Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7ecf1783-6f8c-3349-b7bf-1e1146be5f26.roa
File:                     7ecf1783-6f8c-3349-b7bf-1e1146be5f26.roa (raw, json)
Hash identifier:          WYJeW6JoTpbagIoNsEmzm/DUQdF+iPo43xyPgMaSxQI=
Subject key identifier:   A1:C0:1E:75:26:16:0C:E9:3F:1C:4C:0B:0F:B1:6D:03:B3:B3:9A:14
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858499F24B8442EC6343B67681C00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7ecf1783-6f8c-3349-b7bf-1e1146be5f26.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        136.22.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:b8:44:2e:c6:34:3b:67:68:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=8b417dd5-18bb-49d2-9fb6-f38c01c586df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4f:60:b3:13:eb:ff:16:57:76:f0:90:2f:ae:
                    70:9b:99:34:64:af:f9:07:77:93:62:53:3d:23:db:
                    0d:b1:10:57:34:e5:1a:59:b1:38:ff:4c:c7:16:6d:
                    d8:84:3c:79:23:16:d7:28:9c:0c:55:43:a2:b1:be:
                    0f:dd:b5:da:07:a7:b0:15:07:4b:50:aa:c5:fc:f7:
                    4c:ab:23:74:3f:7c:88:f2:df:0a:f0:cf:5b:6b:c7:
                    7e:ff:71:f5:89:2a:97:21:84:50:29:b7:fb:31:fd:
                    be:3c:84:7b:0f:37:f3:84:88:a3:1d:6c:c1:b7:e3:
                    4b:38:1c:5d:e3:a8:47:52:3d:bc:1e:7f:11:82:0a:
                    4c:43:e6:6a:f5:d0:f5:e2:61:f1:46:e1:cb:65:82:
                    f7:5b:0d:b7:7d:b9:30:85:58:30:dd:76:68:8f:d4:
                    8b:91:71:d1:30:51:f2:d7:d1:8e:66:20:59:cf:6d:
                    36:6a:a1:39:a7:cb:1a:21:49:b5:d4:43:e7:e9:12:
                    e8:d4:13:cc:15:fc:ac:f2:e4:a9:35:8e:77:68:23:
                    28:df:b1:a0:36:9e:13:99:58:f9:6f:bd:80:1c:6c:
                    67:e4:d6:72:fa:28:73:8b:3d:4c:40:b1:97:79:ce:
                    e7:96:6e:4c:af:40:ce:7c:67:d9:5d:8e:d9:8b:87:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C0:1E:75:26:16:0C:E9:3F:1C:4C:0B:0F:B1:6D:03:B3:B3:9A:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7ecf1783-6f8c-3349-b7bf-1e1146be5f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:24:64:14:9c:2d:d4:09:e6:ba:c8:ee:83:25:77:70:38:eb:
         6f:d3:04:3a:19:d8:47:0d:b9:97:00:4d:12:bc:dd:32:5a:7a:
         e4:7f:8c:98:64:e4:c5:9a:ec:e4:a0:41:d5:1c:a2:a0:71:ef:
         66:d5:35:25:0b:93:c9:0c:c5:69:38:c6:e3:a0:e8:a4:71:39:
         2d:84:3b:5b:3b:12:c9:09:a8:c8:6b:b1:2d:65:06:be:be:a5:
         02:4d:7d:d6:83:17:14:b9:9a:d0:97:50:65:a5:21:e4:17:90:
         ea:98:11:5d:d5:38:fb:17:24:16:9d:63:c0:f6:04:4d:1a:8b:
         21:98:26:5d:5b:51:f7:58:8e:40:ef:21:15:b9:01:f8:ab:28:
         e8:e6:aa:68:70:24:14:ce:f2:bf:c1:af:52:e1:a9:1a:2c:c7:
         b4:99:26:2a:80:b7:aa:e8:af:1c:ff:a3:99:a4:f7:e7:ef:6c:
         90:1e:09:60:ab:45:55:d3:cc:be:f9:06:97:e8:b6:72:12:a6:
         e4:40:35:3e:21:02:6f:44:22:1b:ee:8d:4e:93:1f:ce:44:e6:
         aa:35:a6:20:eb:eb:f3:83:a9:04:c3:36:83:77:89:4d:30:aa:
         41:18:62:33:fe:a1:42:c1:98:b3:b7:68:7f:a7:1a:84:b2:08:
         1a:93:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:04:12 2025 by rpki-client