Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03fc8902-5741-3264-a3bf-8836a3aaede2.roa
File:                     03fc8902-5741-3264-a3bf-8836a3aaede2.roa (raw, json)
Hash identifier:          acPTlO/pAPL0ivLNb6xGfTytC7Y0LKGMWhXh0FbcEpE=
Subject key identifier:   DB:9D:DE:D3:F5:B4:B9:EB:1D:34:5A:A2:5F:52:27:C3:77:7D:1E:DD
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CE2AB443637B85A851E000
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03fc8902-5741-3264-a3bf-8836a3aaede2.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:2a:b4:43:63:7b:85:a8:51:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=25a092cb-3546-40ef-a08f-0780b2c4e447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7b:db:93:4e:7b:55:14:58:93:45:3a:9c:af:
                    55:fe:d5:1c:26:8e:04:91:ce:90:10:14:8a:b1:be:
                    ce:34:5d:0e:86:55:8a:f5:70:20:99:f4:70:64:df:
                    cf:f4:99:44:67:1d:c6:8d:57:98:9d:44:8c:37:f2:
                    f3:63:b4:47:e1:ff:17:66:c5:5a:61:52:f2:b3:e0:
                    0e:81:72:8a:86:bc:87:36:03:b3:30:f8:50:45:61:
                    ba:9c:d0:d8:9c:d5:b2:8c:38:eb:b8:f9:44:a7:36:
                    b2:59:de:ce:ab:64:c3:a4:36:ad:29:2a:0b:18:4d:
                    e4:39:ed:79:fe:6e:5c:15:4b:07:cd:03:9f:d6:e9:
                    65:66:02:cd:7d:f6:45:52:fd:84:22:25:ca:af:b8:
                    bf:32:23:e1:d3:63:81:84:0e:23:ea:04:eb:95:6f:
                    41:cd:24:61:b4:f6:b9:4d:df:23:0f:3a:8e:a3:ff:
                    d6:77:fc:da:cc:21:f4:82:28:a7:c9:c2:43:69:87:
                    1e:f3:37:82:d4:86:d6:07:33:1e:a5:6f:52:47:1c:
                    7a:fd:96:30:71:24:74:d9:55:36:ed:43:6b:8a:74:
                    e9:82:66:87:ac:17:2f:89:5b:39:70:ca:64:36:ae:
                    f0:22:c9:f9:59:03:ab:b0:3b:95:40:dc:d8:bc:29:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9D:DE:D3:F5:B4:B9:EB:1D:34:5A:A2:5F:52:27:C3:77:7D:1E:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/03fc8902-5741-3264-a3bf-8836a3aaede2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:0a:ef:a0:36:8f:88:11:10:6c:04:98:41:98:dc:4a:23:ed:
         03:ac:46:c5:50:31:cd:74:86:38:25:d1:8a:81:62:dc:6f:6a:
         af:8d:7f:c2:ce:77:ab:1a:da:ee:3a:59:f3:ff:7a:8f:3c:5b:
         55:f4:8b:71:6c:0f:48:90:25:ad:be:6f:45:a8:ed:2d:f1:3e:
         c2:6d:71:73:3b:71:47:8f:34:5c:b8:7e:32:00:82:6f:9a:76:
         ea:9c:33:a3:e0:01:c7:a7:5f:ce:17:58:79:ce:0a:43:9a:13:
         74:e9:30:82:0c:a6:3b:77:cb:58:02:5e:f8:3b:64:bb:55:ab:
         7a:a7:5d:01:c8:4e:bf:d0:5f:e1:d2:c8:70:e7:13:e6:ec:d8:
         d8:b3:6f:2b:71:86:b2:11:ce:4e:df:be:c8:d2:1e:ac:87:8c:
         a3:89:5e:ab:9c:14:64:2c:41:16:df:c4:75:20:3f:58:f6:19:
         6b:53:d3:bb:22:66:dd:b9:a3:f5:a4:03:46:45:04:a6:fa:03:
         f0:04:4c:7a:ea:79:54:73:02:fb:b1:c1:f9:1a:bb:4e:43:ad:
         0d:0d:b7:a5:c6:14:e8:ba:11:b0:7a:c5:df:36:92:68:8b:8c:
         0a:d2:06:4d:55:01:04:b1:53:48:6c:cc:8a:5a:a6:8b:da:c3:
         57:ba:cd:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkziq0Q2N7hahR4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
MjVhMDkyY2ItMzU0Ni00MGVmLWEwOGYtMDc4MGIyYzRlNDQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXvbk057VRRYk0U6nK9V/tUcJo4Ekc6QEBSK
sb7ONF0OhlWK9XAgmfRwZN/P9JlEZx3GjVeYnUSMN/LzY7RH4f8XZsVaYVLys+AO
gXKKhryHNgOzMPhQRWG6nNDYnNWyjDjruPlEpzayWd7Oq2TDpDatKSoLGE3kOe15
/m5cFUsHzQOf1ullZgLNffZFUv2EIiXKr7i/MiPh02OBhA4j6gTrlW9BzSRhtPa5
Td8jDzqOo//Wd/zazCH0giinycJDaYce8zeC1IbWBzMepW9SRxx6/ZYwcSR02VU2
7UNrinTpgmaHrBcviVs5cMpkNq7wIsn5WQOrsDuVQNzYvClfvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNud3tP1tLnrHTRaol9SJ8N3fR7dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMDNmYzg5MDItNTc0MS0z
MjY0LWEzYmYtODgzNmEzYWFlZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0K76A2j4gREGwEmEGY3Eoj7QOsRsVQMc10hjgl0YqBYtxvaq+Nf8LO
d6sa2u46WfP/eo88W1X0i3FsD0iQJa2+b0Wo7S3xPsJtcXM7cUePNFy4fjIAgm+a
duqcM6PgAcenX84XWHnOCkOaE3TpMIIMpjt3y1gCXvg7ZLtVq3qnXQHITr/QX+HS
yHDnE+bs2NizbytxhrIRzk7fvsjSHqyHjKOJXqucFGQsQRbfxHUgP1j2GWtT07si
Zt25o/WkA0ZFBKb6A/AETHrqeVRzAvuxwfkau05DrQ0Nt6XGFOi6EbB6xd82kmiL
jArSBk1VAQSxU0hszIpapovaw1e6zZU=
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:36 2025 by rpki-client