Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa
File:                     4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa (raw, json)
Hash identifier:          e6WrjtoIhghvmw+8QgMcN1e82nO3L137sCDcDpHABKg=
Subject key identifier:   3E:90:74:3F:D7:7A:C9:B7:83:56:8E:AC:AF:10:8B:1A:29:1C:0D:45
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858499F24CC82A7249CC7E1755F00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        136.22.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:cc:82:a7:24:9c:c7:e1:75:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=a07073cc-aa99-4c41-be93-0e9c153fb871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:4b:53:a5:13:00:f9:e1:50:1b:00:0d:56:
                    e5:91:d8:14:b7:24:7b:17:61:8b:35:c8:d6:4b:7a:
                    b4:2f:cc:03:4e:a3:fa:58:be:5e:8e:27:11:35:43:
                    72:0c:6f:ad:35:6c:2b:ee:2f:08:19:ff:36:65:42:
                    95:f5:c9:91:e9:9b:1b:23:25:63:f8:ca:92:07:e6:
                    a8:58:51:46:01:b3:4c:d9:c1:4b:b9:89:e8:41:e5:
                    cc:cb:91:12:b8:d3:71:d4:09:95:da:17:1a:da:70:
                    c9:de:e7:89:59:ec:58:ab:20:45:3e:bd:17:71:47:
                    87:0e:b4:06:cb:5a:ff:ca:08:b0:96:cf:9f:94:82:
                    fc:f3:d2:c0:f8:44:05:86:66:5e:65:89:98:69:04:
                    bc:1c:57:a5:83:e0:74:1a:b8:75:74:99:20:c2:5c:
                    e7:eb:f9:bc:a5:36:d6:34:26:83:28:60:c2:cd:07:
                    bf:42:51:fa:17:4c:04:7e:70:c3:09:2e:56:ab:ed:
                    e1:3f:c8:48:64:73:ab:7c:39:ab:f0:0f:aa:05:aa:
                    c5:13:06:6c:8a:ec:66:d3:38:ae:fc:d7:e2:7d:37:
                    d3:43:b1:6b:0a:91:7d:65:e9:fa:3b:79:65:c4:41:
                    17:4d:1e:60:18:b2:24:03:e5:ae:14:cc:2c:94:8c:
                    63:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:90:74:3F:D7:7A:C9:B7:83:56:8E:AC:AF:10:8B:1A:29:1C:0D:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4e35a921-4bcc-32c5-80bf-bb820a10e9a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:cb:4c:27:20:d7:80:69:f7:30:5d:22:b6:a5:1c:1d:2a:c7:
         e0:18:b8:4c:bd:13:60:c0:56:36:84:56:06:d6:7d:d7:4f:26:
         9d:4c:33:58:2f:a5:ce:03:46:3e:bf:68:50:6b:d2:fe:ab:e2:
         17:57:03:24:23:f3:63:fc:02:42:30:d5:1f:e3:73:e7:f0:c3:
         e6:cf:cc:7d:ff:58:e7:d1:5c:d0:ef:5c:87:94:ed:e8:9b:66:
         eb:c2:33:da:b1:4b:c4:55:d5:6d:2a:a7:59:01:69:91:4e:aa:
         9f:b3:e2:11:1d:3b:fd:92:41:26:fc:44:41:35:03:b2:7b:93:
         76:64:e9:93:d4:e6:19:0b:1b:bf:ff:5d:37:f4:18:42:a4:86:
         e9:f3:22:52:ea:ff:18:59:59:48:2d:60:6f:14:5b:4b:ca:7c:
         e9:3b:4c:17:97:d7:e8:8c:7f:39:03:1d:43:ea:cc:be:c4:6b:
         4e:46:6a:be:6b:91:76:18:9a:b2:f1:6b:91:bb:ca:bb:d1:68:
         69:d6:2a:a5:55:46:41:75:0d:2c:cd:f8:65:43:67:a0:4a:6e:
         3d:03:eb:14:70:d0:18:db:8b:a3:43:3d:a8:b7:5c:1b:a8:e9:
         60:f7:b9:29:5f:8a:42:3b:a9:d5:f0:86:90:13:1b:f5:4e:08:
         bf:d3:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:25:05 2025 by rpki-client