Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a23c1084-2fa5-3c76-b053-1275e9e36346.roa
File:                     a23c1084-2fa5-3c76-b053-1275e9e36346.roa (raw, json)
Hash identifier:          D5HJlHZsGl4CnccJhUxErQdSJ33YDusKaQLgJMbrbfU=
Subject key identifier:   FF:C6:3E:C3:F6:FD:EC:29:16:FE:F5:06:69:0D:37:C8:3A:0D:8C:9D
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285849A4BB654A97048C277347E400
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a23c1084-2fa5-3c76-b053-1275e9e36346.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        136.22.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:65:4a:97:04:8c:27:73:47:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=db7445d8-33bd-4286-9147-bc28be6b2a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:c5:cc:03:b3:8c:cb:4d:7e:76:bc:6b:ba:
                    bc:7a:26:5c:20:8f:18:8c:40:5a:1e:8e:c9:92:14:
                    6c:8c:0e:3e:22:46:09:46:dc:4c:44:bb:a8:d3:46:
                    b7:4a:31:ad:22:ce:97:52:dd:0a:f2:bc:f0:55:86:
                    00:1c:0f:d8:77:43:ef:a9:49:19:50:16:5d:b5:33:
                    33:28:a4:54:9c:ff:fd:b1:83:74:56:fb:b3:6a:f5:
                    e8:32:cc:d2:58:ae:33:68:63:e5:6d:07:8b:1a:a2:
                    c9:30:7f:48:c2:20:a6:13:51:10:db:fc:c1:11:6d:
                    02:00:e2:f9:91:9d:05:34:d4:ec:c1:d3:c8:0d:9c:
                    76:3f:d4:e2:5a:d3:f8:0b:10:be:63:94:fd:c4:6d:
                    43:13:ab:cf:51:93:f4:ea:78:d5:37:72:f1:b3:85:
                    03:61:fb:26:f9:0d:80:ea:4f:b5:14:30:97:a2:95:
                    be:3c:ba:b7:37:91:af:03:e4:60:10:53:1f:4a:5f:
                    c3:7c:bc:51:41:ba:a5:3d:e6:ce:1d:db:83:38:21:
                    d1:3e:b9:fb:26:16:4a:05:e1:af:8c:28:d2:6f:5b:
                    87:56:09:23:b7:ab:08:49:6e:59:aa:87:53:d8:ef:
                    96:b6:d1:81:ec:42:a6:61:cf:dc:64:51:df:fd:e5:
                    c1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C6:3E:C3:F6:FD:EC:29:16:FE:F5:06:69:0D:37:C8:3A:0D:8C:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/a23c1084-2fa5-3c76-b053-1275e9e36346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:3f:1d:2a:2d:95:c0:ba:51:d8:25:f4:5b:34:4f:50:32:38:
         23:03:7a:62:85:ca:76:e0:44:1b:e4:31:e2:4d:6e:7d:3f:b5:
         16:7f:08:d0:31:2d:3e:64:6e:cc:18:a2:02:67:7e:52:59:5f:
         34:1f:1d:b9:35:f2:c3:b4:16:4f:03:00:62:38:40:53:74:84:
         67:5a:00:7a:d6:f5:6d:25:12:cf:9a:82:ab:db:c0:90:77:73:
         6c:e0:11:4a:c6:b8:d7:ce:79:4f:8d:72:57:ec:77:a6:ec:98:
         3e:1d:5d:d1:ac:9b:43:f3:8d:1b:ec:2f:40:17:a9:de:f9:58:
         7a:65:b1:0f:89:08:a4:ae:85:7e:82:5b:1a:0b:8d:b6:b3:86:
         11:38:71:c8:79:6a:06:26:82:1d:36:bb:af:bf:c3:84:2e:95:
         8c:e3:ea:d9:4a:d5:cc:f5:79:61:96:ba:33:32:4f:fb:85:78:
         ac:b8:77:af:9e:81:1f:5f:0e:cc:63:54:ca:a5:0e:7f:fe:5d:
         5b:28:2f:03:30:5e:8f:e2:4c:6d:61:75:22:30:ea:d6:76:24:
         f4:7a:61:15:80:d1:a5:90:9b:5b:e0:4a:7f:c2:7a:82:35:e7:
         e2:19:17:2d:96:96:7a:94:e7:d5:45:24:fd:ff:a4:fa:91:2c:
         1a:e2:63:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:40 2025 by rpki-client