Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/f9cd334d-ccdf-3ec8-a403-a3381226990d.roa
File:                     f9cd334d-ccdf-3ec8-a403-a3381226990d.roa (raw, json)
Hash identifier:          Vg2yQB38RowJTrEnlGGVN7CBHBl4JCgWUR0iG2u7hUw=
Subject key identifier:   FE:D2:E5:96:DF:1A:28:CD:47:E2:15:5A:9D:20:AF:06:1F:31:03:20
Certificate issuer:       /CN=3f36b13d-55d3-434f-95fc-91af494e0add
Certificate serial:       010D0C9F4328584B6E91FA59F98EC14315862300
Authority key identifier: DA:A5:40:61:2C:D5:5E:57:98:AF:02:4A:B8:7D:DA:12:A7:24:4A:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/f9cd334d-ccdf-3ec8-a403-a3381226990d.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     32225
IP address blocks:        136.228.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:fa:59:f9:8e:c1:43:15:86:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f36b13d-55d3-434f-95fc-91af494e0add
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=e71cd7b9-3e02-41e4-b4ea-b0b625d75ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a7:f4:a4:ef:60:08:6a:4a:b7:84:47:1c:00:
                    aa:8d:68:c7:cb:7c:59:03:fd:1d:6f:c9:99:11:02:
                    ae:6a:72:cd:b0:bd:e0:a4:00:2f:bc:39:53:48:48:
                    ed:82:e9:51:ee:56:7d:4d:09:5d:5c:bc:99:32:e8:
                    ce:3d:16:46:b1:99:6e:51:f5:0c:21:91:d4:40:7f:
                    83:88:45:4c:17:cd:85:9a:fe:1c:58:f1:d8:a5:27:
                    84:84:64:2b:48:68:fd:3e:36:f7:c8:70:de:08:9d:
                    e1:36:f5:bf:2c:c3:69:10:c3:4e:ec:0e:66:3d:36:
                    e2:5e:78:d4:9b:53:f3:06:95:cf:b4:9e:1a:09:40:
                    55:1c:5f:b0:1b:87:0f:58:86:96:b7:7a:ae:18:5a:
                    3f:d5:3a:99:4f:62:4d:5d:10:08:aa:0f:2d:47:03:
                    cc:ee:7c:cd:78:2d:99:cf:ff:9a:9a:9a:44:26:c2:
                    1e:0b:27:3c:73:b8:78:46:40:34:e5:38:6c:42:85:
                    34:d1:d8:d5:ee:d2:26:8f:89:95:8a:3d:82:cc:e3:
                    6b:a4:c6:86:a9:55:db:c7:b8:25:ad:df:b7:0f:10:
                    cb:20:be:dd:39:0f:ba:ff:79:45:59:08:23:93:82:
                    11:ec:41:68:94:24:88:cb:24:26:e5:1a:3d:60:be:
                    35:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D2:E5:96:DF:1A:28:CD:47:E2:15:5A:9D:20:AF:06:1F:31:03:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/f9cd334d-ccdf-3ec8-a403-a3381226990d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.crl

            X509v3 Authority Key Identifier:
                keyid:DA:A5:40:61:2C:D5:5E:57:98:AF:02:4A:B8:7D:DA:12:A7:24:4A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d6:33:b1:4c:57:0a:3d:22:ee:86:c6:85:ec:c1:35:bd:24:
