Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3bcba05f-1d8c-3987-93bf-43f2cc17190a.roa
File:                     3bcba05f-1d8c-3987-93bf-43f2cc17190a.roa (raw, json)
Hash identifier:          ec2mGXXlvi6f1iomX55KB3m2a/1+6IEsD8zWJ9Ytgkg=
Subject key identifier:   CF:E7:E8:2B:64:49:12:85:C3:C0:B9:19:E1:89:E2:6C:11:37:AF:6B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B5F376D2148A78327BCAFC7A0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3bcba05f-1d8c-3987-93bf-43f2cc17190a.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:6d:21:48:a7:83:27:bc:af:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=80104017-bc66-422a-b254-479d9e482271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:89:1c:6c:13:4c:01:30:11:ad:93:42:06:21:
                    96:e1:13:dd:77:c8:6c:60:65:9b:90:9c:ef:1a:88:
                    9a:66:42:68:db:b7:0d:5d:be:87:00:c5:43:53:1c:
                    9d:5c:9a:f1:bc:8c:14:04:c3:d5:f4:ad:2a:10:04:
                    c5:d6:f1:f8:92:75:27:85:11:0a:11:03:58:36:ce:
                    dd:8a:db:d1:fe:38:97:d0:c8:ff:43:8b:2c:3b:d3:
                    db:c2:bd:04:e6:54:49:2a:4b:91:92:ed:bb:5d:28:
                    ee:ab:69:d4:9c:44:97:96:af:94:f0:b8:d7:bd:1d:
                    db:b0:2b:d7:b3:ba:cc:9b:64:a0:e4:20:4c:5e:ec:
                    c8:94:d0:0b:e9:a0:14:af:bb:f7:d3:b0:bd:5b:20:
                    97:8a:73:b3:2e:e8:91:4f:aa:8d:16:2d:24:42:46:
                    7c:31:d0:fe:e1:17:f4:ad:5e:cd:e8:8a:0b:2e:16:
                    75:87:a9:1a:df:7b:44:8e:f2:d3:86:d3:b0:4b:eb:
                    46:6a:b8:91:bb:03:1c:61:66:09:a8:f3:ca:03:70:
                    e7:c7:9c:93:a6:00:95:56:af:6b:20:f3:28:8d:c6:
                    b5:ad:ef:e8:05:12:0b:96:de:c8:13:79:75:cc:f9:
                    61:a0:d6:29:10:50:18:38:86:f4:b4:62:07:06:c1:
                    8f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E7:E8:2B:64:49:12:85:C3:C0:B9:19:E1:89:E2:6C:11:37:AF:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3bcba05f-1d8c-3987-93bf-43f2cc17190a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:85:3f:8c:03:dc:a3:63:b1:11:18:97:74:77:27:75:dc:e0:
         a3:0d:f4:96:66:88:d5:25:70:d7:e8:0f:27:5d:be:da:1f:38:
         8c:75:a5:06:bf:48:e8:56:11:cd:57:e1:ce:9b:a2:48:62:26:
         ad:fa:23:e6:b1:6c:83:1a:50:d4:ae:1e:2f:39:1a:61:fc:bc:
         e9:5e:20:66:a2:18:fc:8f:36:da:2d:f2:77:2d:be:82:05:2d:
         ff:b1:6e:09:9a:19:6e:c4:b9:e4:f6:75:f5:74:b7:ab:a4:e9:
         44:87:b1:17:27:21:5e:d5:bb:4e:79:30:82:20:98:af:48:2e:
         06:2d:9b:9d:c8:fc:5f:28:cb:25:10:f6:80:c6:a6:f2:6e:ae:
         14:58:fb:af:a8:ee:3e:b6:15:12:e4:d8:0d:5d:3a:c7:74:7e:
         54:ee:9c:66:4e:00:dc:04:e0:ce:e8:d9:6f:b5:b8:fe:70:88:
         60:12:af:11:cb:7e:1b:92:66:06:f9:c9:f2:da:97:7f:23:eb:
         65:c7:41:37:c1:66:18:25:ee:f6:06:63:3c:dd:75:d0:3a:50:
         57:5b:8a:4f:95:ab:e4:6b:03:84:4f:d7:f2:73:b0:d8:02:69:
         78:a0:ee:a0:1d:eb:b4:99:5f:a7:02:b1:dd:bc:8e:19:bc:3a:
         fe:48:82:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:35 2025 by rpki-client