Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00254be6-db70-327f-95c7-76419c22955d.roa
File:                     00254be6-db70-327f-95c7-76419c22955d.roa (raw, json)
Hash identifier:          yUsibdXVG5aicNQruNkxbk6VtpJb/5Swl3kTNVizgks=
Subject key identifier:   E5:78:36:EA:1B:75:05:BB:19:EE:2E:EE:BD:EA:0A:C1:1D:87:87:8E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B5F3774AA1E9863482E19EF80
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00254be6-db70-327f-95c7-76419c22955d.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:74:aa:1e:98:63:48:2e:19:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=c6d96ff9-b6de-4c2d-863c-3856ab6c0416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:55:07:c5:69:92:20:35:ba:a1:76:e4:33:
                    ca:43:2e:af:5e:df:17:dd:f3:37:5f:d5:41:2e:eb:
                    47:03:52:81:cd:1a:04:29:36:12:47:89:b4:b0:ff:
                    17:64:88:af:d2:09:a1:e3:44:3e:e9:ec:03:41:28:
                    85:da:ef:47:a7:65:2a:02:28:44:c7:38:81:a7:23:
                    91:f7:38:90:e1:33:1a:20:f3:89:be:a3:d1:3a:51:
                    e9:cc:5d:ff:e8:5f:65:13:b8:f7:7f:c8:0b:21:38:
                    5f:33:e2:c3:58:ce:17:7c:3e:e7:be:36:45:a6:2d:
                    97:83:af:ec:41:3b:d5:56:d3:5d:85:4b:09:46:25:
                    60:27:82:9a:71:5d:54:86:f2:d2:0f:43:52:6b:04:
                    4a:ce:6b:53:d0:59:48:77:80:13:87:2a:c8:a0:e8:
                    24:bb:06:90:fd:d6:86:63:ee:08:92:97:ce:39:a6:
                    bb:0a:00:4f:34:ae:78:20:81:75:16:ba:5e:1c:9d:
                    5d:0e:58:fa:f6:62:4c:88:80:bd:e2:6e:12:72:62:
                    e3:97:ac:9c:c1:19:29:a1:e8:cb:91:a1:63:e7:dc:
                    d7:2a:9e:be:7b:ad:77:16:a2:44:3a:4b:c9:85:d2:
                    55:70:32:51:23:36:49:f4:3a:36:57:90:b1:99:2a:
                    bb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:78:36:EA:1B:75:05:BB:19:EE:2E:EE:BD:EA:0A:C1:1D:87:87:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00254be6-db70-327f-95c7-76419c22955d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:08:ea:5b:18:b6:ce:77:be:b7:81:b4:d5:09:f8:47:22:b3:
         f0:f8:11:8c:93:38:38:7a:4c:c7:16:42:bc:8e:a5:a5:24:a1:
         71:0c:96:55:64:35:d2:fd:3d:65:9a:8a:21:7f:d6:e2:19:da:
         93:f2:2b:19:3f:9a:cc:7e:87:0b:94:df:67:a3:db:ca:3f:e9:
         71:ee:a2:e5:5b:91:b6:c2:86:28:20:68:72:86:05:09:69:f9:
         7d:99:30:20:66:77:64:18:23:93:85:99:fb:bf:47:90:1d:07:
         e6:7e:6c:b5:45:b6:33:ba:cf:87:df:c4:ff:98:59:dc:c7:bd:
         b9:ba:38:20:b5:bc:6c:8c:02:94:81:b0:34:ee:c0:5a:8b:8f:
         7b:f8:63:fc:3a:3d:7b:b7:ee:a1:7c:ad:7e:5a:30:1f:67:af:
         bf:44:8c:a6:6f:12:86:77:fc:55:53:6d:43:61:06:1b:48:cc:
         03:55:f8:7f:e6:ac:37:11:12:86:ae:a8:54:81:95:8e:c0:c4:
         57:bd:b4:1a:fd:b0:26:2e:0d:2e:1b:2f:d0:7e:a2:94:5c:a3:
         57:3d:90:0b:62:60:28:3e:f1:5f:33:e1:83:c9:b7:0d:39:79:
         8c:f5:81:44:3e:4c:66:a5:48:98:6c:7d:91:81:37:04:44:19:
         e7:ca:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:33:52 2025 by rpki-client