Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/746989fd-af61-3ae5-9005-c1c87237fdb4.roa
File:                     746989fd-af61-3ae5-9005-c1c87237fdb4.roa (raw, json)
Hash identifier:          mQGuaevNt3ygOW95tw0w78lRcWwBdHYcKg4DFPRrtiQ=
Subject key identifier:   A5:57:EF:BC:11:F5:91:AA:41:87:91:96:FC:18:53:AE:C8:FE:F2:72
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858499F24CBDC35D894A6D402BDC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/746989fd-af61-3ae5-9005-c1c87237fdb4.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        136.22.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:cb:dc:35:d8:94:a6:d4:02:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=34354d22-f94e-46ce-9956-e8b6371e2f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:d8:a2:4e:3a:35:2d:40:da:9d:bf:3a:5f:
                    e9:d2:0a:cd:ef:24:55:3b:50:5b:7e:f0:5d:ef:20:
                    01:c8:e7:c8:46:78:5c:ec:b2:44:85:75:63:5b:fd:
                    d5:76:a9:2a:17:cf:9e:3c:f7:8b:7b:87:71:c3:07:
                    35:68:89:0f:cf:f0:96:fa:a6:67:9d:96:ef:9d:ba:
                    c0:7f:93:a5:94:6c:33:bc:f4:cc:cb:30:fb:5f:a3:
                    cf:89:7b:23:cb:9f:a1:af:99:b5:e7:cf:3f:4a:74:
                    9b:77:45:56:a4:20:71:65:25:c7:83:93:b9:2f:ea:
                    85:47:2d:6c:2a:d7:0b:02:93:d5:be:0b:45:c8:a9:
                    70:d2:2f:a7:ab:b1:07:b3:c3:70:87:62:87:2c:83:
                    30:31:25:14:62:46:f7:04:70:81:b1:ae:a1:d6:21:
                    f4:97:18:a6:a3:f8:b3:98:bf:b7:30:51:97:84:fa:
                    8f:99:49:04:77:99:22:e6:59:30:5b:42:76:15:f0:
                    b4:e0:65:94:c0:98:f6:14:95:b1:51:9c:6a:0d:58:
                    23:31:32:b5:97:1e:a6:87:ad:0d:ad:85:64:b4:50:
                    50:c1:69:63:ea:1e:91:2a:1b:ca:5a:eb:04:0f:22:
                    6a:e6:1f:84:b7:96:c6:6f:1d:d9:21:ae:fd:ab:1c:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:57:EF:BC:11:F5:91:AA:41:87:91:96:FC:18:53:AE:C8:FE:F2:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/746989fd-af61-3ae5-9005-c1c87237fdb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4a:84:12:29:f3:f0:52:4e:ed:17:97:3f:d3:11:29:57:1b:
         8e:fd:10:29:a3:b1:f6:75:86:ff:8e:e6:cb:4e:cd:3f:cf:9e:
         61:83:ed:66:b3:b6:51:f4:68:5b:c6:14:77:32:c0:6f:0b:f3:
         a7:2d:2d:ab:b9:5f:bf:e4:33:7f:aa:c9:46:5c:d5:84:16:3d:
         ce:22:bc:44:51:1b:c4:64:53:37:aa:60:ca:43:a0:c9:91:67:
         83:1f:32:65:d9:e6:1e:87:a3:c4:44:f3:f2:6f:8e:f6:be:e0:
         2c:0a:23:6d:f1:e3:0f:9d:a5:dc:ad:61:0b:e6:eb:4c:59:06:
         72:bc:62:b4:74:6a:cc:c0:5d:1b:32:ef:46:97:80:9f:22:6f:
         a8:59:96:7f:49:50:51:15:77:97:e8:3c:8b:18:6b:c0:86:7d:
         4e:92:3f:6b:92:7d:c1:56:ed:4d:94:86:f8:8b:ad:18:6e:11:
         f1:c2:1d:c1:ee:ee:b6:c4:59:57:7d:c8:f3:ed:51:83:f3:1a:
         92:c0:f2:b8:e6:cc:4d:7a:4b:f7:99:1d:75:d0:92:0d:c7:85:
         92:77:e1:1a:39:16:bd:cc:84:2e:58:ad:cc:9d:31:da:45:be:
         db:88:fc:9a:a8:02:84:5f:ef:cc:5a:b4:15:81:5b:53:97:e5:
         24:aa:dc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:15:35 2025 by rpki-client