Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35f23b24-5f0f-3027-8602-f069556979a6.roa
File:                     35f23b24-5f0f-3027-8602-f069556979a6.roa (raw, json)
Hash identifier:          ygjscy4HffgFqn1jIsFqA84LicBdt1eSrADRhye2gu4=
Subject key identifier:   56:88:88:27:15:12:C7:B8:B5:FA:73:F6:B3:75:F3:87:AE:B1:C8:C4
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CD69E4D600D18EC78F0840
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35f23b24-5f0f-3027-8602-f069556979a6.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:69:e4:d6:00:d1:8e:c7:8f:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=77ae45dd-f3da-4a0e-986f-e288499f1f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:a4:e6:ab:d6:a4:69:b3:b7:4b:3d:be:e3:
                    20:08:f2:2d:ad:10:d9:a0:b9:d6:c5:41:24:f3:2e:
                    f5:2c:f5:0c:5e:f4:f3:34:b0:e1:c6:c7:6a:7c:d8:
                    41:9d:a5:51:3e:4b:0c:01:8d:e7:58:56:ff:7c:9a:
                    60:1d:40:1b:f9:25:42:28:0f:94:6e:05:ad:1f:94:
                    04:0d:3a:7f:df:1b:06:85:4b:7e:4b:cf:43:95:b5:
                    ca:48:54:82:12:b5:4b:fd:4c:10:65:00:43:e3:4b:
                    bf:e4:d3:b0:af:61:3d:e8:f0:85:6f:79:46:56:8b:
                    f1:85:dd:d4:83:ba:8e:37:14:3e:4e:6a:47:b9:59:
                    cd:fb:16:76:a6:85:f5:7b:ed:8d:7d:bd:07:e6:49:
                    0d:9b:59:cf:c7:55:23:b9:8b:c9:ab:e9:e1:c6:84:
                    92:11:f0:0b:5a:54:26:63:17:74:7d:6c:90:e4:4a:
                    4d:72:52:c8:30:da:0b:71:cb:16:c1:0b:b9:e0:a0:
                    5a:f5:a4:44:51:f3:a8:0e:8e:ce:14:d4:9e:48:c8:
                    fd:6d:38:b9:ea:17:f0:6d:0e:18:b8:fc:4f:e3:8f:
                    dc:0e:1a:d0:1c:c8:e3:37:2c:28:e5:2c:1d:41:13:
                    40:65:22:bf:4c:06:62:30:eb:7c:b2:fe:3b:39:4b:
                    11:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:88:88:27:15:12:C7:B8:B5:FA:73:F6:B3:75:F3:87:AE:B1:C8:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35f23b24-5f0f-3027-8602-f069556979a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d1:98:3b:be:9e:87:d2:b1:c0:2f:f9:49:14:2c:53:16:94:
         41:de:63:c5:dc:47:cf:7e:c8:76:14:85:7f:9d:34:e8:1d:a6:
         1b:63:81:db:28:55:13:72:83:65:63:6d:8e:7c:ed:5a:9f:12:
         48:74:fc:00:6b:99:39:d0:9d:41:49:94:af:50:ba:a3:17:bb:
         47:ed:55:91:cb:ba:b9:e1:25:1d:2b:9c:ae:7f:fa:95:95:d6:
         85:f0:80:79:12:25:e6:bb:cb:c3:6d:13:a9:a7:9d:56:38:50:
         92:b6:7a:ee:2f:8c:8a:d2:ce:e7:20:ef:84:36:c7:81:67:04:
         93:f1:2f:64:b7:4f:57:83:e3:e4:8c:80:c1:74:d6:10:9e:92:
         f2:ee:f6:9f:86:e5:55:80:04:14:c4:57:d9:ec:81:92:39:15:
         f4:2b:3d:d0:39:b5:e7:51:39:70:13:d9:b1:cb:f8:c1:b7:fd:
         dd:d4:70:9d:a8:f2:02:ce:5a:7d:c0:b1:cb:80:64:1b:20:13:
         39:d3:54:2b:06:74:ad:42:0e:51:33:a4:0f:b2:e1:3b:7a:e6:
         e7:8d:9b:ac:b3:5b:00:03:c4:37:9a:5b:5a:77:cf:7d:41:f2:
         92:15:f3:88:84:9a:25:e9:04:f9:62:16:95:fa:e1:7f:79:30:
         82:1b:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:33:42 2025 by rpki-client