Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2325714f-756e-34d7-8f00-0408d4f6909b.roa
File:                     2325714f-756e-34d7-8f00-0408d4f6909b.roa (raw, json)
Hash identifier:          4JRG1nUYQeOPvl3M0/zjtfYlug7j/+iUCGKyIgaN7vc=
Subject key identifier:   D8:2D:46:38:66:5F:76:30:F6:AD:B0:FD:3C:9B:54:CE:6F:22:C6:63
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BB689E36BE8E5DA2B0D000
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2325714f-756e-34d7-8f00-0408d4f6909b.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:68:9e:36:be:8e:5d:a2:b0:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=71c9bcd3-0632-42c4-801d-5207d54575d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:91:af:51:31:4a:27:ac:78:a9:0a:59:4c:8d:
                    30:4d:fa:e1:df:3a:05:7e:cc:15:8a:7a:fd:c4:2f:
                    08:26:da:7c:e9:52:cb:5b:9b:f9:43:50:f8:e6:28:
                    39:6c:e9:25:d5:d3:49:c3:b6:56:f6:f2:9b:fc:95:
                    72:af:e1:4f:71:15:1d:5e:18:f4:cc:9b:f8:28:36:
                    88:66:5b:04:20:37:5f:87:c7:5a:d7:0b:9b:f9:0f:
                    59:9f:9f:86:36:a5:ae:03:87:2d:eb:5d:3f:4d:5a:
                    70:fc:08:37:46:39:6a:13:02:28:60:d5:8b:e3:42:
                    35:4f:1e:ec:0c:7f:a5:6b:36:eb:3a:9a:4b:24:38:
                    78:fd:68:c0:af:e7:db:34:1c:98:05:e5:0a:14:f8:
                    94:19:e3:94:03:72:78:13:b2:9c:c9:d4:0b:e7:60:
                    fe:1a:49:fe:06:14:f7:90:ba:e3:c2:46:a1:b9:5f:
                    f0:de:0a:f1:77:45:2f:b1:e0:93:f6:25:4f:95:dc:
                    db:66:db:da:68:ad:55:12:62:04:cb:11:fb:2d:7f:
                    ed:86:7f:e8:a1:bd:eb:0e:9b:46:df:f6:f3:05:9e:
                    b0:83:e5:70:88:ba:c9:73:6d:bc:3c:d6:0a:65:cd:
                    78:91:3b:a3:a8:a1:2c:ee:c2:2a:05:d4:bd:67:8e:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2D:46:38:66:5F:76:30:F6:AD:B0:FD:3C:9B:54:CE:6F:22:C6:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2325714f-756e-34d7-8f00-0408d4f6909b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:03:88:95:55:4f:0e:03:8f:84:98:0b:8a:83:0e:c2:8d:55:
         a0:30:2a:cc:76:68:28:39:ed:5d:69:66:b8:c3:e0:9a:eb:67:
         fd:76:c6:65:fd:0f:0f:3f:92:fc:0d:44:85:86:98:8e:94:13:
         98:0c:c2:62:0c:95:42:50:b1:cd:96:f4:0e:1e:fe:51:60:a7:
         84:55:b2:df:c7:c9:08:1e:8d:cf:7e:5c:24:89:17:22:f8:78:
         22:9d:19:b9:22:d0:2e:88:fc:15:c8:8b:e8:d0:34:68:a6:3b:
         c7:d2:bb:fc:9e:45:3a:1f:3d:19:c3:a5:bb:e9:1b:2f:da:bd:
         d7:b3:cc:53:b9:d1:8c:1d:45:c8:ff:c9:12:df:e4:36:27:1b:
         e9:c8:c2:c2:b0:68:2b:67:be:12:45:3b:d7:6b:43:71:2f:0c:
         bd:9f:de:b5:04:0b:31:10:b2:fa:45:29:9d:29:93:36:47:00:
         23:7d:5b:c5:36:eb:f0:ac:7a:59:cd:0e:f7:3a:89:57:83:aa:
         08:fe:ca:a4:62:38:01:98:c0:9b:ab:a6:5b:b1:c0:82:23:4b:
         96:5e:f7:0a:5e:00:97:4c:c0:c0:3b:cc:f5:fb:16:77:ea:85:
         dc:0a:3e:93:e4:be:8f:7d:51:b8:46:b6:57:fb:32:5e:2c:b7:
         41:e5:48:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:51 2025 by rpki-client