Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/59a9d57b-4687-3a82-aa99-6cbe40465d13.roa
File:                     59a9d57b-4687-3a82-aa99-6cbe40465d13.roa (raw, json)
Hash identifier:          2nKAdVuBBfOAvtbo4o2L2mzjTB/+r7Hmi+QAw5ojJt4=
Subject key identifier:   13:B6:BF:2E:BF:AD:E1:DA:3B:24:6B:A3:E7:C4:FE:B1:46:2F:40:A7
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858499F24A860BF5EF3BB6173323C
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/59a9d57b-4687-3a82-aa99-6cbe40465d13.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36040
IP address blocks:        136.22.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:a8:60:bf:5e:f3:bb:61:73:32:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=ad2d8b62-90c2-4185-b645-60f170b55849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:36:34:bc:36:ea:88:3e:b8:e3:a3:03:d0:52:
                    0a:83:c7:9b:11:b8:d0:ee:07:24:3a:be:50:03:07:
                    90:3b:3d:3f:30:74:98:86:55:7a:5e:d4:3e:f1:d0:
                    91:9a:b4:33:5d:a0:22:36:51:14:37:7c:5c:61:3a:
                    5b:f7:47:be:6d:26:3d:ef:9b:11:cc:37:c0:b8:3a:
                    34:0a:24:eb:fc:f7:f9:63:97:b9:53:f3:95:4e:53:
                    59:0d:ff:f8:d2:6c:5e:29:82:0d:26:0d:08:96:17:
                    a0:b0:bc:88:f9:e4:91:c5:d5:8a:86:10:04:bb:82:
                    c8:c3:b4:d8:7a:a7:ee:a0:7e:8b:85:b2:29:69:ea:
                    17:c0:5f:d8:c3:9e:d5:3a:2f:77:25:1b:d9:ce:8d:
                    cd:e2:c8:2e:59:64:d7:f4:8d:ec:bb:01:ef:40:8f:
                    11:a8:d6:bc:07:45:06:35:f5:ce:ae:de:12:ef:ef:
                    f3:a7:df:e9:38:87:91:b2:57:c3:e4:f0:43:f8:40:
                    55:f9:88:6b:fc:3a:2e:0d:8d:76:dd:7c:6f:01:a8:
                    44:de:e6:a3:9b:e0:37:3e:de:8f:ac:ee:39:ae:d4:
                    6a:5e:94:17:4d:98:fa:f6:33:1c:77:44:97:3e:07:
                    b5:38:47:7f:5b:33:58:49:ca:1d:25:d4:af:81:aa:
                    2b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B6:BF:2E:BF:AD:E1:DA:3B:24:6B:A3:E7:C4:FE:B1:46:2F:40:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/59a9d57b-4687-3a82-aa99-6cbe40465d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6c:7a:00:8f:2f:df:2d:9e:98:aa:6d:62:c8:70:0d:c8:c3:
         e1:38:e0:d4:18:21:df:11:c5:9e:55:b3:86:c3:ed:3d:11:0e:
         1b:47:69:fd:fa:8d:70:b9:5d:ac:63:ea:28:84:a2:d5:f0:ab:
         cb:55:62:2a:9f:14:ce:3a:26:e8:cb:0f:ad:2f:eb:29:98:c9:
         7f:32:a7:9e:68:1b:d5:13:23:39:38:37:68:da:2a:31:df:9c:
         c9:d8:62:02:1a:fd:e8:31:14:56:56:ff:0f:f2:a7:d3:c2:7b:
         39:79:d8:bd:aa:52:87:4e:34:01:a2:19:7e:28:8a:01:d9:09:
         53:bd:b5:74:96:c0:e6:2c:61:f9:e5:56:87:50:58:f9:ae:c5:
         fd:db:12:9d:7b:14:fc:0d:eb:1e:e2:d9:d7:a8:9d:ac:d1:a4:
         7e:8c:f1:8c:84:9c:9e:c8:9c:fa:6c:00:c8:eb:4a:d3:e9:ad:
         08:69:66:25:0d:7c:65:80:3a:15:c0:24:eb:b5:75:b6:8e:c9:
         6e:1d:32:52:d7:ff:88:c4:0a:4b:b2:04:91:bb:91:8e:c9:f4:
         8f:4b:45:3d:6f:6b:56:9b:8f:62:6a:fc:3e:be:96:43:16:d1:
         06:e2:85:b2:ff:19:1a:aa:81:e3:1a:f7:ba:f8:35:f7:48:bd:
         f2:e3:ec:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKhgv17zu2FzMjwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
YWQyZDhiNjItOTBjMi00MTg1LWI2NDUtNjBmMTcwYjU1ODQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TY0vDbqiD6446MD0FIKg8ebEbjQ7gckOr5Q
AweQOz0/MHSYhlV6XtQ+8dCRmrQzXaAiNlEUN3xcYTpb90e+bSY975sRzDfAuDo0
CiTr/Pf5Y5e5U/OVTlNZDf/40mxeKYINJg0IlhegsLyI+eSRxdWKhhAEu4LIw7TY
eqfuoH6LhbIpaeoXwF/Yw57VOi93JRvZzo3N4sguWWTX9I3suwHvQI8RqNa8B0UG
NfXOrt4S7+/zp9/pOIeRslfD5PBD+EBV+Yhr/DouDY123XxvAahE3uajm+A3Pt6P
rO45rtRqXpQXTZj69jMcd0SXPge1OEd/WzNYScodJdSvgaorgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBO2vy6/reHaOyRro+fE/rFGL0CnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNTlhOWQ1N2ItNDY4Ny0z
YTgyLWFhOTktNmNiZTQwNDY1ZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBacMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhsegCPL98tnpiqbWLIcA3Iw+E44NQYId8RxZ5Vs4bD7T0RDhtHaf36
jXC5Xaxj6iiEotXwq8tVYiqfFM46JujLD60v6ymYyX8yp55oG9UTIzk4N2jaKjHf
nMnYYgIa/egxFFZW/w/yp9PCezl52L2qUodONAGiGX4oigHZCVO9tXSWwOYsYfnl
VodQWPmuxf3bEp17FPwN6x7i2deonazRpH6M8YyEnJ7InPpsAMjrStPprQhpZiUN
fGWAOhXAJOu1dbaOyW4dMlLX/4jECkuyBJG7kY7J9I9LRT1va1abj2Jq/D6+lkMW
0QbihbL/GRqqgeMa97r4NfdIvfLj7CY=
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:12 2025 by rpki-client