Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/61a53849-faa2-35a8-a44f-39748123203a.roa
File:                     61a53849-faa2-35a8-a44f-39748123203a.roa (raw, json)
Hash identifier:          MrCQbepsX0i1cJPZzLbKBI3vbM7YyUGIakrJfMSQtZs=
Subject key identifier:   05:F4:85:DE:21:2C:9A:5B:06:66:4A:49:CE:8E:E1:00:28:01:CC:1A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858499F24B40F00C07C4318E50400
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/61a53849-faa2-35a8-a44f-39748123203a.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        136.22.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:b4:0f:00:c0:7c:43:18:e5:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=7b6715da-0d47-4538-84e4-cedd4656b53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ff:31:d2:c9:f5:22:16:64:2c:d7:44:df:4a:
                    b8:cd:f2:af:74:04:0c:5f:d7:15:74:c4:8d:51:cc:
                    ab:bc:15:1d:99:20:85:dd:0d:60:d6:75:95:aa:3a:
                    09:b1:9d:c0:09:be:2d:7a:e0:5c:12:b9:9a:8b:7d:
                    6c:d6:3e:82:ed:75:bb:fe:d9:8e:12:29:d8:cf:55:
                    be:2f:92:d5:f7:56:1f:fd:af:ec:0c:b6:a9:7e:fa:
                    cb:dc:65:7d:e8:c2:cb:6b:1c:d6:5c:35:00:76:db:
                    c9:99:ed:ef:c3:58:e5:b9:8d:6c:d4:91:89:43:a0:
                    0f:e9:49:1d:bd:92:9d:f5:56:e2:d6:8e:c2:67:d8:
                    c6:c2:e9:0d:d0:75:18:3f:5f:81:4c:2b:ac:a0:87:
                    38:bf:32:47:fa:5d:1e:93:cc:79:8c:e5:ad:e6:2e:
                    71:93:25:d1:b3:d8:7a:a4:a8:96:61:23:56:55:f7:
                    07:8a:76:fd:bf:ac:f9:41:2f:b2:39:6d:c1:68:9e:
                    8a:61:59:ae:52:77:78:10:47:7d:65:b3:fe:21:a2:
                    5f:cc:6e:74:a1:36:0b:ce:be:63:8c:ac:3f:57:68:
                    3e:d8:ba:92:11:51:18:72:79:2e:24:19:24:8e:1a:
                    9f:c6:1c:52:d5:98:47:f3:bf:24:8d:d5:ae:14:a2:
                    15:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F4:85:DE:21:2C:9A:5B:06:66:4A:49:CE:8E:E1:00:28:01:CC:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/61a53849-faa2-35a8-a44f-39748123203a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:d2:de:de:3a:ea:6d:b6:e1:5c:6a:b1:2c:1b:8f:89:d0:fc:
         27:30:9d:6e:d8:56:e4:ae:72:1d:7e:cc:b5:94:be:10:25:4e:
         fb:b4:bc:d6:5d:89:52:1b:a6:99:93:11:50:1e:dd:07:0d:b7:
         29:5e:0e:a8:3a:3c:a4:44:f1:ff:c9:cb:7b:aa:ba:6a:af:7c:
         71:82:b1:ca:00:62:ab:d2:10:26:70:35:cf:ec:1b:27:24:a0:
         f6:ce:ee:10:49:f8:58:31:f0:c2:aa:b1:d0:e7:1d:16:41:7a:
         3f:ae:98:fe:dd:cc:dd:f1:91:b1:cb:2b:49:67:15:1e:78:04:
         30:4c:93:50:9c:f3:f3:13:93:6b:b0:4b:bc:ce:30:2f:ba:42:
         39:aa:d7:55:6a:0a:7d:96:ee:fc:06:9c:e8:20:0e:03:ed:40:
         14:fc:84:3f:4f:46:9f:8c:b3:2e:21:09:2f:75:81:c0:2c:3c:
         73:7f:28:63:0d:cd:70:9f:50:6e:73:2e:63:57:60:82:09:27:
         1f:cd:0f:a5:43:67:be:26:ee:e4:76:1b:ab:a2:9b:a7:57:20:
         86:cc:7a:cf:89:10:f0:69:a1:1a:3a:a2:83:3f:1d:d8:91:f6:
         75:73:b4:f9:64:b9:c5:8c:2d:bb:84:83:91:70:2d:bf:37:96:
         48:43:99:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:47:21 2025 by rpki-client