Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5df49535-9880-320d-bab3-bd30631b70fc.roa
File:                     5df49535-9880-320d-bab3-bd30631b70fc.roa (raw, json)
Hash identifier:          OA9cOBv17ArU3BK99ovOYancBAk0itVL0N+yu+V/k3s=
Subject key identifier:   3E:87:94:B6:FE:22:2D:B8:9C:C4:1F:4A:E9:F8:7F:AC:3D:D3:89:00
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BB779312048500FC94B020
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5df49535-9880-320d-bab3-bd30631b70fc.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:77:93:12:04:85:00:fc:94:b0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=6e708ccc-fa05-417c-8dfb-0b2cda8cd1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3f:3d:c2:4a:20:91:5d:95:c9:0b:22:9e:b1:
                    e0:f5:58:b0:d7:6e:b4:b6:e7:77:14:b1:1d:b0:a1:
                    34:d4:77:fc:19:32:72:e6:ca:55:43:ed:56:a8:15:
                    80:c0:88:5d:91:c3:13:ef:30:07:95:9e:0a:df:b7:
                    d0:a2:ed:fa:67:b5:18:a7:ec:ed:d0:48:ec:57:86:
                    24:57:42:9c:03:3d:d8:24:eb:14:d5:d8:16:62:88:
                    d7:52:8d:ae:c8:2e:5f:9f:81:64:43:c7:a3:c1:2e:
                    ab:4b:16:9a:58:c6:80:4e:b2:48:ba:95:03:63:8a:
                    67:fc:29:1c:b8:f3:09:43:fb:60:a9:b1:d0:ca:66:
                    be:aa:bd:ec:c1:35:df:c6:7b:3e:97:ad:7b:d8:19:
                    4a:fa:ac:1a:94:ed:2d:41:87:6c:ea:70:4f:44:81:
                    91:fb:3f:af:66:d7:9d:b2:37:a8:62:c7:1e:31:ac:
                    5b:12:99:71:55:4b:f1:c7:f7:1c:e7:54:97:58:ac:
                    f2:2c:0c:f0:34:88:47:29:65:c2:40:78:8d:8e:8d:
                    aa:f3:01:06:48:b0:50:bc:6b:12:93:45:92:f5:f8:
                    fc:b4:0e:b5:25:77:00:e6:a8:3a:9e:d3:c8:97:61:
                    27:c3:92:16:1c:38:8e:24:18:ec:49:83:f3:4c:79:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:87:94:B6:FE:22:2D:B8:9C:C4:1F:4A:E9:F8:7F:AC:3D:D3:89:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5df49535-9880-320d-bab3-bd30631b70fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c2:20:47:ce:b7:eb:7e:b6:fc:0b:e6:7b:bc:cf:ed:44:6b:
         d2:47:96:e3:81:c8:00:80:0c:b7:46:eb:3e:1d:4d:12:78:75:
         51:bd:e8:9b:7e:c5:88:83:b7:d7:64:3f:cb:f6:53:ac:99:64:
         2e:f2:9a:62:dc:fa:36:5c:3b:c0:cf:28:7e:6c:50:bf:cd:35:
         eb:90:7d:35:42:db:61:99:4c:d8:9f:a6:54:c3:6b:2a:20:ba:
         ef:5f:e4:35:f3:d6:55:58:44:6d:34:f1:75:13:17:38:25:95:
         99:bc:ae:c1:48:1c:57:a3:c9:97:53:84:bb:ef:fc:85:a7:43:
         cd:7c:e0:9c:79:25:32:bb:a9:3c:22:25:b9:45:f6:08:a1:19:
         6f:9d:4e:0c:02:11:78:42:a1:88:ad:6b:d7:38:94:8e:8f:ec:
         66:c7:d7:9c:29:b1:1a:2f:b6:1d:d0:6e:0c:81:7f:7f:00:2b:
         ed:37:d4:61:01:44:bf:4a:9f:0f:88:a1:fa:7d:7c:c5:6a:56:
         c2:41:7e:27:9b:f5:f2:ab:26:f9:2b:77:76:5b:a6:95:0c:9c:
         be:e2:96:4a:59:26:73:c6:d7:fe:70:86:88:9b:96:1d:70:90:
         30:b8:35:67:55:0e:51:b9:d7:6e:d3:80:5c:8e:5d:39:11:32:
         b4:1d:d8:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3eTEgSFAPyUsCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NmU3MDhjY2MtZmEwNS00MTdjLThkZmItMGIyY2RhOGNkMWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT89wkogkV2VyQsinrHg9Viw1260tud3FLEd
sKE01Hf8GTJy5spVQ+1WqBWAwIhdkcMT7zAHlZ4K37fQou36Z7UYp+zt0EjsV4Yk
V0KcAz3YJOsU1dgWYojXUo2uyC5fn4FkQ8ejwS6rSxaaWMaATrJIupUDY4pn/Ckc
uPMJQ/tgqbHQyma+qr3swTXfxns+l6172BlK+qwalO0tQYds6nBPRIGR+z+vZted
sjeoYsceMaxbEplxVUvxx/cc51SXWKzyLAzwNIhHKWXCQHiNjo2q8wEGSLBQvGsS
k0WS9fj8tA61JXcA5qg6ntPIl2Enw5IWHDiOJBjsSYPzTHnYSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6HlLb+Ii24nMQfSun4f6w904kAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNWRmNDk1MzUtOTg4MC0z
MjBkLWJhYjMtYmQzMDYzMWI3MGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBZiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACnCIEfOt+t+tvwL5nu8z+1Ea9JHluOByACADLdG6z4dTRJ4dVG96Jt+
xYiDt9dkP8v2U6yZZC7ymmLc+jZcO8DPKH5sUL/NNeuQfTVC22GZTNifplTDayog
uu9f5DXz1lVYRG008XUTFzgllZm8rsFIHFejyZdThLvv/IWnQ8184Jx5JTK7qTwi
JblF9gihGW+dTgwCEXhCoYita9c4lI6P7GbH15wpsRovth3QbgyBf38AK+031GEB
RL9Knw+Iofp9fMVqVsJBfieb9fKrJvkrd3ZbppUMnL7ilkpZJnPG1/5whoiblh1w
kDC4NWdVDlG5127TgFyOXTkRMrQd2As=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:24:01 2025 by rpki-client