d:7a:e4:c9:36:12:dd:
                    d7:26:ea:c0:67:59:33:02:2e:72:fb:b6:6e:a9:66:
                    d6:73:37:56:ba:14:ad:47:e4:bf:f5:c9:7d:e4:4d:
                    69:2f:2d:15:a5:3e:dd:c0:0c:22:6c:b4:aa:58:53:
                    be:ba:58:51:c3:c0:79:e1:8c:32:ed:65:76:1d:f6:
                    fe:bd:1e:30:80:1e:ca:31:45:ab:5e:a3:05:2a:22:
                    f0:d9:e8:4b:be:85:5a:01:d3:54:80:99:9f:0d:73:
                    32:46:9e:5c:ed:ea:83:d6:d1:96:58:ad:a9:d1:d6:
                    0b:f2:e2:98:1a:59:9b:95:29:c9:94:3d:98:7d:77:
                    ec:36:00:26:dc:71:45:e7:03:20:2d:ad:71:9b:1e:
                    5e:fe:fe:71:ad:35:18:2e:87:76:50:51:9b:74:96:
                    86:c5:61:1c:e5:ac:47:7b:9e:9d:d1:48:06:d3:69:
                    c0:57:ca:d8:9e:9b:24:43:3d:8f:82:7e:cd:d5:2f:
                    ac:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:81:F5:2E:B4:E9:D8:AE:64:32:56:70:B4:F4:A7:0D:5C:E0:F1:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/20e18d0a-156e-3bf7-9098-76d1fa863f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:49:14:31:f2:fa:59:3b:3d:fa:0d:f2:ce:a9:5a:26:89:4c:
         57:80:6b:92:fc:c0:6e:84:66:ab:22:af:36:e8:4b:67:58:c4:
         b5:7e:0f:4e:77:25:60:d8:df:75:de:67:c1:68:ba:96:51:34:
         8a:07:cb:71:97:c6:53:8e:a6:73:5b:70:72:2e:59:96:82:fa:
         8b:d3:bc:43:57:e2:bb:c1:0f:40:ab:22:47:d3:eb:f2:94:95:
         9b:c5:fd:07:dd:fc:36:72:3b:f1:67:fb:7b:d6:ff:7d:ac:74:
         4c:fb:a9:0e:c4:45:63:18:24:e6:e6:32:d4:70:79:4e:4a:df:
         2b:7c:b7:10:8a:ec:9d:b7:4b:f5:6e:de:ca:be:a8:85:47:d1:
         73:fa:2f:85:0d:c6:ca:77:74:f9:2a:4e:e0:83:57:0e:4e:1e:
         c5:5f:63:1a:99:f5:79:b8:c0:8a:f5:25:54:05:ea:04:bb:99:
         81:7c:45:3d:40:01:23:63:1f:04:98:bc:f8:66:78:3c:89:53:
         c2:48:64:ca:3d:c4:92:e7:53:29:37:33:95:e3:20:bd:bd:6f:
         1f:53:bb:94:9e:5e:f2:32:75:73:59:9f:20:3d:f2:b1:7a:a5:
         cb:7d:22:37:b0:2b:7c:79:11:bb:72:c3:23:74:0f:26:9a:18:
         bd:5e:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:43:41 2025 by rpki-client