Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/746989fd-af61-3ae5-9005-c1c87237fdb4.roa
File:                     746989fd-af61-3ae5-9005-c1c87237fdb4.roa (raw, json)
Hash identifier:          HZQrMv7JiMk4OG/EgWGMZF0IFgs1bT1i9X5/clUX8m8=
Subject key identifier:   6B:CF:EC:6F:AA:37:14:71:D8:6E:6E:7E:FF:89:98:CB:F1:6F:64:FD
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B5F375FF792BADDC1F23D8A28
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/746989fd-af61-3ae5-9005-c1c87237fdb4.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36492
IP address blocks:        136.22.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:5f:f7:92:ba:dd:c1:f2:3d:8a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=3023d9dd-9938-4cf9-b381-c8701cbc99fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:fd:a2:ff:48:da:9d:e8:1f:5f:41:34:1e:
                    87:8c:9d:a5:bc:d6:ff:6c:c5:24:47:1c:b3:71:6a:
                    d5:6b:c0:64:b7:84:bd:46:96:fb:e1:c4:e1:71:2b:
                    9c:3d:c5:c5:03:49:f6:0b:65:e3:b1:d9:bf:05:67:
                    6f:52:cd:e6:5c:2f:ae:ef:8a:f3:86:0b:03:15:90:
                    c5:b6:f0:8c:91:09:b3:cc:a9:fc:ca:fb:d3:3f:8d:
                    23:21:ec:9b:b2:ec:fd:aa:a5:9f:18:8d:1c:8d:18:
                    e1:23:cd:58:ba:01:d1:5b:6e:0a:d3:59:25:e8:9e:
                    61:05:db:bc:84:33:76:5b:67:cf:20:67:4f:04:95:
                    e2:79:03:33:f0:3b:a5:e4:43:49:78:4d:10:ff:df:
                    e7:63:70:35:c5:43:ef:a2:3f:ba:3c:50:73:ec:b0:
                    3f:bb:2d:b2:71:9a:6e:bf:2f:a8:3e:c6:03:32:de:
                    d0:26:b6:3e:d5:f5:da:b1:d0:03:5e:1b:29:26:3a:
                    c1:ff:f0:54:bb:fe:25:bf:a3:78:71:dc:86:dc:7e:
                    13:34:cd:cc:b6:12:3d:b1:5d:63:7b:25:dc:bf:01:
                    7e:3c:98:3c:f2:6b:b0:18:cb:8e:14:9e:f9:f5:04:
                    6f:4c:8c:1d:d1:57:48:82:f7:e6:ce:77:d8:f6:ef:
                    12:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CF:EC:6F:AA:37:14:71:D8:6E:6E:7E:FF:89:98:CB:F1:6F:64:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/746989fd-af61-3ae5-9005-c1c87237fdb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:36:1c:40:e7:90:1f:c3:e6:36:07:96:6b:69:9e:8d:df:55:
         e9:f1:ca:38:90:92:37:d0:8d:70:fd:e5:38:fb:41:b7:b7:e6:
         61:79:c6:88:ba:a8:cb:95:66:d2:e2:93:c5:bd:48:90:77:8b:
         98:ad:a3:cc:8f:23:7c:80:bc:9e:6d:04:bf:5b:6e:d4:b0:6f:
         ed:e3:c3:66:4d:2f:5b:52:0c:ad:d2:17:4b:db:2a:c0:2e:56:
         b2:ba:2a:57:4d:a9:ac:db:96:e6:06:0f:de:10:df:11:c9:a7:
         ba:58:e9:b3:84:11:22:85:be:65:cc:01:41:c8:6d:08:b4:78:
         8f:f1:1a:66:0b:66:15:4c:27:72:54:37:a4:2a:6d:8c:f5:d4:
         54:4d:fc:e8:79:a4:a5:7a:c4:b7:2a:b8:c4:a9:46:7a:50:8d:
         7b:e9:f3:e0:19:8f:b5:c7:dc:d8:b9:0d:90:51:95:6e:e8:f9:
         f3:0e:2e:82:03:1a:0f:fe:1a:42:ab:bd:5a:ff:fa:af:af:68:
         0e:56:0f:f2:f9:43:5a:48:95:86:1a:ca:c4:41:81:f9:5c:a1:
         2e:2c:09:37:76:14:ab:31:72:f2:bd:87:0b:69:d0:1d:26:de:
         ba:59:31:f7:49:2f:66:c3:f4:91:87:21:92:5c:d4:fe:12:58:
         32:5f:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:36 2025 by rpki-client