Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/32075a9d-92e7-37a4-a69a-5a3bd451fae6.roa
File:                     32075a9d-92e7-37a4-a69a-5a3bd451fae6.roa (raw, json)
Hash identifier:          tAHCna/blPJ+6nN6JPnPB1XS4QnudeM3wqhBJEUE4Hw=
Subject key identifier:   F9:63:F9:AD:7E:A5:46:FF:7B:F8:ED:E9:E7:AB:C9:68:02:09:F9:F9
Certificate issuer:       /CN=4eb5326f-ee03-4174-b355-9916b3e826aa
Certificate serial:       010D0C9F432858499DBF272293049CC43A275DA0
Authority key identifier: 4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/32075a9d-92e7-37a4-a69a-5a3bd451fae6.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     400380
IP address blocks:        81.199.36.0/23 maxlen: 23
                          81.199.36.0/24 maxlen: 24
                          81.199.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:27:22:93:04:9c:c4:3a:27:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eb5326f-ee03-4174-b355-9916b3e826aa
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=455a762d-ac6e-4d1d-b372-a3e5f9bd2aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ed:a6:74:8d:23:84:4f:22:c6:b5:9f:16:a1:
                    86:de:1a:a0:00:78:eb:fd:6e:97:ac:26:2f:22:39:
                    2c:83:3e:67:53:8c:4b:69:4f:d0:13:af:03:19:d2:
                    32:1d:ed:89:23:2e:be:3d:d2:a7:7a:26:e5:04:aa:
                    08:dc:f5:bd:6c:dc:eb:52:58:5e:fe:0a:f4:72:55:
                    b9:67:9f:af:cb:b9:d3:4c:1d:06:04:21:d1:81:f6:
                    28:9b:12:5c:61:8c:a1:e0:98:df:0b:6f:27:47:04:
                    58:71:d1:e7:8e:47:22:bb:1c:00:49:0b:58:85:ba:
                    9a:b1:a6:d3:2a:fb:4f:98:ed:74:94:3d:3e:f1:f2:
                    3d:3f:ab:9a:c4:7b:53:b3:c5:b9:54:2b:c9:ec:90:
                    df:bd:b1:50:7d:55:19:5a:d4:d0:d5:1c:8b:96:60:
                    3f:dd:27:76:89:b9:ca:46:bd:a1:c8:6c:fa:48:b4:
                    15:4f:32:33:43:8d:3c:b5:3e:de:07:eb:e6:92:7b:
                    b7:0b:de:70:a5:13:c6:4c:d2:44:27:b5:ad:e5:d0:
                    32:b7:d1:88:17:d1:22:64:8a:de:45:9d:8c:0f:92:
                    0b:75:98:6b:a3:99:27:52:55:58:f1:82:f2:8b:c5:
                    aa:ab:ab:57:df:47:46:34:56:24:71:1a:5f:ea:1e:
                    61:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:63:F9:AD:7E:A5:46:FF:7B:F8:ED:E9:E7:AB:C9:68:02:09:F9:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/32075a9d-92e7-37a4-a69a-5a3bd451fae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.crl

            X509v3 Authority Key Identifier:
                keyid:4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.199.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e7:43:1a:83:6f:ef:39:99:ba:90:a8:fd:ca:1a:e4:16:d9:
         15:c8:42:6c:a0:83:a8:c4:3e:60:82:a3:6c:19:1b:80:4d:c4:
         77:f0:18:b4:38:1d:1a:7b:13:b8:af:de:c3:69:3f:d6:93:90:
         8a:23:75:26:48:a9:84:d8:51:23:f8:bc:2a:6f:b1:1a:9d:3a:
         38:6d:c8:d5:c9:8b:3c:b4:e5:bc:e8:91:9d:ee:47:4c:48:05:
         30:0c:bc:30:13:a7:e8:c3:51:c2:0a:45:ab:36:d2:d9:22:6d:
         cd:8c:f2:3a:1e:7c:17:6d:a2:13:da:a8:dd:01:d1:f4:94:92:
         12:95:9a:2f:40:91:e9:62:11:fe:b1:00:5a:c3:f2:6d:bd:0c:
         97:6f:8c:8b:85:76:50:55:aa:ed:f0:ad:66:7a:af:e4:01:db:
         97:57:0b:87:fa:cf:92:29:a5:cc:da:5f:25:bd:81:d2:d9:30:
         09:bb:a2:68:cf:44:b6:6c:aa:bd:a8:15:3f:dd:8f:3f:e1:5e:
         9e:29:78:dc:99:25:35:eb:83:8b:6d:26:c1:ed:b5:7c:7d:67:
         ce:3c:4c:38:c9:89:b0:86:13:e2:c6:9d:a9:31:a1:e4:de:8e:
         96:8b:25:ef:e3:b9:6d:9d:bf:e1:03:19:60:ee:bb:d3:9c:1c:
         5a:74:a7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:25:42 2025 by rpki-client