Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa
File:                     53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa (raw, json)
Hash identifier:          WfjfC8LGY0o7d8/ImNv+urVxLZ2laJ8uPcBgGKfB5j4=
Subject key identifier:   E0:C7:8D:8B:69:0F:1E:CB:39:24:E4:4D:6B:2C:0F:27:CF:2F:F4:00
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CD6E28AC020D829D628880
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:6e:28:ac:02:0d:82:9d:62:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ac23ce5b-104f-4332-9a27-7202c5c45827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:92:2e:f4:4a:db:27:ef:46:15:68:cc:8d:1f:
                    a0:59:a4:1e:5a:bf:0a:a4:d7:8d:3a:4a:f8:14:ac:
                    8f:cd:f7:61:70:d3:66:16:6f:65:80:5b:f6:6f:cd:
                    cf:c1:03:66:75:7b:28:a1:60:00:1c:53:e6:d0:84:
                    6d:25:9f:35:2b:95:83:02:4a:fa:08:4d:0a:6a:6f:
                    b5:f4:24:31:ce:74:f5:9f:de:50:c0:7b:85:72:82:
                    01:c3:15:4e:c7:2e:a1:bf:38:d2:5d:d4:3b:2b:7d:
                    21:97:55:9b:9c:3b:79:0e:57:15:21:a1:7e:e8:7c:
                    0f:5a:fc:f0:a9:76:58:eb:d9:33:d0:15:b2:1e:2f:
                    82:8e:29:b8:d9:50:43:9f:cb:65:90:4a:2c:13:af:
                    a6:84:97:de:23:2c:db:92:04:51:10:00:ad:59:b4:
                    de:d3:cc:32:a4:cd:88:90:ed:4a:15:b0:7a:34:95:
                    2e:f7:6a:c2:dd:a6:cb:fd:88:10:39:9c:eb:14:ef:
                    bf:5e:24:a6:72:25:68:7a:4a:67:83:4b:5d:6b:99:
                    ad:27:74:a9:fc:9e:4a:79:65:f0:88:5b:59:04:5d:
                    70:2d:69:3a:1e:1b:ee:be:fd:f7:4f:24:08:99:2f:
                    a5:98:5d:db:f5:8b:ac:10:c6:c6:ab:62:19:16:67:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C7:8D:8B:69:0F:1E:CB:39:24:E4:4D:6B:2C:0F:27:CF:2F:F4:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/53a8220a-7f27-36d1-a7ad-b7bd8eb345b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:22:8a:ec:88:10:00:e5:b8:8a:c6:70:06:39:b3:e1:40:a1:
         0a:5d:ed:cd:de:69:e6:f0:85:f1:e9:a4:70:30:ea:d9:19:88:
         ea:ba:36:93:2c:c5:3e:51:6e:ff:ba:cf:bd:8f:d2:fa:f5:80:
         0b:12:84:42:2a:4d:08:d2:02:ec:be:17:3f:ba:3c:2a:cc:b2:
         c4:eb:23:1a:41:13:3c:7e:06:c1:44:19:c0:cb:63:22:61:38:
         94:d9:4b:07:06:2a:42:76:26:be:f2:a4:17:91:4d:8c:fb:65:
         a1:63:d0:5e:3c:3d:38:c0:ce:71:ba:84:7b:ac:0b:3c:39:8e:
         95:fa:5b:ca:79:62:3c:d7:fc:0a:83:c1:4e:ed:96:90:74:29:
         1e:d2:5c:1e:ff:8f:12:03:6b:52:58:ae:d4:b2:e2:14:5b:18:
         c6:70:5b:0d:52:a7:99:7f:61:5a:06:d9:81:de:51:84:4e:42:
         10:a8:80:ef:0e:03:1c:37:cc:cc:29:e7:4b:82:83:fd:67:f6:
         45:77:b1:3d:24:84:c8:b3:2f:b3:a1:ba:a3:26:5d:40:ed:55:
         3d:4a:81:54:51:51:f0:7b:a6:ee:3d:6f:22:62:f2:10:ae:3c:
         e6:b1:8e:f9:2c:e4:df:f2:6c:bc:68:b0:37:1f:cf:6b:2f:83:
         e5:fe:7e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:33:44 2025 by rpki-client