Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f63939e1-f897-30f4-ae61-70272158ce33.roa
File:                     f63939e1-f897-30f4-ae61-70272158ce33.roa (raw, json)
Hash identifier:          CAj7PB/eFi/j2UYK8TH2pFcy0zpUMEWYEreLscD+vV8=
Subject key identifier:   F0:3B:C1:C4:61:C3:9F:B8:C1:DC:10:C4:22:18:26:44:07:4A:8C:79
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F432858499F24A9E459BDAD991BE07658
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f63939e1-f897-30f4-ae61-70272158ce33.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36492
IP address blocks:        136.22.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:a9:e4:59:bd:ad:99:1b:e0:76:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=30d1e756-d22f-47bb-b1fb-373d3513325c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:8b:b3:f6:31:5d:61:7b:13:e1:8a:79:e4:
                    23:9c:81:a8:d7:5a:57:42:19:67:5d:c4:97:64:f2:
                    f9:c1:3f:b8:fa:89:cb:75:c9:bb:5b:9a:d0:d8:93:
                    7b:f2:92:b4:2d:35:52:a9:13:25:97:49:fa:c7:0a:
                    70:14:27:9c:f9:db:91:9c:fb:36:b3:46:ec:b1:a2:
                    73:ee:f0:56:6c:72:c5:3a:53:c9:d0:1c:31:90:db:
                    c1:11:9f:eb:e0:ce:78:76:5b:c3:5e:a6:a0:0c:8b:
                    cb:79:94:03:07:dc:9a:2c:cb:fb:80:85:67:f0:b9:
                    46:a3:ef:ba:0c:e4:37:53:75:b6:d8:27:66:0b:33:
                    b0:6d:8f:0f:37:13:e5:21:49:91:bb:ec:22:db:b7:
                    16:67:d2:47:54:88:c7:21:f9:0a:1c:d0:da:32:f6:
                    17:5c:96:5a:20:cb:07:f2:d9:83:fe:7e:4d:04:b4:
                    e2:34:48:d8:5c:54:d0:1c:dc:68:81:ee:d6:38:60:
                    40:a5:ed:90:84:99:8b:5d:85:59:63:de:9d:ea:d9:
                    2f:d0:8f:16:65:75:50:90:59:c2:6d:b8:eb:cb:f3:
                    47:4d:38:5d:21:cd:3e:c7:95:70:25:d3:7a:f8:6e:
                    94:fa:2c:d4:23:c6:47:8a:67:a3:f6:95:e6:f7:cc:
                    d9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3B:C1:C4:61:C3:9F:B8:C1:DC:10:C4:22:18:26:44:07:4A:8C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/f63939e1-f897-30f4-ae61-70272158ce33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:3c:b6:d1:20:1b:cc:51:d4:c9:a3:8f:3b:87:1a:ce:25:20:
         85:4a:62:be:d4:04:0c:48:c3:cf:ee:c1:2b:75:ba:1d:81:cc:
         be:d4:8f:07:c6:69:e4:5d:20:15:5e:2a:9a:0b:16:55:2b:11:
         e7:66:19:ab:a3:6a:65:79:88:8e:13:f2:3e:db:42:4a:fb:66:
         04:e1:79:0c:86:5a:7e:18:d3:ed:b8:9a:14:9c:a7:ea:92:7b:
         74:32:2f:78:82:6f:7a:2d:7a:9d:d8:ab:25:65:b9:74:2d:ce:
         93:ca:40:c4:fb:86:cf:6b:40:58:5c:af:4b:fd:75:a7:1e:97:
         3f:07:97:68:76:97:c6:ee:81:12:29:7d:0f:49:55:0b:9f:00:
         8e:7b:27:78:97:f2:9a:e2:dc:20:0d:d0:73:b1:ad:35:08:23:
         a7:d5:b2:5f:da:7d:49:3f:c3:e8:29:73:35:20:07:af:6a:19:
         6a:89:bf:0b:d5:b7:9d:cf:af:18:16:12:ea:9b:86:af:15:6d:
         20:1c:39:6f:ab:20:b4:12:15:53:ab:a5:34:7c:a0:a6:7d:ba:
         17:01:5b:e3:6a:6f:68:77:dc:bd:ad:97:d6:a0:2b:46:0b:5e:
         78:cb:76:a9:e0:c0:3f:4a:4e:aa:02:cb:f1:31:66:70:da:e0:
         90:b0:3d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:38:49 2025 by rpki-client