Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa
File:                     35407d11-6502-35d8-b8f0-6eecfea064d3.roa (raw, json)
Hash identifier:          80Yd9vx3g+MP8HycEAwJxSsZ8syx5ozksrXUFyWij48=
Subject key identifier:   93:A1:91:E4:A6:00:52:23:EE:5D:BB:BC:F6:2A:49:9C:00:93:2B:24
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BB74A9AC8791A828EC4B80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:74:a9:ac:87:91:a8:28:ec:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=8e570835-7188-40b6-8ddd-4513879e2def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:d1:15:fd:56:e7:c6:44:d3:66:e5:79:2e:
                    59:26:7d:a2:55:44:d8:d7:82:15:89:2e:4b:b6:ff:
                    d1:39:a7:9f:61:f8:27:00:61:a8:3d:b7:ba:b1:08:
                    d8:6a:8b:7d:a1:1b:95:cf:19:13:f5:9f:22:ee:35:
                    e7:f8:be:67:ef:d1:28:0d:cf:9a:72:2e:ef:16:36:
                    e1:f3:d1:5d:f9:c7:9b:74:4c:87:c2:d2:df:e5:5f:
                    e5:72:39:a2:62:d5:3a:8d:04:2e:53:71:11:96:d2:
                    05:43:90:c9:91:94:10:9a:fd:a4:53:6c:0b:c7:7c:
                    9b:bb:78:4c:65:78:55:fb:08:14:11:0d:81:45:d5:
                    1e:a9:f2:ef:de:a8:c7:fd:4f:10:b1:71:40:6f:c9:
                    88:a4:0d:c8:56:9d:aa:cb:0e:1a:c4:26:f5:54:38:
                    cf:49:06:35:a0:38:d8:23:77:ae:4b:bc:e5:f6:15:
                    86:dd:d6:dc:34:06:a5:8a:d5:b0:07:ad:1b:3d:40:
                    7c:8b:da:f5:8e:a6:6a:b4:f0:8a:05:25:25:ca:aa:
                    6e:74:64:f6:ea:f1:6b:84:3a:82:e2:58:f7:9e:50:
                    6e:47:d1:30:ed:5e:b1:6f:d9:e2:7a:2c:45:05:09:
                    1a:4b:60:e0:22:8d:2c:22:9d:35:6a:a0:a2:20:b5:
                    ff:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A1:91:E4:A6:00:52:23:EE:5D:BB:BC:F6:2A:49:9C:00:93:2B:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f5:83:11:ae:66:3c:f4:6e:00:57:8f:a5:ec:0e:cf:62:0b:
         e5:bd:c3:d4:4b:74:3f:0b:c2:9b:4e:06:38:67:51:84:13:e6:
         4f:58:f1:a5:e3:48:7c:e4:da:b5:5b:8f:68:85:78:b6:31:11:
         8a:13:89:e6:c7:4e:12:1e:72:6a:e5:d4:e8:f6:cb:6e:ba:0d:
         9b:cd:bc:4d:ec:a3:e3:b7:db:76:7f:df:4b:28:4f:4f:1e:ca:
         92:0a:65:6b:3d:0c:99:da:a8:91:d0:15:35:79:f9:23:c3:dc:
         2e:64:16:d4:1e:37:40:95:c0:a4:e2:b9:68:0e:53:cb:4d:28:
         60:b5:fe:e9:36:04:52:8e:42:fb:f4:a6:c8:37:7b:06:83:76:
         e9:0a:8c:f6:8e:cc:0b:ca:dd:47:e2:7e:47:64:8a:3d:c6:d1:
         7c:a4:2a:1a:12:e4:0f:04:32:9d:31:8c:11:6e:80:12:d2:76:
         f2:1f:8e:e7:91:c8:02:e6:3a:cb:5b:c8:37:4b:f4:d5:6e:75:
         74:a2:c9:7e:08:96:c8:60:b6:40:06:46:d5:7d:aa:ac:79:e6:
         64:96:c0:50:4f:f8:6a:13:84:f3:8c:a0:d7:24:d5:da:de:54:
         c8:07:06:53:08:11:1c:c3:ea:23:41:78:e9:21:0f:77:33:b9:
         ba:8b:13:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:07:54 2025 by rpki-client