Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35f23b24-5f0f-3027-8602-f069556979a6.roa
File:                     35f23b24-5f0f-3027-8602-f069556979a6.roa (raw, json)
Hash identifier:          Wf12FwOYb6hJ2dLaiYPEU+HJ56rSsZxym2jfI4UNf90=
Subject key identifier:   48:EA:57:BF:81:45:6D:A5:68:AB:56:7E:D7:39:0B:EE:BD:93:CD:AF
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BACECFCAA4FD9606B01E40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35f23b24-5f0f-3027-8602-f069556979a6.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:ce:cf:ca:a4:fd:96:06:b0:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=524bad98-7e25-471a-88a3-b348813260dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a1:4f:bf:53:2c:f4:d8:43:9e:8f:29:c0:2a:
                    46:cf:e1:ce:a6:a3:10:b4:b3:d4:09:61:57:62:3d:
                    fa:88:63:62:0c:bb:dc:32:8b:37:73:fb:ca:c5:8c:
                    7b:e2:a9:6b:d3:0c:21:61:20:84:18:bf:09:bc:82:
                    8a:10:56:2c:ce:0c:dd:9d:eb:8a:c2:4f:65:ef:81:
                    ad:5e:ad:d2:a8:3c:df:ab:b7:47:92:a8:54:8f:25:
                    8a:13:37:2d:da:ac:ff:dd:4c:7f:b9:1c:6b:3b:e8:
                    46:ee:b5:ff:4b:1a:25:53:f5:0c:7e:1d:70:b8:91:
                    4c:a0:9f:ff:f4:22:c4:ed:d9:ad:10:8a:03:94:b5:
                    2b:bd:9c:0c:83:98:36:bc:ec:cf:f2:b4:b8:e8:84:
                    c9:46:7d:aa:5e:46:16:35:f9:c2:4f:38:03:e7:b0:
                    c0:d9:db:6f:6c:b0:cb:6c:9b:ad:62:09:da:4b:7b:
                    7e:e6:f9:0f:1a:e0:db:a8:e5:94:09:11:98:02:80:
                    5c:ad:6a:f4:67:0b:63:b4:9a:9c:91:7e:33:62:dd:
                    94:99:81:3e:43:cf:18:4a:64:29:fe:c2:c8:ca:dd:
                    ef:3f:bb:5d:f3:5d:32:78:6d:90:27:4d:f4:12:59:
                    4a:fa:30:b5:d4:b2:32:36:f9:89:e2:ec:45:a0:66:
                    33:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EA:57:BF:81:45:6D:A5:68:AB:56:7E:D7:39:0B:EE:BD:93:CD:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35f23b24-5f0f-3027-8602-f069556979a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ec:ed:43:1d:2a:9e:fd:1b:95:6b:22:57:5f:c6:07:7f:45:
         4e:95:01:f6:a1:71:b7:10:5b:86:31:96:bf:e5:e5:dd:c8:f4:
         df:f7:b6:16:89:40:e6:f3:fc:9e:88:70:f5:32:aa:af:f8:01:
         88:44:98:d9:bf:9c:34:c4:cb:58:67:a5:44:c5:97:2d:2b:a0:
         f4:8c:78:b3:8d:e4:9f:7c:1d:26:49:7e:b6:a9:75:2f:5f:eb:
         73:47:d3:f6:0d:c1:bb:bc:48:18:20:96:f7:60:0a:85:c0:dd:
         af:c3:12:a5:ae:55:6a:d7:ce:9b:94:0c:e7:78:a5:ba:0b:c1:
         61:7f:c3:fa:c9:a2:50:0f:81:94:18:52:e8:fe:1d:26:58:85:
         1a:9d:1b:66:21:db:b6:44:0d:9c:b7:59:92:44:83:74:3e:98:
         b2:e3:0b:ea:56:0e:00:27:f9:c3:bf:6e:12:8d:9c:e3:7a:80:
         5b:15:27:8c:59:f1:9b:79:c7:cf:2c:f3:86:74:35:10:c9:cb:
         c5:4f:6f:4b:20:db:12:40:f0:48:ba:47:15:2d:08:57:6b:77:
         f6:06:96:b8:0a:40:78:b5:4e:7c:09:a9:73:87:31:31:fb:0c:
         45:8f:69:8c:61:9f:ab:69:18:d5:9b:60:15:a8:97:2d:5e:c3:
         a6:60:e2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:35:22 2025 by rpki-client