Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5acfaeed-f100-3db9-a539-8672c113d070.roa
File:                     5acfaeed-f100-3db9-a539-8672c113d070.roa (raw, json)
Hash identifier:          atMHcq8GvtEy75MZpcS0XA89E4EUldj8vpC5syK1+Pk=
Subject key identifier:   C4:88:A8:09:BB:1D:95:7B:1C:46:0C:A4:7E:82:EC:66:F6:7D:78:A6
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BAC12ED28CE60C8427BA40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5acfaeed-f100-3db9-a539-8672c113d070.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:c1:2e:d2:8c:e6:0c:84:27:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=5a04dc76-50bc-4c4d-9137-c2081779a80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ec:df:48:86:3d:37:62:db:34:14:25:26:9e:
                    83:b0:c1:78:27:4b:21:0d:4d:13:4d:54:09:2e:31:
                    9a:db:d0:ce:9a:a7:c9:00:fc:99:7e:a7:ad:cc:c8:
                    cb:49:5c:1e:a4:22:fb:c5:6b:5c:44:41:df:a4:a9:
                    9c:77:90:c3:cd:71:5d:f3:59:8c:31:82:27:5c:5a:
                    40:0e:5d:31:bd:8b:86:41:4b:cf:e2:18:33:93:2e:
                    fc:38:9e:e0:6d:8d:2c:d7:2a:fb:8e:8d:55:ee:45:
                    65:46:c5:96:3b:f0:35:73:cb:cc:e9:f8:1b:b5:f6:
                    64:dc:78:1f:f9:e8:92:45:62:b6:11:cd:dc:c4:96:
                    78:f6:aa:5e:0d:e7:5a:d2:1d:e2:08:29:20:aa:8a:
                    7f:d5:b9:c3:15:93:91:c1:79:52:a6:cc:91:c3:dc:
                    2e:79:33:25:75:73:c6:d4:ce:5c:2a:a0:ea:fe:c2:
                    cc:3e:7d:a0:73:07:29:c0:ca:a1:bf:51:aa:d9:86:
                    0c:6d:85:bd:3e:48:b5:4b:5a:36:16:52:dd:9d:ce:
                    28:52:f6:40:f1:ce:e1:5e:fa:ff:5a:19:d7:c6:96:
                    f0:e8:f6:cd:67:30:7a:a3:68:be:b4:84:57:3c:a3:
                    26:e2:51:55:cd:4d:e1:82:d2:25:ee:8c:e1:6f:26:
                    de:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:88:A8:09:BB:1D:95:7B:1C:46:0C:A4:7E:82:EC:66:F6:7D:78:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5acfaeed-f100-3db9-a539-8672c113d070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d6:38:17:17:4f:b7:c9:94:db:ec:5d:a7:31:c4:15:90:84:
         86:05:2e:3c:31:3d:e6:9a:b5:fe:f5:04:f8:c2:e9:e9:06:8b:
         32:aa:f6:64:18:43:c0:44:c3:22:f2:c0:7f:5b:d5:6e:48:8c:
         38:97:2d:14:de:68:88:98:d2:08:a8:b7:3e:cd:3d:ae:e5:3b:
         31:68:31:ff:d9:28:d3:e2:03:f8:a1:cb:ca:2f:10:66:41:29:
         e5:e2:36:a5:d8:65:4c:ba:34:a6:02:b1:b1:12:df:2e:64:da:
         cd:0d:5f:62:96:4e:1f:83:eb:f3:80:9a:18:a8:7d:57:21:74:
         6a:81:57:2f:36:6a:69:79:80:63:39:b6:ed:64:b5:d1:db:0c:
         a4:ca:05:55:fc:ba:35:91:61:95:ba:36:2d:06:5e:dd:bd:3c:
         ef:a5:17:7e:c7:26:80:32:29:33:91:c7:c6:48:0a:62:e7:61:
         97:31:ae:65:ed:81:51:33:17:8d:cb:0a:8d:31:4c:1e:3b:95:
         23:32:dd:e7:d6:8a:58:a2:01:6e:18:28:17:90:e4:59:24:bc:
         45:ee:9c:46:bf:41:e3:6b:e8:95:29:29:10:6c:bd:8a:66:db:
         c5:1f:63:6d:f0:76:3f:02:4e:be:8b:a3:ea:d4:56:e3:ec:80:
         23:a8:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:52 2025 by rpki-client