Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/93fa23a0-0443-3255-8aec-c58e4592c0f7.roa
File:                     93fa23a0-0443-3255-8aec-c58e4592c0f7.roa (raw, json)
Hash identifier:          23mozaL3lhPYSneTIXVPdAPTEdF6rUFMlXZYDYytpgc=
Subject key identifier:   48:11:47:9F:08:C7:AB:B5:E8:06:FB:52:76:49:6D:0F:F3:DF:A8:0E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858499F24D1C9059ACBC61F98E280
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/93fa23a0-0443-3255-8aec-c58e4592c0f7.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        136.22.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:d1:c9:05:9a:cb:c6:1f:98:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=fcf69c26-46ed-4421-aec7-c8cdd7b10a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:13:8a:3e:9b:56:09:af:a8:4b:91:c5:47:94:
                    b5:9d:bb:ef:e4:11:31:f1:8c:b6:b4:31:07:fe:ac:
                    5d:a9:01:02:a7:64:fd:58:77:7a:82:77:2b:08:4a:
                    a8:2a:a7:8f:c4:54:bb:90:c8:56:9b:7a:d6:b7:32:
                    35:22:d8:38:32:e9:c6:1e:d7:18:de:a3:e8:08:19:
                    ca:fe:4b:61:58:0d:f4:0e:bd:5e:19:0e:8f:7a:49:
                    1d:17:84:a5:99:1f:d3:a3:61:8a:5a:e8:0a:c7:38:
                    50:d8:7c:cc:50:79:f8:7c:8b:2b:2e:7e:53:7a:8f:
                    31:c6:67:c9:77:47:78:df:5f:a0:33:79:b4:d8:f9:
                    cb:b9:eb:83:e6:92:a5:e5:cd:e0:dd:7e:35:f7:a4:
                    ca:ef:79:58:52:52:97:02:ff:85:15:9d:84:6b:78:
                    b8:9b:cf:c0:cf:b1:51:d0:a6:79:61:f0:6f:6a:cf:
                    e9:76:79:20:8e:16:d0:5f:1d:73:18:7b:1f:05:14:
                    bf:3a:da:3d:3e:5d:8f:ad:75:57:33:ea:db:01:d4:
                    39:61:7d:2a:9d:66:52:d0:28:16:17:ba:72:e7:4d:
                    0c:5c:65:f1:be:c9:e4:b5:fe:c3:89:c7:e7:bb:7d:
                    79:68:f6:c6:a0:bd:77:dd:bf:54:3e:59:2d:dc:d5:
                    fd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:11:47:9F:08:C7:AB:B5:E8:06:FB:52:76:49:6D:0F:F3:DF:A8:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/93fa23a0-0443-3255-8aec-c58e4592c0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:be:c8:5b:9c:7e:05:8f:94:d4:73:15:08:56:1b:17:78:f2:
         f1:15:d3:60:6d:d4:69:b9:d0:5a:2a:42:19:bd:48:77:62:27:
         bf:c3:c8:37:a1:a9:cd:be:f4:b3:41:1b:78:21:f5:fb:dd:47:
         35:47:ea:2a:e4:be:6f:94:65:0f:53:ef:ba:0c:3c:c9:26:57:
         ec:85:dd:fa:99:f5:06:89:65:ce:76:a1:a0:a1:67:12:0f:fd:
         fd:8a:19:f9:ad:40:22:8d:74:47:55:6a:ba:ab:57:63:0d:ae:
         74:e8:9a:91:4e:a5:a6:d0:8c:b7:03:ee:80:45:fa:ea:8c:34:
         b0:37:1a:f3:b0:f4:7e:cd:d8:e1:7b:7a:6c:5f:f9:1d:64:d0:
         74:fc:2c:0c:4a:d9:12:2c:1e:ac:db:59:9f:7e:5e:c3:84:c9:
         aa:f2:4e:6e:fc:17:b5:ad:3a:63:ca:ef:fe:2a:84:c1:86:9f:
         23:47:2c:01:fe:7d:60:1f:80:7c:32:be:0d:3e:a4:32:7c:8c:
         27:22:ed:90:95:48:2b:57:14:56:dd:3d:7e:a9:cf:09:c1:d9:
         e9:06:f9:a9:af:6f:56:20:45:4a:ad:74:8e:e5:4f:a9:0c:2e:
         57:7a:00:7e:65:ed:80:69:88:17:a1:3b:7d:ad:25:58:d9:bf:
         08:0d:12:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:52:16 2025 by rpki-client