Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5cb6554b-fc64-3d8a-9fe3-8cee0770ea47.roa
File:                     5cb6554b-fc64-3d8a-9fe3-8cee0770ea47.roa (raw, json)
Hash identifier:          SHN1KzQ0uDJPcUmbwgKgI04+vPiEIZkrt96s7iViZ9s=
Subject key identifier:   99:A6:2D:AF:87:54:CC:A8:FF:F1:4D:CE:03:BB:F0:68:55:EF:81:15
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B5F3741CAA7D6BB1400753E40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5cb6554b-fc64-3d8a-9fe3-8cee0770ea47.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:41:ca:a7:d6:bb:14:00:75:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=d7b08ecc-8822-4641-a7ec-eb4c6cfe1780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ac:dd:3a:7b:a0:ce:d1:42:7e:81:e3:78:c8:
                    c4:2c:af:83:18:4f:3e:95:64:ef:6c:2e:1c:8a:fb:
                    ad:80:3a:c4:90:fd:59:78:58:21:9d:8a:62:4b:cd:
                    85:b6:bd:1d:a5:96:31:51:dd:1a:e2:ed:61:16:2b:
                    a1:17:57:49:5f:cd:02:40:02:3b:1f:cf:be:3a:fc:
                    d7:7d:b5:e2:49:02:b1:fb:5a:7e:82:26:65:04:0c:
                    ed:3c:3e:83:3c:1e:c0:3e:fc:6b:89:02:58:c1:fb:
                    ef:6e:c4:eb:3e:49:7d:49:81:df:7f:d3:a1:3b:9d:
                    c8:47:cc:10:4d:2b:29:cd:3c:64:ba:88:83:94:96:
                    35:6f:9c:1d:90:0f:61:02:a1:0c:49:f0:de:f1:71:
                    9f:be:60:0a:a2:da:18:38:e8:fd:b7:8c:ad:fe:92:
                    51:02:dc:9d:cf:f9:d2:2c:67:ef:09:8c:cd:59:ab:
                    d1:c3:6b:86:63:fb:7c:ac:b2:8c:39:bb:09:71:4d:
                    6a:67:6a:05:c7:cb:7b:10:73:03:7b:bf:91:e7:93:
                    95:2e:2b:8d:0c:0b:ae:e3:d4:3a:79:60:b0:1f:f2:
                    72:b7:48:99:5b:ea:33:8d:a5:28:15:01:19:46:cd:
                    5e:07:3f:a9:38:40:54:d4:4f:bd:37:05:b7:fc:be:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A6:2D:AF:87:54:CC:A8:FF:F1:4D:CE:03:BB:F0:68:55:EF:81:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5cb6554b-fc64-3d8a-9fe3-8cee0770ea47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:6f:84:6c:98:12:74:15:18:ca:a5:d5:5e:ad:d9:58:2b:39:
         50:08:05:17:38:71:4e:ca:74:8b:35:df:ab:cb:43:60:cd:35:
         bb:1d:59:54:8c:98:d7:17:8c:fe:6f:65:15:db:47:80:0b:b3:
         59:c2:e0:eb:93:fc:2a:67:7b:4c:f9:ed:0c:7f:52:b0:81:87:
         c7:8c:55:18:fd:ed:22:dc:18:19:29:d2:61:11:2f:da:25:aa:
         c6:06:c1:7e:3d:c8:98:14:97:c5:48:a3:83:c1:c8:8c:64:32:
         57:14:17:45:84:c6:7e:cc:0a:95:a2:a6:e1:20:dd:ff:7f:2b:
         1a:22:f3:62:66:dd:8a:8e:db:5d:99:44:60:8f:2c:09:fd:f8:
         77:2b:f6:47:f8:c3:29:ac:b7:99:18:63:8a:0d:dd:09:fa:87:
         47:3d:81:cc:ed:23:d6:5f:c3:fa:af:45:20:9f:c1:60:75:46:
         e1:34:0e:85:a6:e5:3b:7f:f2:2f:90:44:7c:7c:db:a8:73:50:
         63:1b:84:5a:1f:05:73:9c:03:69:b6:39:d2:ab:ac:cf:3e:43:
         46:9a:d5:3e:9b:cd:5c:33:32:dd:ec:7b:97:9d:2b:fb:b5:e9:
         43:47:89:2f:6a:90:5c:6e:94:21:e8:4e:d1:b5:cb:d5:51:8c:
         28:c3:d5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:40 2025 by rpki-client