         cd:1c:a2:b2:df:85:66:f7:86:a3:13:a3:17:1c:9a:b3:46:65:
         05:10:96:b2:6a:f4:90:05:68:8c:1d:33:31:62:65:5f:e0:ad:
         5b:57:2e:37:3c:c8:67:b6:d5:7b:04:90:65:39:66:3b:a7:ef:
         58:10:9a:b2:20:f5:fc:e5:48:d5:96:99:ff:ce:38:da:e0:d3:
         b2:8f:e1:ae:e4:4e:1b:1e:71:99:1d:df:47:fb:3e:7d:70:bb:
         f1:e3:9b:cd:4e:69:24:01:ca:26:c9:65:07:da:6a:13:1a:e6:
         c4:f8:2f:bb:a1:2b:c0:58:6c:a6:8b:d8:45:84:fa:61:e5:67:
         d9:74:c3:ba:4f:22:eb:3f:20:b6:10:36:01:0f:63:cf:ab:6e:
         8d:11:09:2e:b5:23:81:9a:67:83:ef:52:1c:53:d8:03:81:3b:
         31:27:25:2b:37:c6:ff:f0:10:9b:fa:ef:b4:fa:3d:02:a0:98:
         06:4e:bf:1c:e4:07:4f:c3:6b:b5:ab:1e:c3:6a:76:1d:5c:c8:
         c9:01:ba:b0:6e:e9:6f:bf:9a:21:6e:6c:86:16:1d:fb:f4:ca:
         64:3d:ed:98:dc:25:eb:7a:fa:a2:23:15:9a:1e:ac:43:b3:0a:
         a2:ad:3c:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfpZ+Y7BQxWGIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2YzNmIxM2QtNTVkMy00MzRmLTk1ZmMtOTFhZjQ5NGUw
YWRkMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTcxY2Q3YjktM2UwMi00MWU0LWI0ZWEtYjBiNjI1ZDc1ZWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Kf0pO9gCGpKt4RHHACqjWjHy3xZA/0db8mZ
EQKuanLNsL3gpAAvvDlTSEjtgulR7lZ9TQldXLyZMujOPRZGsZluUfUMIZHUQH+D
iEVMF82Fmv4cWPHYpSeEhGQrSGj9Pjb3yHDeCJ3hNvW/LMNpEMNO7A5mPTbiXnjU
m1PzBpXPtJ4aCUBVHF+wG4cPWIaWt3quGFo/1TqZT2JNXRAIqg8tRwPM7nzNeC2Z
z/+amppEJsIeCyc8c7h4RkA05ThsQoU00djV7tImj4mVij2CzONrpMaGqVXbx7gl
rd+3DxDLIL7dOQ+6/3lFWQgjk4IR7EFolCSIyyQm5Ro9YL41DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP7S5ZbfGijNR+IVWp0grwYfMQMgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZjM2
YjEzZC01NWQzLTQzNGYtOTVmYy05MWFmNDk0ZTBhZGQvZjljZDMzNGQtY2NkZi0z
ZWM4LWE0MDMtYTMzODEyMjY5OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2YzNmIxM2QtNTVkMy00MzRmLTk1
ZmMtOTFhZjQ5NGUwYWRkLzNmMzZiMTNkLTU1ZDMtNDM0Zi05NWZjLTkxYWY0OTRl
MGFkZC5jcmwwHwYDVR0jBBgwFoAU2qVAYSzVXleYrwJKuH3aEqckStowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZjM2YjEzZC01NWQzLTQzNGYtOTVmYy05MWFm
NDk0ZTBhZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOS2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAzWM7FMVwo9Iu6GxoXswTW9JM0corLfhWb3hqMToxccmrNGZQUQlrJq
9JAFaIwdMzFiZV/grVtXLjc8yGe21XsEkGU5Zjun71gQmrIg9fzlSNWWmf/OONrg
07KP4a7kThsecZkd30f7Pn1wu/Hjm81OaSQByibJZQfaahMa5sT4L7uhK8BYbKaL
2EWE+mHlZ9l0w7pPIus/ILYQNgEPY8+rbo0RCS61I4GaZ4PvUhxT2AOBOzEnJSs3
xv/wEJv677T6PQKgmAZOvxzkB0/Da7WrHsNqdh1cyMkBurBu6W+/miFubIYWHfv0
ymQ97ZjcJet6+qIjFZoerEOzCqKtPNw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:09 2025 by rpki-client