Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0ed93904-088d-3adc-8458-ec68eb898aea.roa
File:                     0ed93904-088d-3adc-8458-ec68eb898aea.roa (raw, json)
Hash identifier:          zWrfl359ZwjdDA2omgIdFAjVY086G+JEa03vkEp2OtU=
Subject key identifier:   8E:BD:3D:79:DD:DF:78:95:9A:F3:66:C9:32:38:DB:30:16:4E:71:02
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CD7253861B2C5285987680
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0ed93904-088d-3adc-8458-ec68eb898aea.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:72:53:86:1b:2c:52:85:98:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=edc7873d-9627-4413-877f-4a003ebbd5f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:43:15:86:b3:6c:0b:d1:33:2a:72:a8:d0:
                    30:d6:d1:9a:1e:19:71:8a:78:b8:62:53:b8:a7:4b:
                    d4:f9:f9:f6:20:92:89:29:e5:3f:0c:ff:aa:3e:6d:
                    ad:23:9f:25:79:9b:de:0a:19:94:54:ed:2e:93:33:
                    32:91:b9:22:20:4f:7f:75:e3:cc:9e:4f:de:b7:00:
                    e3:68:4e:ea:f5:ef:e0:37:d2:fd:16:5b:bc:ee:ac:
                    98:86:e8:50:98:df:70:38:bd:bc:23:ac:72:d0:64:
                    fc:3d:d3:02:97:15:37:aa:32:9d:cb:dc:1a:89:60:
                    e9:9e:96:bb:ca:17:c0:d6:a7:fc:64:bc:6a:f1:fc:
                    aa:b8:0c:4f:41:b6:ae:ec:87:12:08:e1:de:3f:a6:
                    2f:f9:db:02:34:e2:3e:cd:bb:60:8a:32:e3:34:4a:
                    10:ce:27:da:59:56:53:e4:03:b2:58:a3:ee:c1:18:
                    a4:90:db:75:44:d3:d2:e9:9d:ad:05:cd:24:36:cc:
                    a8:e8:4d:cb:51:16:ec:d0:3b:47:70:5e:10:17:9d:
                    d1:6b:dd:f4:51:99:7b:72:2c:40:4a:33:cd:86:52:
                    92:6b:64:f2:df:87:e7:97:f6:97:53:1d:91:97:ac:
                    bb:50:0f:3d:1c:b9:fe:54:25:b9:00:b8:9b:ff:29:
                    c0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BD:3D:79:DD:DF:78:95:9A:F3:66:C9:32:38:DB:30:16:4E:71:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0ed93904-088d-3adc-8458-ec68eb898aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e9:8c:78:3d:82:cc:eb:6e:c6:51:66:75:e4:98:a7:30:14:
         a2:42:1f:3f:35:74:a3:23:ad:03:5b:95:e9:b9:a4:f4:a2:a2:
         93:b3:9a:9b:fb:38:70:29:ca:06:f5:85:ff:cd:c3:bd:6a:51:
         1e:04:c7:ff:7d:d3:cb:e5:a9:af:e6:4a:bc:81:a1:99:32:ec:
         9f:df:f0:bb:09:36:bc:ab:c3:e5:92:ed:57:4a:71:c4:c5:7f:
         32:8b:d6:e5:26:29:a6:31:f8:4d:f9:54:95:a3:d6:b5:87:73:
         9b:90:7c:4e:1e:b5:b0:79:3a:91:f7:89:ae:07:db:ec:05:38:
         ff:d5:48:ea:11:dd:4a:d5:3d:28:63:f6:75:0a:92:7c:d4:20:
         c7:33:95:e2:45:e5:ee:ec:9f:81:f8:36:43:01:b4:cf:69:32:
         c1:9d:86:f7:c1:e2:cb:24:35:97:89:5e:2a:22:13:a9:02:56:
         79:75:f2:31:f2:d1:21:19:1d:24:36:fc:95:26:ed:58:b4:0f:
         b3:00:0b:44:be:1d:03:00:c0:91:fa:d2:c3:36:04:d1:90:be:
         3c:da:49:3c:5a:5c:bd:e4:35:31:c7:a3:dd:77:19:21:a7:d0:
         78:f3:e3:52:9f:2d:02:da:b1:cd:79:ce:80:dd:53:07:53:a5:
         fb:e1:d9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:33:54 2025 by rpki-client