Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/690d14b1-f81e-3654-b5dd-a756446a0bde.roa
File:                     690d14b1-f81e-3654-b5dd-a756446a0bde.roa (raw, json)
Hash identifier:          3aVfJ9DwPI2ghYG54ZineTv6zaYHVh03pmRhRrmOUJA=
Subject key identifier:   2E:6D:D3:4D:F3:DB:5B:3A:4B:70:B7:2B:42:E8:CE:25:36:B5:31:D2
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B64CD6710A0380FF0B27A9380
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/690d14b1-f81e-3654-b5dd-a756446a0bde.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:67:10:a0:38:0f:f0:b2:7a:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=3e159d49-7f6c-413f-8078-d8962e753ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:13:c7:85:35:bf:a7:1e:ba:14:09:b2:14:
                    2b:06:48:70:23:38:e1:e6:7e:46:d0:1a:fc:a1:4a:
                    8d:35:cf:7c:c2:1f:90:3f:53:a9:fe:60:1f:a2:e8:
                    f9:39:b8:7e:05:39:d6:ad:73:35:e0:18:c1:e0:15:
                    bb:b3:75:dd:29:52:1d:23:07:c3:07:0c:bc:61:61:
                    e6:69:24:2d:3a:4f:b7:5b:a4:64:12:54:8b:4f:81:
                    d4:30:bd:16:a8:17:50:b2:96:28:92:50:cf:2b:62:
                    e3:70:d4:41:5a:7a:82:4d:c0:b8:2b:b6:4c:a9:a2:
                    09:12:ee:2f:d5:1b:ab:a7:8d:70:12:1e:67:b5:ab:
                    9c:9d:5d:e8:c3:a9:c5:44:dd:61:f1:d7:40:fb:e2:
                    63:11:5f:fc:5b:ff:33:53:4f:16:86:a0:9e:2d:15:
                    49:6d:53:65:36:bf:52:4a:e4:1d:12:78:03:39:4c:
                    a2:d7:81:31:ac:8e:bc:78:d6:4b:f4:14:38:4d:f1:
                    e1:4d:e9:d7:1d:e2:4d:f3:0e:26:34:8b:06:7f:08:
                    c7:e2:19:b2:61:de:98:30:b6:50:79:b0:44:15:43:
                    4a:6a:d3:04:69:28:13:2b:70:2f:d9:d5:bf:57:98:
                    84:3e:87:bc:92:20:87:f9:01:6a:42:d5:18:b6:a2:
                    b9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6D:D3:4D:F3:DB:5B:3A:4B:70:B7:2B:42:E8:CE:25:36:B5:31:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/690d14b1-f81e-3654-b5dd-a756446a0bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:af:59:a2:ed:5a:c2:6a:04:85:6b:5b:f4:73:5b:c5:99:54:
         9b:c9:de:22:e5:be:ff:4f:df:8d:3b:07:ce:c8:3d:99:9f:96:
         32:61:13:7b:75:f3:99:5d:c4:90:a1:68:0a:05:9b:f8:54:84:
         5c:d8:6c:f5:58:97:7d:ad:cd:de:1b:89:55:59:74:f3:1c:ef:
         92:ed:22:f1:32:63:c2:b0:e7:a4:3c:66:46:6d:bc:6b:be:fe:
         2b:e6:05:9c:c5:0e:ec:aa:d7:6a:96:17:ee:89:19:a6:14:90:
         93:5a:2b:eb:b3:90:12:f4:fa:a2:97:aa:11:3d:38:3b:32:64:
         ad:6c:94:c1:98:aa:12:c9:d6:39:d7:36:7a:7b:29:f0:72:f3:
         83:33:ef:b9:41:b2:9f:8a:33:49:8d:e8:8a:ad:1d:36:20:87:
         5f:aa:f7:a5:bb:63:9a:61:cd:6d:f8:75:96:3f:35:14:b4:d8:
         2c:8e:7e:b5:22:b9:ec:91:bc:44:75:b6:9d:52:9a:8f:a7:78:
         cc:7c:aa:63:72:4a:2e:73:c9:f5:91:15:c7:e1:5d:ef:ba:60:
         db:3d:ce:da:5e:48:0d:11:07:52:36:e1:3b:88:83:01:b2:81:
         6d:44:d2:5a:c7:21:84:35:18:2d:1a:c9:bb:c0:7a:82:2b:0c:
         f8:4d:c1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:33:46 2025 by rpki-client