Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/066f375f-eca5-377b-95ce-6c0435f7cd90.roa
File:                     066f375f-eca5-377b-95ce-6c0435f7cd90.roa (raw, json)
Hash identifier:          XfOUfr/ixVJXHnLOffFxyzE0nWCIeHqYEEvCwXOE0NM=
Subject key identifier:   E3:92:6F:95:A6:58:98:D5:84:BE:DD:AE:9D:8D:59:40:8A:32:D5:37
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CE111E9264259821D2BF40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/066f375f-eca5-377b-95ce-6c0435f7cd90.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:11:1e:92:64:25:98:21:d2:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=cf75a371-4669-464e-9b46-33139805b65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:04:8b:fb:91:fa:2b:eb:bc:e4:ac:41:58:41:
                    de:e2:44:dc:87:52:f4:18:2a:88:c0:a3:4f:68:83:
                    06:09:c3:c6:48:09:f5:c0:88:f0:ce:b2:80:f1:9b:
                    12:b6:19:a0:68:22:b6:7e:cb:ae:bd:72:a9:64:5f:
                    e0:01:aa:39:af:75:1f:6f:2a:76:6c:ea:a2:96:7b:
                    57:48:5b:3f:92:ef:01:b2:0c:8e:a4:a1:0b:1d:c1:
                    37:42:b6:16:27:97:1f:24:30:43:17:e9:ab:f1:4b:
                    2c:15:c0:e3:4c:a8:cc:13:19:d0:6a:d8:67:8e:89:
                    47:41:f8:b0:66:24:49:c8:96:d7:f6:b6:c5:12:44:
                    48:1d:d1:21:c7:e0:44:87:d8:d5:12:73:90:6c:67:
                    9c:32:68:86:be:35:4f:a4:a2:07:c3:64:7d:0d:8a:
                    4a:7b:65:12:dd:8e:e4:90:7b:41:81:b5:f3:a9:75:
                    e7:97:fd:c2:f3:f6:dd:a2:21:76:80:be:85:ad:85:
                    99:25:f4:39:45:c9:0e:fc:6a:e6:01:fb:89:36:36:
                    dc:cf:f5:c5:30:13:d1:b1:ac:9b:16:98:aa:03:7e:
                    19:04:16:04:3d:bd:f4:61:4a:7a:9e:4a:f9:77:b7:
                    07:27:13:66:c7:46:f9:78:87:67:b0:ee:b0:18:01:
                    6b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:92:6F:95:A6:58:98:D5:84:BE:DD:AE:9D:8D:59:40:8A:32:D5:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/066f375f-eca5-377b-95ce-6c0435f7cd90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:ae:3e:9b:e9:2c:45:5b:d3:ba:a8:33:39:da:4e:86:9e:
         a5:05:d7:0c:50:ad:e1:ef:72:46:ed:e4:1b:cf:fc:22:e8:c6:
         c3:e4:f5:7e:b5:bc:ef:0c:4e:83:23:30:48:b6:f6:cc:36:a3:
         78:da:9d:7e:9b:66:df:dd:c9:14:76:4f:2e:87:01:3c:54:8c:
         2d:cf:19:7c:72:47:59:9a:40:31:36:9a:4e:58:5e:a5:ce:bb:
         7b:59:af:b9:78:bb:cc:ac:74:ed:05:21:f4:2b:e0:90:cc:c5:
         54:94:db:9d:77:50:10:0c:19:ff:46:ba:cf:48:a5:5f:55:c6:
         4d:6b:d4:d0:7e:21:15:d0:6c:20:20:8b:14:d5:bd:4b:af:a8:
         53:dd:9b:3a:3c:e1:9e:77:c2:af:00:78:f9:8b:37:3b:2a:cc:
         26:d2:d3:c7:09:55:65:89:88:f9:e9:a9:d3:82:fe:2c:f7:f1:
         b2:3c:61:47:b7:9c:b7:bc:08:51:af:93:79:27:6b:af:89:5d:
         90:93:6e:49:f1:72:59:79:88:d4:cf:5f:a2:63:4b:df:45:5b:
         29:f1:75:79:27:76:d4:a0:c1:bd:b2:cd:e9:7f:0b:df:9c:e6:
         08:76:74:f2:13:40:01:55:df:5a:11:e7:e8:79:64:0c:66:63:
         5d:85:90:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhEekmQlmCHSv0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
Y2Y3NWEzNzEtNDY2OS00NjRlLTliNDYtMzMxMzk4MDViNjViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggSL+5H6K+u85KxBWEHe4kTch1L0GCqIwKNP
aIMGCcPGSAn1wIjwzrKA8ZsSthmgaCK2fsuuvXKpZF/gAao5r3Ufbyp2bOqilntX
SFs/ku8BsgyOpKELHcE3QrYWJ5cfJDBDF+mr8UssFcDjTKjMExnQathnjolHQfiw
ZiRJyJbX9rbFEkRIHdEhx+BEh9jVEnOQbGecMmiGvjVPpKIHw2R9DYpKe2US3Y7k
kHtBgbXzqXXnl/3C8/bdoiF2gL6FrYWZJfQ5RckO/GrmAfuJNjbcz/XFMBPRsayb
FpiqA34ZBBYEPb30YUp6nkr5d7cHJxNmx0b5eIdnsO6wGAFrjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOOSb5WmWJjVhL7drp2NWUCKMtU3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMDY2ZjM3NWYtZWNhNS0z
NzdiLTk1Y2UtNmMwNDM1ZjdjZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSKrj6b6SxFW9O6qDM52k6GnqUF1wxQreHvckbt5BvP/CLoxsPk9X61
vO8MToMjMEi29sw2o3janX6bZt/dyRR2Ty6HATxUjC3PGXxyR1maQDE2mk5YXqXO
u3tZr7l4u8ysdO0FIfQr4JDMxVSU2513UBAMGf9Gus9IpV9Vxk1r1NB+IRXQbCAg
ixTVvUuvqFPdmzo84Z53wq8AePmLNzsqzCbS08cJVWWJiPnpqdOC/iz38bI8YUe3
nLe8CFGvk3kna6+JXZCTbknxcll5iNTPX6JjS99FWynxdXkndtSgwb2yzel/C9+c
5gh2dPITQAFV31oR5+h5ZAxmY12FkPk=
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:33:46 2025 by rpki-client