Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35602ab2-46e5-3408-9c3f-313ec33e79af.roa
File:                     35602ab2-46e5-3408-9c3f-313ec33e79af.roa (raw, json)
Hash identifier:          FNxgva6S0GQjORKj3jMDVCmy+IPpZyara/RddahfbKM=
Subject key identifier:   B7:01:F5:6E:3C:3C:DE:36:B6:40:34:2F:2C:C1:16:83:2E:2A:2A:72
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CD62D34E936C3135FB4B40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35602ab2-46e5-3408-9c3f-313ec33e79af.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:62:d3:4e:93:6c:31:35:fb:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=5d3fb340-02f2-47fd-9e52-e331331dc853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:f2:35:05:9c:d6:e1:a5:2b:ff:43:0b:4e:
                    64:97:98:16:bb:bf:81:32:18:17:4b:1f:96:c3:2b:
                    fe:67:9a:1b:1a:b5:0a:ba:90:23:5e:b4:d0:31:3a:
                    06:20:1c:a9:bf:4c:73:6d:93:cc:9b:5d:11:e7:87:
                    97:95:b5:f8:48:81:9e:7f:5d:20:69:95:b9:a2:46:
                    ab:01:e1:0f:09:70:2c:36:13:e3:fa:fc:62:c4:df:
                    05:a1:c5:9c:46:f1:5b:aa:00:94:ad:f7:53:f3:9d:
                    e8:9f:65:cd:88:68:9d:a0:32:a2:dc:89:4e:ea:04:
                    48:9d:37:eb:e9:6f:3e:6b:e6:46:c8:f8:47:20:6a:
                    49:44:b3:d3:3d:b4:72:50:23:3f:c2:4b:4d:76:4a:
                    23:fd:42:95:f0:0f:ef:0e:6f:5e:c4:de:ba:c2:0f:
                    31:29:66:a8:bf:8f:54:43:f3:c7:64:18:07:53:41:
                    93:ed:52:64:92:c7:c8:e8:42:54:44:12:20:d7:95:
                    71:85:5a:29:57:4f:bf:a6:ab:b3:d7:93:6e:d1:cc:
                    91:81:f6:c7:51:d2:be:c0:2b:2e:b0:e8:f8:32:c6:
                    7b:9b:66:5c:39:82:bc:a0:33:c4:ef:af:17:3d:24:
                    a9:63:12:74:5f:f4:85:96:fb:41:3f:18:4e:b3:15:
                    ca:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:01:F5:6E:3C:3C:DE:36:B6:40:34:2F:2C:C1:16:83:2E:2A:2A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35602ab2-46e5-3408-9c3f-313ec33e79af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:52:85:2e:70:78:ac:3e:b2:ec:72:14:aa:a4:d6:1d:1c:6b:
         ce:1a:82:15:ee:1a:42:68:26:7a:fc:d6:c1:b1:3c:d4:07:d4:
         29:e3:1b:80:6a:24:c6:03:7d:a1:6e:bc:1d:82:1f:f6:ef:16:
         f6:30:3b:ec:1f:ae:be:e8:72:4f:0c:24:e9:a0:fa:13:36:f0:
         20:63:68:02:77:23:de:0b:10:b8:da:8c:97:b8:77:d6:1b:72:
         d6:c8:66:e2:b7:62:fa:80:11:38:42:5e:75:18:c1:ae:bb:39:
         3b:ca:92:88:c9:63:1d:41:07:5e:59:3b:2c:57:fe:19:00:f3:
         8f:e7:92:52:f4:11:19:51:5f:d3:80:ba:05:6d:6f:7a:cf:75:
         c9:7f:4f:1c:50:88:8e:24:ef:61:fc:83:2b:7d:98:79:d3:8e:
         8e:08:3b:7c:91:3b:93:07:08:97:ff:b4:f7:74:ba:e7:8d:5f:
         b2:97:83:b6:f4:a1:e7:47:5e:bc:b1:b0:b7:41:d8:bb:3b:71:
         30:33:69:fa:3d:04:a8:67:f3:96:a1:0b:bd:59:0a:8d:2f:8e:
         70:07:eb:01:3e:00:73:fa:67:1b:9a:94:32:da:51:65:91:71:
         d6:db:ff:b0:62:ba:64:6f:e8:a8:e1:81:61:c7:72:22:c5:34:
         8c:bc:53:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:36 2025 by rpki-client