Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3fee7149-a6dd-3956-b844-7a9685dfb980.roa
File:                     3fee7149-a6dd-3956-b844-7a9685dfb980.roa (raw, json)
Hash identifier:          OH4l++EL8ahbraEKx/IvZQbNpnx6lH1OPhq7QiAvvrg=
Subject key identifier:   26:8E:08:05:F2:9F:9A:7D:49:70:0D:9E:61:25:7A:91:D6:00:37:9C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858499F24DAD2B6FAEE1D01243900
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3fee7149-a6dd-3956-b844-7a9685dfb980.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        136.22.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:da:d2:b6:fa:ee:1d:01:24:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=7f5948e5-9800-496d-b573-415c6ab7a178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:de:cc:54:cc:58:52:26:19:84:35:bc:77:4a:
                    29:d1:d0:21:3f:52:a1:24:5c:b5:82:21:f6:3b:4e:
                    2b:97:af:15:32:22:fd:f2:4f:c0:33:36:6f:0e:38:
                    34:cb:23:c0:e3:86:19:21:9c:43:0a:58:8a:d8:7a:
                    cd:f4:28:46:fd:b2:f0:11:db:e6:95:9a:d6:5c:2e:
                    de:4a:84:ba:99:63:5c:af:1e:31:a3:82:a8:f4:23:
                    dc:9a:f2:ea:33:e9:e4:10:05:e7:ff:1d:70:6f:a5:
                    d2:30:0d:fd:17:62:73:27:15:d6:61:64:cd:7d:f1:
                    35:a6:08:76:16:d1:bf:1c:aa:73:1b:e9:2f:84:28:
                    26:f7:a2:ff:8f:c5:ee:42:3a:ed:a6:32:a4:f1:50:
                    eb:17:9b:24:7e:a9:1f:0e:8b:8b:73:e6:94:f5:71:
                    83:8c:53:15:ad:ab:b4:6a:2b:c1:6c:9f:9d:48:fd:
                    9c:5e:ba:7a:0f:57:a1:b0:5d:c1:fa:80:46:be:90:
                    26:84:56:68:ed:79:50:4e:e2:37:11:58:83:00:d8:
                    b9:f0:5f:04:9d:3c:78:e7:f1:40:5f:ec:a4:8a:4a:
                    18:81:04:d1:d0:39:79:3c:a7:36:a8:b8:9c:b7:65:
                    af:fb:0b:0c:ed:b3:0f:61:54:f8:61:86:55:e3:40:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8E:08:05:F2:9F:9A:7D:49:70:0D:9E:61:25:7A:91:D6:00:37:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3fee7149-a6dd-3956-b844-7a9685dfb980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a5:75:3b:b3:53:04:3e:e8:74:2b:00:07:94:e0:44:eb:19:
         58:41:8d:1a:7f:c4:b6:f2:98:ac:6f:7d:29:ce:87:a0:6d:ee:
         d0:6f:96:95:02:1a:70:59:99:20:e4:8d:b0:86:cf:9a:a3:b0:
         1d:f7:7f:3c:11:d7:79:46:23:8f:8b:de:ea:24:9d:1a:ce:a5:
         8f:5a:0f:dc:c6:2c:0e:89:00:4a:ba:b1:be:79:1c:a1:35:0c:
         e9:f1:fb:9d:95:84:32:b3:fa:5f:8e:ae:2c:ff:ea:39:ea:52:
         31:71:66:3d:59:11:42:09:37:9d:9c:1d:a4:db:35:7a:0e:1c:
         49:1a:87:ca:60:14:94:3a:6e:cc:fe:ea:72:c8:01:0d:18:1e:
         e5:50:c9:40:2a:93:06:c5:ab:0c:27:93:d7:d1:6d:fc:44:8c:
         8c:42:af:3c:79:de:32:da:73:94:34:44:29:b4:ed:5d:2a:aa:
         9f:40:be:be:1c:9f:8e:2b:dd:a6:9e:a5:d8:9a:b2:97:ba:93:
         d1:da:a6:2e:21:a2:15:39:21:e4:cd:5d:cd:e2:34:3a:13:e6:
         18:d3:91:0b:3b:1a:1e:0b:8f:19:c9:39:5f:2c:54:09:38:5d:
         c8:5a:90:4d:60:de:38:1a:01:bf:1a:ad:4a:a8:35:e0:d6:5f:
         92:f7:8e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:23:10 2025 by rpki-client