Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/db894078-d2ff-3020-86a4-0d7c5452e065.roa
File:                     db894078-d2ff-3020-86a4-0d7c5452e065.roa (raw, json)
Hash identifier:          U6nmxyzESe3hxScSxSnGmsAQIYzf8tiC70TcWhxntTU=
Subject key identifier:   CD:D6:CD:06:3E:5C:9C:AC:62:5E:12:8C:38:1C:D4:58:D2:C9:5E:B3
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858499F24D4F48F302A3FD3934A00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/db894078-d2ff-3020-86a4-0d7c5452e065.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        136.22.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:d4:f4:8f:30:2a:3f:d3:93:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=58b7e0aa-83e5-45a4-a5aa-c0bdb050794d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:1a:36:b0:eb:f9:b0:80:44:44:2a:cb:d9:
                    ba:7b:81:c7:50:7a:72:3f:80:29:74:13:6c:f4:a6:
                    ab:2f:1e:45:8f:a3:e2:7a:9e:f3:cc:ab:eb:93:a2:
                    52:d5:e4:ce:d1:0b:56:b5:ab:f7:bd:ba:7e:64:5a:
                    74:11:aa:bd:3c:ff:18:d2:8f:2e:36:82:30:0f:c1:
                    c5:4c:ad:1a:35:41:21:7d:73:5d:b9:0e:dc:c6:db:
                    0d:8d:1d:58:98:ee:8a:4e:66:e9:a4:ae:13:c9:8a:
                    6d:b9:55:e0:44:d1:53:a8:be:9f:e7:92:ea:8c:7f:
                    56:25:1a:b1:96:16:9c:ad:2a:73:6d:46:bc:cf:e9:
                    8d:6d:e7:72:93:d3:f1:3f:20:8f:83:60:e4:1e:0f:
                    05:b9:18:80:d9:56:37:e5:4f:a9:a8:b3:a6:5d:ae:
                    bf:aa:f1:68:53:bc:46:e2:de:15:d5:7c:fc:15:9e:
                    27:40:d0:dc:b7:1c:68:97:48:ce:b7:f7:b6:67:95:
                    bd:7f:54:67:76:e9:e3:ec:89:51:41:cd:60:50:b5:
                    61:92:46:eb:0a:9a:2a:eb:26:ac:e7:6c:71:80:93:
                    28:df:b2:10:c5:09:72:77:e8:41:f2:91:20:fa:90:
                    6d:fa:ed:a8:58:b2:18:99:bd:5b:ad:06:ca:f5:71:
                    43:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D6:CD:06:3E:5C:9C:AC:62:5E:12:8C:38:1C:D4:58:D2:C9:5E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/db894078-d2ff-3020-86a4-0d7c5452e065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:27:1a:3a:b4:44:46:c2:e9:f6:48:ce:b9:12:70:f2:9c:f3:
         28:c3:e9:ef:a6:7b:7d:df:b3:78:1d:ca:f9:90:bc:e4:17:18:
         42:9a:83:9b:a9:ad:93:26:89:a0:ef:41:c8:3b:33:88:85:d2:
         63:6a:08:dc:5d:ae:d4:ab:d9:fe:df:af:66:95:ac:7c:a9:34:
         8b:f6:81:e0:eb:42:6d:cc:e6:82:a6:14:b0:88:af:f0:55:61:
         54:bc:c1:69:66:d6:81:5a:5f:81:34:1d:3d:cf:2b:a3:70:41:
         cc:42:d5:fe:06:a6:2b:a4:24:7c:9b:1d:ef:40:4b:ab:d4:d0:
         9d:9f:01:ba:de:33:9a:24:bf:65:44:1d:39:00:63:35:0f:ec:
         2a:89:61:99:ce:5f:11:55:a5:9c:b8:bc:ae:60:49:7d:69:b4:
         0b:48:98:26:df:1e:a6:bd:92:f8:fa:6f:c7:e3:5c:21:5c:96:
         41:40:7f:fc:7d:68:35:fd:23:12:b6:cb:16:82:dc:28:82:fe:
         40:36:d5:f7:08:5d:29:7e:cc:5d:c6:7c:0c:4f:08:4e:af:9e:
         23:35:8c:a7:d6:93:c0:30:d7:bf:79:4a:a2:7b:de:43:bc:61:
         17:09:f9:9a:d6:33:3e:a1:83:fa:78:96:7b:94:a3:3d:f0:63:
         98:93:7a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:15:44 2025 by rpki-client