Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa
File:                     53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa (raw, json)
Hash identifier:          dJ3LeecuG3JRBcIYSiZQDKUyYgfeGj1pdkYt6frNqA4=
Subject key identifier:   D5:E7:CD:0E:6F:AB:CF:D1:96:66:E1:B0:E8:2F:18:5D:A5:1A:F6:4E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BAD1C8641117FE7B48E480
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:d1:c8:64:11:17:fe:7b:48:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=d34a13cf-d1c7-484c-acfa-b696d4e17b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:e2:37:27:73:81:28:3b:4f:f1:29:bb:53:
                    52:63:ce:4b:a8:6c:72:cc:f3:7b:a2:91:d6:9a:d4:
                    1c:20:13:d9:0f:d0:29:de:50:ce:4e:ae:cb:bd:50:
                    f2:19:58:07:8e:92:08:55:91:94:d1:02:86:55:1e:
                    6c:25:66:56:cf:80:e7:d3:32:c8:6f:20:5a:96:dc:
                    9f:9d:ed:8e:b6:57:91:c7:bb:3d:33:6e:76:05:82:
                    d9:5f:e6:25:1c:50:1c:46:07:ad:a5:af:f8:ad:6d:
                    32:0e:2f:0c:5a:76:d6:7d:6a:d4:ec:f4:d6:f5:de:
                    56:88:a0:9d:14:58:9f:26:3c:0b:6b:d1:ac:71:58:
                    60:e2:11:49:a9:b1:53:3d:f1:79:9f:e6:31:3e:de:
                    1b:bf:24:3b:62:af:be:af:1c:c7:71:61:2b:c9:5f:
                    03:bb:7b:89:74:c0:e3:36:21:c8:ff:d0:ed:b6:a3:
                    bd:f6:19:d8:4e:40:a1:07:c8:be:dd:c0:18:96:2f:
                    96:d9:95:06:6d:94:3a:c2:10:53:3a:8c:a6:1c:eb:
                    5e:d6:9a:d6:8a:0e:ed:4f:c4:17:90:a2:4f:5b:9e:
                    0b:05:66:e8:96:31:a9:dc:eb:76:e6:13:a9:2a:a4:
                    40:b2:dc:0f:65:b1:56:60:1f:33:e2:35:b6:e8:09:
                    c4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E7:CD:0E:6F:AB:CF:D1:96:66:E1:B0:E8:2F:18:5D:A5:1A:F6:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e6:91:a6:85:c9:b2:f7:8a:be:50:85:be:e9:4d:6c:a5:c2:
         3d:88:f1:21:ac:fc:2f:f2:a0:d5:2d:10:a7:e6:5d:ec:1b:52:
         cc:10:16:d1:e1:8d:88:45:dd:6c:d1:4b:56:65:1f:51:a2:e3:
         38:d3:cf:1e:14:e6:d4:c1:af:dd:89:3b:9f:4a:ed:b5:86:be:
         95:52:c7:9b:fa:ec:c3:e9:b9:5d:aa:89:bf:18:fe:c6:3c:a0:
         06:32:a9:0c:47:b6:7f:15:06:e8:e5:f5:08:8d:55:5b:2d:28:
         b6:a9:9a:22:7d:61:26:ea:0e:4e:fd:6d:20:31:0d:94:63:87:
         a1:1c:19:8f:e7:e0:0b:02:ae:c4:75:92:e1:ef:70:b4:68:c1:
         3b:d9:5e:bd:00:e9:8b:cf:7f:60:ba:fa:dd:30:92:f4:e9:15:
         39:87:bb:d8:0e:c2:5b:36:45:a3:ac:1e:ec:c8:c8:98:6d:74:
         cb:a0:13:00:e8:d4:8e:16:3d:14:a9:a7:7b:f2:e8:4e:a1:94:
         e2:06:dd:d6:ea:a4:68:e9:08:de:90:d5:91:9a:6b:c2:65:46:
         01:ac:86:b5:0e:7d:f3:64:f3:82:f0:46:4b:23:40:9c:9c:d8:
         c0:3b:6a:3b:d0:04:b9:ee:4b:21:ef:01:1b:21:e6:07:5d:c0:
         d5:ed:fe:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutHIZBEX/ntI5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ZDM0YTEzY2YtZDFjNy00ODRjLWFjZmEtYjY5NmQ0ZTE3YjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEviNydzgSg7T/Epu1NSY85LqGxyzPN7opHW
mtQcIBPZD9Ap3lDOTq7LvVDyGVgHjpIIVZGU0QKGVR5sJWZWz4Dn0zLIbyBaltyf
ne2OtleRx7s9M252BYLZX+YlHFAcRgetpa/4rW0yDi8MWnbWfWrU7PTW9d5WiKCd
FFifJjwLa9GscVhg4hFJqbFTPfF5n+YxPt4bvyQ7Yq++rxzHcWEryV8Du3uJdMDj
NiHI/9DttqO99hnYTkChB8i+3cAYli+W2ZUGbZQ6whBTOoymHOte1prWig7tT8QX
kKJPW54LBWboljGp3Ot25hOpKqRAstwPZbFWYB8z4jW26AnETQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNXnzQ5vq8/RlmbhsOgvGF2lGvZOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNTNhODIyMGEtN2YyNy0z
NmQxLWE3YWQtYjdiZDhlYjM0NWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACXmkaaFybL3ir5Qhb7pTWylwj2I8SGs/C/yoNUtEKfmXewbUswQFtHh
jYhF3WzRS1ZlH1Gi4zjTzx4U5tTBr92JO59K7bWGvpVSx5v67MPpuV2qib8Y/sY8
oAYyqQxHtn8VBujl9QiNVVstKLapmiJ9YSbqDk79bSAxDZRjh6EcGY/n4AsCrsR1
kuHvcLRowTvZXr0A6YvPf2C6+t0wkvTpFTmHu9gOwls2RaOsHuzIyJhtdMugEwDo
1I4WPRSpp3vy6E6hlOIG3dbqpGjpCN6Q1ZGaa8JlRgGshrUOffNk84LwRksjQJyc
2MA7ajvQBLnuSyHvARsh5gddwNXt/og=
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:01:55 2025 by rpki-client