Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bc96c6ca-8690-3363-938c-5b04183f6c29.roa
File:                     bc96c6ca-8690-3363-938c-5b04183f6c29.roa (raw, json)
Hash identifier:          2cLg0r/R4gumJxJKjXeZ/wkohNPJ1hvkykYO+TBhkcU=
Subject key identifier:   EF:B8:50:FF:64:87:53:32:17:9E:BA:AA:1B:B9:8D:B3:5E:23:AD:BE
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858499F24CA111026BFC49DA3F780
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bc96c6ca-8690-3363-938c-5b04183f6c29.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        136.22.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:ca:11:10:26:bf:c4:9d:a3:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=45da9927-cc13-4aa0-a50d-5e604f131030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:6c:6a:3b:25:70:de:5a:96:77:7e:fa:5b:
                    e4:c2:d6:79:f7:00:06:c0:80:fd:41:52:f6:9d:4f:
                    08:3a:32:4e:d5:36:eb:66:23:e0:bf:ed:38:23:f7:
                    f9:39:3a:0b:96:29:2f:94:32:c8:f5:8c:8d:e8:02:
                    ad:4f:77:c7:1c:3f:fd:0d:39:98:6f:1a:49:2d:af:
                    b0:0f:c3:aa:a3:6f:1b:7d:7a:98:7c:62:34:2a:12:
                    62:4f:0a:fc:89:86:54:0a:1a:fc:49:94:07:b7:f0:
                    9f:d7:d8:b2:c8:f1:4c:77:ed:59:94:09:c0:b2:f4:
                    64:a0:9b:34:f3:f1:06:b7:b5:a0:4b:5e:11:88:b3:
                    50:29:62:fa:e7:02:fc:21:a2:2e:2d:0f:6d:5f:66:
                    e6:2c:18:1d:8b:e5:b5:5e:f1:d0:a6:b0:6d:16:63:
                    fa:e2:e2:66:24:ce:9e:ec:47:84:78:17:ee:dc:fe:
                    c9:9f:a4:1c:cd:25:a8:e6:d0:25:d3:cb:51:a6:f8:
                    d4:06:26:14:5a:6d:15:7d:fc:bd:ea:67:bb:74:08:
                    e4:f5:f3:0a:2a:21:a6:38:c7:e8:d1:d2:9b:f4:e9:
                    9d:d9:41:14:c4:91:35:cf:48:64:90:ba:91:8e:2c:
                    0d:40:df:cc:0d:25:f6:58:39:49:c2:eb:78:b9:c7:
                    71:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B8:50:FF:64:87:53:32:17:9E:BA:AA:1B:B9:8D:B3:5E:23:AD:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bc96c6ca-8690-3363-938c-5b04183f6c29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e6:c6:6e:4c:4b:b1:25:ae:b7:50:22:82:51:c0:74:6b:f1:
         90:17:54:55:c1:24:d9:e8:6e:3a:71:4d:50:96:c5:cc:62:40:
         a5:9e:53:88:2d:90:8a:9b:61:a5:0d:b2:95:88:60:ee:d3:13:
         6a:76:a1:9a:cb:c6:84:bc:2b:d2:9d:8d:29:38:b8:a1:49:40:
         7d:ec:7d:0b:83:60:a2:7d:16:22:a6:ac:1d:5b:4a:11:6b:04:
         88:e0:39:7b:91:4f:63:0b:19:97:97:06:ee:07:15:16:74:0c:
         21:17:e3:a0:eb:85:a0:79:8a:70:8a:6c:61:16:c0:da:17:1f:
         a5:7a:55:41:f7:b6:91:ed:17:aa:c1:31:a7:72:45:84:cd:4f:
         e9:a9:9e:37:3e:29:13:b7:d3:1c:c5:4d:5e:60:6c:39:5d:52:
         53:66:63:3e:4c:79:58:01:52:01:4c:bd:8c:f5:fd:f2:70:18:
         11:86:32:fd:3c:3f:cc:09:40:0c:d6:fd:fe:91:e8:a4:4b:88:
         22:49:0b:cb:49:b5:6b:00:71:25:24:9f:2c:83:b0:95:41:c3:
         89:0a:e3:6e:e7:e4:55:74:7a:43:e4:6e:91:c7:2c:1d:91:47:
         c2:c8:a1:33:87:fd:b3:2b:86:08:a0:79:60:f5:c2:7c:84:6e:
         bc:20:25:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:53 2025 by rpki-client