Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa
File:                     0aace9ba-23a4-31b7-b17e-fca13712192f.roa (raw, json)
Hash identifier:          J/fWLzf4QtpuVsAczTHIErVnHgOSWdWBvf6d+j0u2xY=
Subject key identifier:   42:75:FC:62:48:9F:D4:27:6E:5C:27:32:66:E5:19:37:B9:E4:D3:EA
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CE1CFA572D0973291ACF40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:1c:fa:57:2d:09:73:29:1a:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=5dd12406-6de8-40ef-b4d5-e506772e4f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b9:a3:d2:90:07:9c:b9:d4:28:dc:9e:5f:e3:
                    b6:95:09:34:3c:b3:ae:45:2c:31:41:ff:66:2b:07:
                    39:2f:0a:ae:94:0f:a3:50:2d:6e:b6:36:a2:c3:58:
                    61:f5:44:b8:c7:f8:93:d5:ab:ab:0b:d4:66:9f:e6:
                    bc:76:12:84:4b:e8:42:cf:56:7f:74:41:96:8c:61:
                    e7:5d:18:b4:72:67:f7:2e:e0:50:de:20:be:86:55:
                    45:06:c2:c0:da:cf:14:00:72:36:58:cb:18:65:ac:
                    af:cd:37:6d:d6:29:56:ac:28:0c:e2:2c:77:ec:a9:
                    42:d1:36:76:0d:44:53:0c:45:f5:d9:9b:5f:ac:9e:
                    0d:55:7c:85:a6:15:2e:9d:0c:f2:7c:de:00:33:87:
                    b3:0a:60:51:05:b1:d3:48:69:2b:78:3d:4d:e5:63:
                    ca:65:e2:70:82:a7:4b:a1:14:96:91:59:bf:d5:a3:
                    40:97:e0:85:c5:a7:f7:67:56:30:c1:d1:c9:d2:77:
                    c3:f6:e7:b3:8d:e4:0a:4a:ba:90:cc:5b:ea:f3:29:
                    fe:d8:24:76:b2:8a:df:72:58:24:92:18:a4:7d:dc:
                    6b:2b:44:0c:01:5f:49:db:78:3c:04:11:cb:d7:62:
                    61:33:8b:8c:ff:7e:95:30:2b:b4:00:6b:1f:3c:6d:
                    8d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:75:FC:62:48:9F:D4:27:6E:5C:27:32:66:E5:19:37:B9:E4:D3:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0aace9ba-23a4-31b7-b17e-fca13712192f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b0:a9:55:39:44:63:d5:c6:07:8f:47:6b:15:cc:26:83:17:
         1e:ed:6a:62:2c:d3:1d:23:44:4a:30:8f:aa:73:c1:c8:f7:e7:
         14:9b:7d:d5:38:6c:04:66:1b:3b:f3:f5:32:85:30:97:23:80:
         c4:bc:05:43:bc:5f:45:b4:9d:d5:25:90:00:cb:dd:03:19:a5:
         a1:ce:3d:a2:a4:53:62:f0:7a:ed:e6:7e:1c:90:25:c3:41:6d:
         41:22:22:39:84:98:8b:38:b2:4b:6a:af:e1:89:ac:1a:3b:26:
         c0:e9:19:a9:1d:e6:86:96:2a:2b:b4:37:7d:76:e0:a4:ab:92:
         27:29:ec:ea:7e:18:bc:d9:3c:b0:03:c8:54:20:3c:7f:e5:a6:
         91:d7:9c:a2:46:cc:1b:84:bf:9d:9c:1e:ed:a9:6a:d8:31:b4:
         7d:17:01:27:e6:18:b7:7e:c9:ec:e6:b2:ce:67:9d:78:b5:15:
         41:8e:eb:32:29:25:e4:10:e0:7c:63:c4:20:81:00:26:54:ec:
         af:28:c2:5b:63:ed:df:d1:8a:ad:df:da:92:49:ed:de:d5:da:
         35:40:27:0b:db:7f:5a:46:b1:f3:6f:b3:e9:81:01:3c:bd:3f:
         bd:f9:d0:fc:de:fe:07:02:2d:ed:68:9a:77:5d:57:bd:ca:7a:
         67:ca:83:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:33:43 2025 by rpki-client