Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa
File:                     68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa (raw, json)
Hash identifier:          O8WcbfC4DbPjRQpEB1yysnup8+x4hb7l4AgobGHBFHg=
Subject key identifier:   B7:C6:41:A5:B4:8E:44:49:CE:3C:68:E8:79:4F:C1:67:A0:86:43:79
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CD72211A7A0B7FBAECE580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:72:21:1a:7a:0b:7f:ba:ec:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=57b7d15b-9ef6-4f99-b021-d223091a61eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:10:dd:a5:96:93:95:66:3d:9d:56:32:29:
                    74:2c:74:da:e8:81:4e:8a:83:8f:ac:13:cf:36:e1:
                    15:cc:38:df:4b:b4:59:41:4b:70:1b:d8:f7:d5:09:
                    9d:bb:89:45:8d:be:f7:aa:ca:cf:a4:86:c8:02:0c:
                    51:77:b3:21:f9:1a:81:60:f5:2c:21:2e:91:14:41:
                    81:5c:ac:06:ab:80:53:53:db:95:aa:17:1c:10:ee:
                    82:a5:8d:53:f2:ae:64:e6:be:5d:73:1d:ca:13:48:
                    f4:a9:29:b1:a2:9f:71:54:74:ca:18:a7:bc:97:24:
                    e4:a1:91:f9:47:82:43:00:fe:43:7c:8c:a2:0d:6c:
                    d1:35:67:9c:66:67:f7:97:92:e1:22:88:2e:17:11:
                    1b:1d:db:97:9a:61:f5:7d:b1:a5:2f:ba:70:2c:7e:
                    aa:e2:12:d3:0c:3d:e4:db:2d:78:43:7f:e1:2a:32:
                    5f:8c:a5:65:79:10:d8:7d:3c:21:da:aa:95:2b:34:
                    39:41:aa:98:e0:2a:12:cd:2e:82:a7:c5:aa:f0:1c:
                    6e:bc:ca:09:c0:0b:f4:ce:f5:50:2e:a6:f4:45:b3:
                    da:4b:bd:b8:56:d6:57:8e:ad:0c:a4:22:a4:53:90:
                    e9:ab:c0:cb:12:cc:48:fc:2d:b0:34:1a:b0:59:24:
                    81:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C6:41:A5:B4:8E:44:49:CE:3C:68:E8:79:4F:C1:67:A0:86:43:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/68e1f1b6-ef61-3629-b80c-4e3f0b35b357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d8:9b:32:46:33:e3:df:1e:89:92:5d:97:d7:19:d5:a1:05:
         d1:72:6d:44:5a:79:f6:3e:86:1b:9f:f5:ca:cd:ee:bb:30:59:
         3a:42:a8:11:b2:5a:f0:e3:47:ee:97:91:f4:70:bc:bc:95:be:
         e7:3b:bf:e2:d2:09:68:69:29:df:38:c9:12:32:b0:c7:cc:f2:
         72:30:5c:fc:39:94:08:5c:9e:5d:ef:d0:0f:97:0b:29:c3:b7:
         cb:c7:b3:95:47:8c:64:40:72:19:57:65:ec:99:7c:0a:3d:b3:
         e1:63:dc:8a:a7:ab:ce:d0:db:8c:00:02:ec:93:4d:09:07:29:
         9c:6f:80:a2:fd:c5:19:8e:9c:89:89:f0:d0:5c:18:37:fe:95:
         fa:a4:62:13:3f:e2:b1:72:1c:2f:b4:80:1d:3a:1e:c4:e6:bf:
         e6:b2:24:e6:39:4c:c0:d2:ae:d5:99:c0:89:60:95:af:09:c3:
         66:5e:3d:e8:9d:97:cb:5d:ae:c8:df:40:8d:fc:ac:c0:ff:c4:
         6a:13:a7:8c:42:f5:d9:aa:9e:33:bf:af:c7:2d:19:11:c4:44:
         01:48:73:d0:72:ae:ed:44:ff:d0:b1:ee:3f:89:34:e2:b4:16:
         f3:8d:85:48:99:3f:85:73:bc:f2:f3:ee:2d:60:6f:28:25:1f:
         f4:52:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:40 2025 by rpki-client