Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa
File:                     35407d11-6502-35d8-b8f0-6eecfea064d3.roa (raw, json)
Hash identifier:          wnGYkYrwj0oQx/m16kGO908tVhza9RJbOwraB64nmtM=
Subject key identifier:   34:46:03:1A:D3:25:5F:26:20:9A:27:E4:7D:86:DF:99:A7:A8:A6:A6
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CE2C7149CA48BA99C94760
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:2c:71:49:ca:48:ba:99:c9:47:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=b6dece85-946f-4693-9f27-dfad71dfd44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:99:c9:c0:41:3a:6f:3b:1f:e2:b4:e1:c9:
                    28:8a:17:74:18:bb:9f:d3:1e:40:5d:ad:65:e1:fd:
                    9f:24:59:d2:5b:a1:35:e4:f8:e7:27:09:09:62:8a:
                    0d:bb:17:c5:6d:2c:d1:ee:ab:62:77:d3:d1:8d:86:
                    fb:50:21:b7:b7:d2:5c:19:e6:e9:cc:79:d0:55:eb:
                    46:6f:a3:7c:6d:cc:4b:20:33:0d:c1:38:61:6d:ee:
                    2b:e8:a7:85:7a:57:29:6d:e0:e4:c8:c0:8a:10:87:
                    dc:87:00:f8:8e:af:89:32:31:84:39:b9:41:73:91:
                    6e:10:0f:b2:10:bc:be:b8:be:27:29:b4:da:2f:d9:
                    99:d7:71:95:4c:93:0d:4d:76:df:a8:14:2d:e8:94:
                    e2:c3:eb:87:02:ad:f2:dc:81:7c:54:90:79:66:90:
                    8a:6c:58:89:79:09:f0:89:c0:75:47:28:b6:66:b7:
                    26:c4:08:15:19:ee:51:df:17:64:8b:00:b5:49:a3:
                    f9:a5:e0:2f:05:bc:b5:af:16:df:bb:2b:85:12:25:
                    61:8b:6c:5e:cc:e5:08:53:14:51:7a:65:78:b5:b9:
                    5f:3f:e2:de:09:c1:52:0b:af:18:90:19:a5:c0:e3:
                    df:2b:43:48:66:11:92:b3:f7:d3:72:6a:82:8e:16:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:46:03:1A:D3:25:5F:26:20:9A:27:E4:7D:86:DF:99:A7:A8:A6:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35407d11-6502-35d8-b8f0-6eecfea064d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d8:a8:44:94:37:39:21:02:b7:4f:2a:0e:23:3f:ff:c6:45:
         b2:f8:8a:3c:52:47:43:53:96:cd:f0:21:61:b4:65:05:d9:83:
         71:a8:5d:87:a2:fa:30:c2:80:a8:3f:6b:d0:0b:d3:76:32:41:
         60:71:31:63:3e:18:01:ae:bf:28:fe:a2:f5:9f:18:a1:f3:32:
         df:68:3a:48:12:20:00:35:d2:31:1c:c7:e9:48:73:d3:50:cd:
         8b:d2:7f:e2:51:a0:12:77:c9:2c:fe:70:f7:8c:2a:43:dc:51:
         0b:59:32:a9:99:f8:55:0b:1c:36:fc:b4:ae:f0:e0:8f:6f:5c:
         a6:d6:ad:95:62:c0:bf:4c:55:c8:04:a0:6f:68:51:58:b5:80:
         6d:7a:30:1d:f8:de:5b:36:30:7a:6d:f9:3b:98:70:24:fd:08:
         35:3c:f3:83:c4:68:91:b8:0b:28:76:d4:7e:05:ac:20:40:a6:
         49:97:71:9c:3d:30:e0:21:e3:64:03:07:61:ab:f9:70:4d:1f:
         1b:5b:cc:c5:f7:64:5d:82:d4:ae:d4:16:fe:ce:f0:79:81:e2:
         23:a9:01:2d:38:0b:17:d7:28:fb:a2:68:34:08:48:6b:e5:a1:
         6c:13:fc:ac:5f:ba:46:36:3c:96:4e:dc:00:40:b5:ea:f4:01:
         2a:d8:af:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:33:46 2025 by rpki-client