Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ed3faa39-c5aa-3561-b0bf-ae989e5344e9.roa
File:                     ed3faa39-c5aa-3561-b0bf-ae989e5344e9.roa (raw, json)
Hash identifier:          o4GBZuRZ1iD5HuDr6VuchEAnSOqKf1QG+bnth2phUXo=
Subject key identifier:   32:52:36:02:84:89:1A:4F:4D:B1:2B:CA:13:83:98:64:AB:65:F5:4C
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858499F24D996AF6EB9481FE74A80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ed3faa39-c5aa-3561-b0bf-ae989e5344e9.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36040
IP address blocks:        136.22.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:d9:96:af:6e:b9:48:1f:e7:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=4f022751-c832-4169-a5fa-dbec48ea917a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:4c:33:61:2c:1b:7c:5c:55:b6:4e:46:ee:
                    bf:49:6e:c2:b2:66:4d:e0:9c:3b:62:db:c1:c1:87:
                    02:68:9f:51:c7:47:17:0f:13:70:93:c7:86:5d:75:
                    6a:3d:76:f2:cd:ef:8b:be:f3:96:bb:39:eb:e6:55:
                    2e:60:45:53:37:d3:20:50:b8:37:7a:a8:c1:f0:14:
                    2b:d6:45:19:72:9a:cb:08:3a:6f:1a:02:e8:44:e8:
                    c1:09:6f:cb:99:6f:55:ca:1a:21:46:44:09:f5:f6:
                    1a:d2:60:2f:1d:15:f0:a7:6d:44:e4:67:f4:b5:3d:
                    e0:67:55:02:bf:11:64:f5:44:49:91:4b:02:f0:aa:
                    2d:c4:b2:4b:0d:37:cd:3e:70:28:e2:11:2c:ec:a8:
                    68:cd:4b:43:9b:d5:b6:f2:06:51:d3:b8:8c:2b:d1:
                    f1:7d:a6:48:15:62:bc:02:be:3d:a6:1e:c9:8f:b6:
                    3c:19:31:d2:ed:5a:9b:78:df:c9:ca:44:c1:84:ea:
                    51:b8:a8:15:8f:b6:55:6f:d6:92:24:c2:54:90:36:
                    f6:ff:5c:f8:78:de:de:70:76:ba:96:4d:bb:a5:f5:
                    87:17:30:45:23:9d:88:41:ee:21:52:27:da:c5:43:
                    32:3d:98:53:f7:32:a9:ec:0f:6d:5b:8e:09:f6:46:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:52:36:02:84:89:1A:4F:4D:B1:2B:CA:13:83:98:64:AB:65:F5:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ed3faa39-c5aa-3561-b0bf-ae989e5344e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:97:ba:29:9d:81:b3:82:f9:c2:0b:2f:f6:91:e7:7c:d9:16:
         fd:63:f9:78:ea:07:82:08:28:e8:e4:7d:d8:c8:59:b5:88:be:
         4a:a7:d8:7b:e1:39:80:bb:d3:ad:cd:e8:e8:82:5d:11:32:e5:
         31:32:6d:e1:29:54:78:fc:b2:4d:7a:f4:85:43:dd:60:bf:8d:
         e8:ea:75:7f:fe:0f:d9:db:16:10:af:69:b0:e2:35:60:ae:8e:
         54:ce:74:1c:bd:da:f3:2f:18:b0:9e:14:e8:cb:4c:59:80:2a:
         5a:55:f3:59:6c:b9:7b:f4:c9:2c:50:2e:ac:22:4b:79:c5:2c:
         57:0b:47:62:c8:6d:ff:5b:55:c8:55:22:6d:43:3a:60:ee:e1:
         11:05:dc:a5:53:e2:c6:b1:0d:a9:da:96:02:b1:69:79:da:0d:
         ce:93:aa:d2:c5:83:ee:31:fb:24:43:0d:c6:54:62:b1:5f:b7:
         bd:9d:79:e0:c2:eb:a2:cd:67:85:f3:cf:a9:82:9a:14:36:e4:
         6d:73:e6:2d:e9:6d:ae:b0:b9:c3:a7:fa:d5:89:b1:f3:4a:4e:
         16:4a:19:c3:3e:59:ee:3a:f2:53:a3:be:dc:0d:f6:58:1e:35:
         54:a5:ca:4a:ed:03:72:ea:7f:50:c3:fe:a1:66:dd:d2:dd:bb:
         ba:a8:6f:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNmWr265SB/nSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
NGYwMjI3NTEtYzgzMi00MTY5LWE1ZmEtZGJlYzQ4ZWE5MTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHhMM2EsG3xcVbZORu6/SW7CsmZN4Jw7YtvB
wYcCaJ9Rx0cXDxNwk8eGXXVqPXbyze+LvvOWuznr5lUuYEVTN9MgULg3eqjB8BQr
1kUZcprLCDpvGgLoROjBCW/LmW9VyhohRkQJ9fYa0mAvHRXwp21E5Gf0tT3gZ1UC
vxFk9URJkUsC8KotxLJLDTfNPnAo4hEs7KhozUtDm9W28gZR07iMK9HxfaZIFWK8
Ar49ph7Jj7Y8GTHS7VqbeN/JykTBhOpRuKgVj7ZVb9aSJMJUkDb2/1z4eN7ecHa6
lk27pfWHFzBFI52IQe4hUifaxUMyPZhT9zKp7A9tW44J9kbCvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJSNgKEiRpPTbEryhODmGSrZfVMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZWQzZmFhMzktYzVhYS0z
NTYxLWIwYmYtYWU5ODllNTM0NGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIGXuimdgbOC+cILL/aR53zZFv1j+XjqB4IIKOjkfdjIWbWIvkqn2Hvh
OYC7063N6OiCXREy5TEybeEpVHj8sk169IVD3WC/jejqdX/+D9nbFhCvabDiNWCu
jlTOdBy92vMvGLCeFOjLTFmAKlpV81lsuXv0ySxQLqwiS3nFLFcLR2LIbf9bVchV
Im1DOmDu4REF3KVT4saxDanalgKxaXnaDc6TqtLFg+4x+yRDDcZUYrFft72deeDC
66LNZ4Xzz6mCmhQ25G1z5i3pba6wucOn+tWJsfNKThZKGcM+We468lOjvtwN9lge
NVSlykrtA3Lqf1DD/qFm3dLdu7qobwE=
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:34:56 2025 by rpki-client