Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4a0fe493-9adf-3b43-9795-7530d2a60861.roa
File:                     4a0fe493-9adf-3b43-9795-7530d2a60861.roa (raw, json)
Hash identifier:          2X8taMwweWretg7szWf51hK993P/oWh/gGvGx+Myw7s=
Subject key identifier:   6B:7A:B2:27:AE:16:7E:A1:25:BE:D1:98:A9:06:DE:C8:0B:13:5D:48
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CE2E5F2AB00ADB82F42E00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4a0fe493-9adf-3b43-9795-7530d2a60861.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:2e:5f:2a:b0:0a:db:82:f4:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=4fd6fe54-ac1f-4bc4-bcb9-205b375822a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:08:ae:36:1f:f9:5c:e9:aa:4e:56:16:40:51:
                    a2:63:ba:bf:93:2e:42:58:72:21:e5:26:7a:60:9c:
                    1f:c6:8f:39:f9:81:56:5b:ee:dd:11:79:25:83:c0:
                    47:b6:e2:a7:48:94:5c:9d:4a:a2:92:db:1b:4f:1a:
                    9c:8c:72:e0:54:8a:22:9f:00:d4:3d:1a:e9:92:5b:
                    0b:cc:d1:9c:92:26:7e:89:5a:10:dc:d0:7b:8b:d0:
                    bd:4e:00:62:83:61:d6:22:63:e8:55:7d:a4:76:33:
                    76:b4:ba:b0:e9:b0:83:c9:ce:75:36:57:70:30:39:
                    14:f3:ec:74:d4:c8:84:97:6e:c9:f1:41:df:5c:16:
                    8e:24:4d:cd:7a:23:06:f5:5e:91:c5:9e:86:af:fb:
                    58:1c:fc:4c:79:54:9b:49:58:12:87:1a:ad:32:7e:
                    7f:63:44:69:bf:82:90:e5:96:1b:55:86:49:17:f4:
                    c3:06:c3:bb:4d:4d:c6:37:67:51:a7:95:82:53:1b:
                    37:16:1d:92:1f:5d:58:71:38:7d:88:f3:63:62:f3:
                    3d:e9:dc:0f:45:d9:c8:a6:24:7f:08:97:3f:66:a3:
                    dc:42:75:92:a3:db:ee:3e:19:9f:ed:90:11:a1:f0:
                    75:2d:26:3d:ca:0e:76:20:52:3e:3b:19:14:c0:e6:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7A:B2:27:AE:16:7E:A1:25:BE:D1:98:A9:06:DE:C8:0B:13:5D:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4a0fe493-9adf-3b43-9795-7530d2a60861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:21:c2:19:f0:ae:78:d5:ce:45:aa:0c:ca:13:0c:e7:33:9a:
         5e:8f:d2:90:b2:c9:e8:4e:32:92:3f:e4:17:c5:5e:dc:51:a3:
         fd:4c:fa:f0:e1:59:06:3c:8a:4b:5f:e5:55:32:ce:3b:43:d1:
         84:a8:cf:48:b8:83:29:ed:4f:fe:97:8d:22:10:9e:4b:69:9b:
         59:94:fd:91:ec:ae:95:b5:88:c8:81:f5:03:55:07:88:26:74:
         52:f1:d1:fc:c7:7f:22:11:0c:b4:53:44:83:5b:fe:5b:c4:9a:
         2c:5a:f2:60:8c:a2:0a:e5:19:88:b8:91:c6:bd:4a:ff:56:d2:
         18:56:35:7f:44:6e:f2:7a:d8:ee:6b:45:40:17:94:cc:38:8e:
         08:20:70:db:2b:2e:e4:47:b7:04:26:c4:3d:6f:95:ad:09:2a:
         cd:28:f5:8e:5a:bc:34:71:12:95:39:31:aa:bb:23:28:c3:6a:
         39:dc:b1:ad:24:77:89:c5:42:e6:ca:38:1c:df:11:e9:af:82:
         7f:23:5e:7b:53:cd:19:e5:15:02:4a:f3:9c:78:fe:f4:35:b0:
         8e:ba:6a:44:64:5f:b8:f5:79:49:02:c6:f4:dc:99:05:5a:a6:
         6c:73:e4:9d:63:0c:ee:5f:b4:91:17:d7:7c:66:e6:12:d3:df:
         a1:17:b4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:40:38 2025 by rpki-client